Israeli police, acting on a tip from the US Federal Bureau of Investigation, arrested two 18-year old men for allegedly running a cyber attack service that may be responsible for "a majority" of the Distributed Denial-Of-Service (DDoS) attacks over the last few years.

Itay Huri and Yarden Bidani are free on AU$14,000 bond each;  "Their passports were deposited with the police and they are prohibited from leaving the country or communication with others involved in the case for 30 days," read the police statement, which also specified that the kids must stay off of any internet or telecom equipment for that period.

Huri's and Bidani's vDOS company allegedly earned US$618,000 over the past two years - and because of the opacity of PayPal and BitCoin, that may be a very conservative figure - by carrying out DDoS attacks on websites on behalf of paying clients. 

According to former Washington Post reporter and internationally-recognized security expert Brian Krebs, the evidence trail that led to the two accused men was "remarkably careless":  They refused to attack sites in their home country; they used a server that traced back to Huri; They published technical paper about DDoS attacks in an Israeli security magazine called Digitals Whispers, and Huri used the same email address he used as an admin of vDOS.  Ironically, vDOS was itself hacked by rivals, "spilling secrets about tens of thousands of paying customers and their targets,” as Krebs wrote on his blog.