The security experts have observed a massive spike in activity compared to 2011, mostly originating from locations in Russia, Canada, China, Australia and the USA.

The CERT group operates a system that scans for online threats and the attack on BitTorrent triggered several of their honeypot sensors. These attack sources send data packages that appear to be legitimate, but the IP-addresses they send are forged.

The security researchers, who say these poisoning attacks are happening on a massive scale, observe that they are targeted at specific BitTorrent swarms sharing Russian movie releases.

One of the likely explanations for these poisoning attacks is that anti-piracy outfits are utilizing them to “protect” their clients’ movies. For example, these outfits could overload BitTorrent swarms with corrupt data or “disconnect” messages while masquerading as legitimate downloaders.

This is exactly what the Microsoft funded startup Pirate Pay appears to be doing although other companies may also use similar methods. A company called ICM is currently listed as “protecting” the Russian film that was the subject of the attacks identified by CERT.

The security researchers don’t make any conclusive claims about the origins of the attacks, but they do note that anti-piracy groups are a possible source.

“At least one interest group that would benefit from uTP poisoning is easy to point at: multimedia companies and their subcontractors. Conduction of this kind of campaign by these institutions wouldn’t be precedent. It’s also possible that generated traffic is used for BitTorrent network mapping and data gathering for later use in other projects,” CERT comments.

Perhaps of even more interest, CERT also notes that the poisoning attack, or anomaly as they call it, may very well breach cybersecurity law.

“[The attacks] produce visible disruption in IT systems and large amounts of our false-positive high-level alerts is a good proof. In terms of Polish law, European Convention on Cybercrime and U.S. Codes (and probably many other sources of domestic law) legality of process producing the anomaly is questionable,” the security experts note.

In other words, the techniques these anti-piracy outfits appear to be using to prevent people from sharing copyrighted movies could be illegal. If that is the case then the movie companies who hire these anti-piracy outfits may be complicit in cybersecurity crimes.

That would be a problem.

TorrentFreak contacted the CEO of the Microsoft-funded Pirate Pay for a comment on the legality of his service, but we are yet to receive a reply. More details about the specifics of the attacks are available on the CERT website.

Source: TorrentFreak, for the latest info on copyright, file-sharing and anonymous VPN services.

Billions in revenue are lost each year, they claim. But not for long if the Russian based startup “Pirate Pay” has its way. The company has developed a technology which allows them to attack existing BitTorrent swarms, making it impossible for people to share files.

The idea started three years ago when the developers were building a traffic management solution for Internet providers. The technology worked well. It was able to stop BitTorrent traffic if needed, which made the developers realize that they might have built the holy anti-piracy grail.

“After creating the prototype, we realized we could more generally prevent files from being downloaded, which meant that the program had great promise in combating the spread of pirated content,” Pirate Pay CEO Andrei Klimenko says.

With this new business model in mind the company continued to develop their product, and it didn’t take long before an investor was willing to support it. Last year Pirate Pay received a $100,000 investment from the Microsoft Seed Financing Fund.

Microsoft Russia’s president praised the innovative idea, which his company would also be able to use in the future.

With the cash injection the company continued working on their anti-piracy solution and December last Direktcya Kino was the first to hire Pirate Pay’s services. For a month Pirate Pay’s technology protected the film “Vysotsky. Thanks to God, I’m alive,” (distributed by The Walt Disney Studios Sony Pictures Releasing company) with moderate success.

The company doesn’t reveal how it works, but they appear to be flooding clients with fake information, masquerading as legitimate peers.

“We used a number of servers to make a connection to each and every P2P client that distributed this film. Then Pirate Pay sent specific traffic to confuse these clients about the real IP-addresses of other clients and to make them disconnect from each other,” Andrei Klimenko says.

The end result was that 44,845 transfers were successfully stopped. How many downloads slipped through, and whether the downloaders didn’t simply try again later is unknown. Pirate Pay don’t disclose their exact rates but say they charge between $12,000 and $50,000 depending on the scope of the project.

While Pirate Pay claim their technology is truly unique, it is not the first company to tackle BitTorrent piracy. The now defunct MediaDefender charged hundreds of thousands of dollars to attack BitTorrent trackers and upload fake torrent files.

MediaDefender was rebranded to Peer Media, and under this brand they continue to offer these and other anti-piracy services.

Whether Pirate Pay is truly different and more effective than any of the other solutions remains to be seen. Even if it’s hugely effective, the scattered nature of BitTorrent makes it practically impossible to stop all infringing downloads of a movie, while the costs may outweigh the “losses” that are prevented.

Companies that really want to make Pirates Pay are probably better off investing in improvements to their legal offers.

Article updated to emphasize that Direktcya Kino was the first client.

Source: TorrentFreak, for the latest info on copyright, file-sharing and anonymous VPN services.