Polish police identify minors selling and administering DDoS attack tools

Poland’s Central Bureau for Combating Cybercrime (CBZC) identified seven minors (aged 12–16 at the time of the alleged activity) accused of distributing and administering online tools designed to facilitate DDoS attacks, in what authorities described as a profit-driven scheme. Investigators said the tools were used to attack a range of services, including auction/sales portals, IT domains, hosting providers, and accommodation booking sites.

The investigation reportedly began after CBZC identified a 14-year-old in the Masovian Voivodeship as an administrator of the DDoS tooling; analysis of seized artifacts led to six additional suspects. CBZC conducted searches across Masovian, Lublin, Łódź, and Greater Poland, seizing alleged attack infrastructure and evidence including smartphones, laptops/computers, storage media, hard drives, a ledger, and handwritten documentation. Due to the suspects’ ages, case materials were referred to family courts for further proceedings.