Israeli court sentences the co-owners of vDOS, a now defunct DDoS-for-hire service, to six months of community service
Brian Krebs / Krebs on Security :
Context & Ripple Effects
The case closes four years after the hack that exposed vDOS's customer list and its $600K-plus take from more than 150,000 attacks, which triggered the FBI investigation behind the co-owners' arrest days later.
The outcome lands oddly light against the record: a British man drew a two-plus-year sentence for a single ISP-commissioned attack, and a US-based attacker got a 27-month term for attacks on gaming services — while the operators of the largest DDoS-for-hire platform itself receive six months of community service.
First-order effects
- The two co-owners walk away without prison time despite vDOS generating $600K+ over roughly two years, capping a case built on Krebs' 2016 exposure of the service's customer and target data.
Second-order effects
- The sentence widens the enforcement gap the US DOJ is trying to close with its seizure of 48 booter sites and charges against six operators, raising the question of whether takedowns translate into comparable punishment across borders.
Third-order effects
- Combined with Germany's suspended two-year sentence for the Share-Online cyberlocker operator, the pattern suggests criminal-marketplace cases increasingly end in negotiated, non-custodial outcomes rather than deterrent prison terms — leaving takedowns, not sentencing, as the real enforcement lever.
The trend: Enforcement against DDoS-for-hire and criminal-marketplace operators has shifted from individual prosecutions to coordinated takedowns, while actual sentences vary so widely by jurisdiction that deterrence now rests on disruption rather than punishment.