Back to Feed
Threat IntelligenceNov 10, 2026

Dark Storm Team Expands DDoS-for-Hire Operations, Demands $5,000 to Stop Alleged Amino Attack

Dark Storm Team offers DDoS-for-hire services and extorts victims, demanding $5,000 to stop an alleged Amino attack.

The Dark Storm Team is expanding its cybercrime operations by offering distributed denial-of-service (DDoS) for hire and engaging in extortion. Investigations into their Telegram activity revealed a $5,000 cryptocurrency demand to cease an alleged attack on the Amino social app, dating back to October 2025. The group also advertises DDoS services with various pricing tiers and has offered other illicit services like social media account access and database dumps.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Amino?

Get an email when a new story names Amino, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

Dark Storm Team illustrates the growing commercialization of DDoS-as-a-service, where low-skill actors can purchase disruptive attacks against any target and then layer extortion demands on top. The group's open advertising on Telegram — including tiered pricing, database dumps, and social media account sales — shows how cybercrime ecosystems enable even moderately resourced adversaries to cause significant harm. Organizations like Amino that become targets may face both service disruption and extortion pressure simultaneously, compounding the incident response challenge. This matters because without proactive DDoS mitigation and a clear extortion response playbook, victims are left reacting under duress, which often leads to poor decisions such as paying ransoms.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — GLITCH

Entities

Dark Storm Team (threat_actor)Team1914 (threat_actor)NoName057(16) (threat_actor)DDoSia Project (threat_actor)Amino (product)Telegram (product)