DDoS Service Operator DownThem Sentenced to Two Years in Prison

Yesterday, Matthew Gatrel, the operator of the notorious DDoS services DownThem and Ampnode, was sentenced to 24 months in prison. According to investigators, users of these services previously carried out more than 200,000 DDoS attacks targeting both individuals and organizations worldwide.

Court documents state that 33-year-old Illinois resident Matthew Gatrel had been running the DownThem and Ampnode websites since at least October 2014. DownThem offered subscription-based DDoS attack capabilities, while AmpNode provided “bulletproof” hosting services for clients who needed pre-configured servers with DDoS tools and ready-made lists of vulnerable systems to amplify attacks.

DownThem was shut down in December 2018, and Gatrel was soon charged. Gatrel’s clients could choose from several subscription options, each offering different features such as attack duration, power, and the ability to launch simultaneous attacks. Investigators say DownThem had over 2,000 registered clients who collectively conducted more than 200,000 DDoS attacks. Their targets ranged from individuals to schools, universities, municipal and local government websites, and financial institutions around the world.

According to the U.S. Department of Justice, Gatrel also assisted his clients by providing manuals, recommendations, and demonstrations of his services.

At the end of last year, Gatrel was found guilty of conspiracy to commit wire fraud, unauthorized access to protected computers, and conspiracy to cause unauthorized damage to protected computers. Initially, he faced up to 35 years in prison, but was ultimately sentenced to just two years.

It’s also worth noting that Gatrel did not operate these resources alone. He was assisted in administering the DownThem site by 28-year-old Juan Martinez from Pasadena. In the summer of 2021, Martinez pleaded guilty and was sentenced to five years of probation.