In a stunning cybersecurity twist, a Brazilian company contracted to protect websites from distributed denial-of-service (DDoS) attacks has been secretly orchestrating the very attacks it was hired to mitigate. The revelation, which emerged from security research, exposes a betrayal of trust that could have severe repercussions for the firm's clients and the broader tech industry.
"The company protecting you was secretly attacking you," the report states, highlighting the audacity of the scheme.
The firm, whose name has not been publicly disclosed pending investigation, allegedly used its position to launch attacks on unsuspecting targets, then charged customers for defense services. Security experts are urging companies to review their DDoS protection contracts and monitor for suspicious patterns.
This incident underscores the need for rigorous vetting of cybersecurity providers and independent verification of security claims. As cyber threats evolve, so must the methods to ensure those entrusted with protection are not the ones wielding the weapons.