Using computer to commit a crime in darkness.
Using computer to commit a crime in darkness.

Oregon man charged with running massive DDoS-for-hire botnet targeting 80 countries

Posted by
1 min read
August 25, 2025

Anchorage, AK – A 22-year-old Oregon man has been charged with operating one of the most powerful distributed denial-of-service (DDoS) botnets ever uncovered, allegedly launching over 370,000 attacks worldwide through a malware network known as “Rapper Bot.”

Federal prosecutors announced Tuesday that Ethan Foltz of Eugene was charged in the District of Alaska with aiding and abetting computer intrusions. Investigators say Foltz was the administrator behind Rapper Bot—also called “Eleven Eleven Botnet” and “CowBot”—a DDoS-for-hire operation that compromised tens of thousands of devices and was rented out to paying customers.

Court records allege Rapper Bot infected 65,000 to 95,000 internet-connected devices, primarily WiFi routers and DVRs, and turned them into a global cyberweapon. Victims spanned over 80 countries and included a U.S. government network, a popular social media platform, and multiple U.S. tech companies. In some cases, the attacks allegedly reached beyond six Terabits per second in size.

Between April and August, Rapper Bot is believed to have launched hundreds of thousands of attacks, targeting more than 18,000 unique systems. Five of the compromised devices were located in Alaska, where the case is being prosecuted. Officials say the financial fallout from even a single 30-second attack of that magnitude could cost victims up to $10,000.

Law enforcement seized control of Rapper Bot during a search of Foltz’s home on August 6. The Defense Criminal Investigative Service (DCIS) has since taken over the infrastructure, and no further attacks have been reported since the transfer.

Investigators also allege the botnet was used by some clients to extort victims, threatening sustained DDoS attacks unless demands were met.

Foltz faces a maximum of 10 years in federal prison if convicted. Sentencing will be determined by a district court judge following consideration of sentencing guidelines.


Key Points

  • Oregon man charged with running DDoS-for-hire botnet known as Rapper Bot
  • Botnet allegedly launched 370,000+ attacks targeting over 80 countries
  • Rapper Bot infrastructure now under control of U.S. cyber defense agencies

Authorities say a DDoS-for-hire empire built on infected routers has finally been unplugged.

Phil Stilton

Phil Stilton is the Editor and Publisher of Shore News Network, an independent digital newsroom providing original reporting on New Jersey, national news, government, public policy, public safety, courts, and community affairs.

As founder of the publication, Stilton leads editorial strategy, investigative reporting, and daily newsroom operations while overseeing coverage that reaches millions of readers annually.

With extensive experience covering municipal government, county government, state legislatures, elections, law enforcement, emergency management, and public records, Stilton specializes in translating complex government actions into clear, factual reporting. His work frequently relies on primary source documents, including court filings, legislation, public meeting records, election finance disclosures, government databases, police reports, and Freedom of Information and Open Public Records Act (OPRA) requests. He has reported extensively on local government accountability, taxpayer spending, campaign finance, public corruption investigations, infrastructure, public safety, and the policies affecting New Jersey residents.

Under Stilton's editorial leadership, Shore News Network has grown into one of New Jersey's largest independent digital news organizations, publishing thousands of original news articles each year while providing breaking news coverage, investigative reporting, and analysis across state and local government. The publication's reporting is routinely sourced from official government agencies, public officials, court records, and firsthand documentation, with a commitment to transparency, attribution, corrections when warranted, and clearly distinguishing factual reporting from opinion.

Stilton's journalism follows established newsroom standards emphasizing accuracy, verification, fairness, and accountability. Every effort is made to verify information through official records and multiple reliable sources before publication. His reporting is intended to provide readers with timely, well-documented information that helps them understand the issues affecting their communities, while maintaining editorial independence from political parties, government agencies, advocacy organizations, and commercial interests.

Readers can submit story tips, corrections, public records, or media inquiries through the official Shore News Network website or its verified social media channels. Shore News Network welcomes corrections and updates when new information becomes available as part of its ongoing commitment to accurate and transparent journalism.

Facebook

Don't Miss