Food Delivery Website in Germany Targeted by DDoS Attackers

Malicious individuals targeted a food delivery website located in Germany with a distributed denial-of-service (DDoS) attack. Jitse Groen, founder and CEO of the Germany-based food delivery service Takeaway (Lieferando.de), announced on March 18 that his company had suffered a DDoS attack. https://twitter.com/jitsegroen/status/1240332307262832642 In the picture included in Groen's tweet, those responsible for the DDoS attack demanded that Takeaway pay a ransom amount of 2 bitcoin (worth approximately $11,000 at the time of writing). The malicious actors told Takeaway that they would "help you protect you company" if they complied with their demands. Even so, they threatened to attack other websites operated by Takeaway if the company met them with non-compliance. Shortly after Groen issued his tweet, Lieferando.de tweeted out its own disclosure about the attack. https://twitter.com/lieferando/status/1240347680699830273   Here's the English translation, as provided by Google Translate:

Our systems have been attacked and are currently under maintenance to ensure the security of all data. This can lead to a delay in order processing. We apologize for the inconvenience and hope to return to normal soon.

Some customers responded to Lieferando.de's tweet with complaints that the company had accepted new orders despite its systems being unavailable due to the DDoS attack. In response, the company issued a subsequent tweet in which it reassured customers that that it was willing to refund orders which it had failed to deliver due to the attack. It asked customers to reach out by email so that they could file a refund claim for an order processed online. Lieferando.de was back online at the time of writing. It was unclear from the food delivery service's website as well as from Bleeping Computer's coverage of the DDoS attack whether Takeaway.com had agreed to pay the ransom demand. The attack described above highlights the need for organizations to defend themselves against a distributed denial-of-service attack. Organizations can use this resource to familiarize themselves with this type of attack and learn about anti-DDoS attack best practices.