Here’s the full story.
When the attacker reached out, I expected chaos. Instead, I met someone absurdly skilled, weirdly honest, and surprisingly open about why he did it.
He’s from Russia.
And his “job” is running a full stresser service - hundreds of servers across data centers, custom built browsers with Rust, distributed load generators, all built and managed by him.
At one point he even had 479 attacks running in parallel for different customers.
He walked me through how he bypassed multiple layers of protection at
@dodopayments.
He showed me the tooling he built.
He explained how he tests hundreds of sites at once.
No ransom. No extortion.
Just….. “I don’t like weak security and I wanted to push you.”
And honestly, he did push us. Hard.
We spent 48 hours fixing gaps we didn’t know existed.
He pointed out where we were strong and where we weren’t.
He even shared suggestions on how to harden the stack further.
The wildest part?
What started as an attack turned into a conversation about infra, security, and resilience.
Internet is a strange place.
But sometimes the people trying to break you end up making you stronger.