Hacker News Reader

Comment by just_some_user | Hacker News Reader

The actual interesting part about such an attack is not that something is down, but rather why someone would run it. A lot of DDoS originates from script kiddies, but such attacks are usually very short lived as attacks are expensive. So which actor would actually benefit from downing the Norwegian government?

View on HN

It is not expensive, unfortunately :(

Flare + BleepingComputer 2026, Kaspersky, StormWall, and others show that the DDoS-as-a-service market is highly commoditized and prices are extremely low:

A short test / basic attack on a website: $5–25.

Daily attack on a poorly protected target: around $100/day.

A more robust or well-protected target: $200–500 per day.

Monthly subscription to booter/stresser services: often $15–40 (sometimes even less); premium packages cost hundreds of dollars.

Larger or longer-term campaigns or infrastructure: thousands of dollars.

On the governmental level these money are almost nothing if you want to hurt someone else…

DDoS tends to be monetised as DDoS-as-a-service. Taking down "significant" services is good advertising. Either that, or they plan to extort the Norwegian government.

But for such a "proof of power" a short attack which takes the service down once is enough, long attacks are not so common and actually require some work from the attacker

If the attack doesn't last long, bystanders can't know whether it was trivially mitigated by the victim.

A shorter attack won't make as many news headlines, either.

Unless part of the social proof is that mitigation is more difficult.

Probably a country that lost to Norway in the World Cup.

is there actually any source those attacks are really done by "script kiddies"?

More likely this more politically motivated and backed up by money and more capable groups

i don't think script kiddies are a thing anymore.

AI kiddies, more likely. in some ways script kiddies weren't a thing for a decade or more as the attack surface got considerably harder to penetrate, and the model changed for pay-to-play attacks. AI simply caused the bottom of that market to fall further, and effectiveness to increase.

Yes, thats what I meant

What do they benefit from taking down any government, NGO or civic work program? American systems, as well as larger European systems are constantly attacked. I've seen the same traffic. Fire walling off China, North Korea and smaller eastern European countries is a must if you ever plan to expose any internet exposed services.

It hasn't been majorly like that in twenty years.

Botnets are services now, a business. They gain customers by their effectiveness and resilience.

For $$50-100 you can deny service to a lot of big sites and services.

I've seen people say this but no proof of it. Could I really take down Stack Overflow for $50? Oh wait, it took itself down for free.

Trivial to google and find, for example https://overload.st/

Imo russia most likely

almost certainly. they're hitting all NATO governments, and Norway is a direct competitor in the arctic.

Really, you have no one in mind? Someone who is sending hundreds of bombing drones daily to Ukraine, killing civilian population, women and children, and who is eager to send a message to NATO countries any way possible?

That is much less effective than every other manner they tested on the past few years such as shadow fleets, ghost satellites etc.

Up to the moment it has not been the operation adopted which would make it weird.

On who would do it then, anyone who benefits from instability. From corporations trying to sell flocked uped sytems, politicians, etc.

There is one south american country who was attacked exactly this way before their head of the government was kidnapped.

You don't understand Kremlin's mentality. Any even little nasty thing they can do to the West makes them giggle like Doctor Evil. "Oh, a NATO country's government infra was not protected from DDoS? Let's have fun, haha!" You are dealing with story book villains. I know, this sounds so ridiculous it's hard to believe someone can actually be like this. But then the reality check hits.

They aren't story book villains. I think this says a lot about your mentality.

Story book villains usually have better justification for their evil acts than the Russian government.

Is Israel supplying drones to Ukraine? Good on them.

> So which actor would actually benefit from downing the Norwegian government?

do we really need to ask?

clearly it's the Danes

those script kiddies control botnets in foreign countries and use them to attack stuff just bc. its not their compute, so no marginal cost to them

The UK. It wants to steal Norway's vast stores of electricity.

"vast stores of electricity"?

Electricity production in Norway is predominantly hydroelectric.

When it rains dams fill up. The water is drained into shafts with turbines, and electricity is generated.

However, even though we are big on hydroelectricity percentage wise I’m not sure it’s all that vast an amount of electricity on a global scale. We are a pretty small country after all.

According to Wikipedia, the Norwegian electricity sector had 40.26 GW installed capacity as of 2021 and was producing 157.113 TWh in the same year. [1]

Great Britain had 74.8 GW installed capacity in 2023 and was producing 292.7 TWh in 2023. [2]

France was producing 537.7 TWh in 2020. [3]

Germany was producing 488.5 TWh in 2024. [4]

[1]: https://en.wikipedia.org/wiki/Electricity_sector_in_Norway

[2]: https://en.wikipedia.org/wiki/Electricity_in_Great_Britain

[3]: https://en.wikipedia.org/wiki/Electricity_sector_in_France

[4]: https://en.wikipedia.org/wiki/Electricity_sector_in_Germany

It stored energy. It's not stored electricity.

Reply on news.ycombinator.com