NCA website falls foul of Lizard Squad DDoS attack

Four days after six teenagers were arrested as part of the National Crime Agency (NCA)’s Operation Vivarium for using Lizard Squad’s Lizard Stresser tool – a DDoS-for-hire service that lets customers pay a small fee to have a nominated website bombarded with traffic till it crashes – the NCA’s website was itself taken offline, apparently by the same league of saurian cyber criminals.

The hacking group tweeted the message “Stressed out? #offline” earlier this morning.

Stressed out? #offline

An NCA spokesman told the Guardian:

The NCA website is an attractive target. Attacks on it are a fact of life.

DDoS is a blunt form of attack which takes volume and not skill. It isn’t a security breach, and it doesn’t affect our operational capability.

At worst it is a temporary inconvenience to users of our website. We have a duty to balance the value of keeping our website accessible with the cost of doing so, especially in the face of a threat which can scale up endlessly.

The measures we have in place at present mean that our site is generally up and running again within 30 minutes, though occasionally it can take longer. We think that’s proportionate.