Canonical's Ubuntu infrastructure is under sustained cross-border DDoS attack from pro-Iran hacktivist group 313 Team. The group escalated from hacktivism to explicit extortion, demanding payment via Session contact and threatening continued attacks. Ubuntu.com and subdomains remain offline, blocking distribution downloads and account access.
Infrastructure
Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down
Pro-Iran hacker group 313 Team escalates Ubuntu DDoS into explicit extortion, converting a service outage into ransom demand and forcing Canonical into crisis negotiation while infrastructure remains offline.
Friday, May 1, 2026 12:00 PM UTC2 MIN READSOURCE: Hacker NewsBY sys://pipeline
Tags
infrastructure
/// RELATED
Infrastructure4d ago
Ubuntu servers taken offline by "sustained, cross-border attack"
Pro-Iran threat group using commercial DDoS stressor knocked Ubuntu's infrastructure offline for 24+ hours, exposing supply-chain risks in critical Linux infrastructure.
Infrastructure4d ago
Ubuntu services hit by outages after DDoS attack
Hacktivists leveraged a DDoS-for-hire service to disable Ubuntu's package repositories and security APIs for 20 hours, exposing critical open-source infrastructure to low-cost cross-border attacks.