Low Orbit Ion Cannon
|Original author(s)||Praetox Technologies|
1.0.8 / 13 Dec 2014
|Operating system||Windows, Linux, OS X, Android, iOS|
Low Orbit Ion Cannon (LOIC) is an open-source network stress testing and denial-of-service attack application, written in C#. LOIC was initially developed by Praetox Technologies, but was later released into the public domain, and now is hosted on several open source platforms.
LOIC performs a DoS attack (or when used by multiple individuals, a DDoS attack) on a target site by flooding the server with TCP or UDP packets with the intention of disrupting the service of a particular host. People have used LOIC to join voluntary botnets.
Security experts quoted by the BBC indicated that well-written firewall rules can filter out most traffic from DDoS attacks by LOIC, thus preventing the attacks from being fully effective. In at least one instance, filtering out all UDP and ICMP traffic blocked a LOIC attack. Because internet service providers provide less bandwidth to each of their customers in order to provide guaranteed service levels for all of their customers at once, firewall rules of this sort are more likely to be effective when implemented at a point upstream of an application server's internet uplink. In other words, it is easy to cause an ISP to drop traffic destined for a customer by sending a greater amount of traffic than is allowed on that customer's link, and any filtration that occurs on the customer side after the traffic traverses that link will not stop the service provider from dropping excess traffic destined for that customer.
LOIC attacks are easily identified in system logs, and the attack can be tracked down to the IP addresses used.
Project Chanology and Operation Payback
LOIC was used by Anonymous (a group that spawned from the /b/ board of 4chan) during Project Chanology to attack websites from the Church of Scientology, once more to (successfully) attack the Recording Industry Association of America's website in October 2010, and it was again used by Anonymous during their Operation Payback in December 2010 to attack the websites of companies and organizations that opposed WikiLeaks.
In retaliation for the shutdown of the file sharing service Megaupload and the arrest of four workers, members of Anonymous launched a DDoS attack upon the websites of Universal Music Group (the company responsible for the lawsuit against Megaupload), the United States Department of Justice, the United States Copyright Office, the Federal Bureau of Investigation, the MPAA, Warner Music Group and the RIAA, as well as the HADOPI, all on the afternoon of January 19, 2012, through LOIC. In general, the attack hoped to retaliate against those who Anonymous members believed harmed their digital freedoms.
Origin of name
While downloading and using the LOIC on one's own personal servers as a means of stress-testing is perfectly legal at least in the United States, using the program to perform a DDoS attack on other parties could be considered a felony under the Computer Fraud and Abuse Act of 1986. (CFAA) This charge could result in up to 20 years of imprisonment, a fine or both. 
- SourceForge: 
- "Praetox Techlologies". Archived from the original on 2010-10-08.
- "LOIC | Free Security & Utilities software downloads at". Sourceforge.net. Retrieved 2014-11-17.
- "NewEraCracker/LOIC · GitHub". Github.com. Retrieved 2013-11-22.
- "Pro-Wikileaks activists abandon Amazon cyber attack". BBC News. 9 December 2010.
- Warren, Christina (December 9, 2010). "How Operation Payback Executes Its Attacks". Mashable.
- "Command & Conquer FAQ/Walkthrough for Nintendo 64 by DTran - GameFAQs". www.gamefaqs.com. Retrieved 9 May 2017.
- Miller, Frederic P.; Vandome, Agnes F.; John, McBrewster (27 November 2010). "Operation Payback". VDM Publishing. Retrieved 9 May 2017 – via Google Books.
- Chapple, Mike; Chapple, University of Notre Dame Mike; Seidl, David (1 August 2014). "Cyberwarfare". Jones & Bartlett Publishers. Retrieved 9 May 2017 – via Google Books.
- "Anonymous Wikileaks supporters explain web attacks". BBC. 10 December 2010. Retrieved 11 December 2010.
- "The attacks on GRC.COM" (PDF). GRC.com. 2001-02-06. Retrieved 2012-01-25.
- Nardi, Tom (March 3, 2012). "Low Orbit Ion Cannon: Exposed". The Powerbase. Archived from the original on March 6, 2012. Retrieved March 4, 2012.
- Hachman, Mark (October 29, 2010). "'Anonymous' DDoS Attack Takes Down RIAA Site". PC Magazine.
- Moses, Asher (December 9, 2010). "The Aussie who blitzed Visa, MasterCard and PayPal with the Low Orbit Ion Cannon". The Age. Melbourne.
- "Anonymous Wikileaks supporters mull change in tactics". BBC News. December 10, 2010.
- "Anonymous Hackers Hit DOJ, FBI, Universal Music, MPAA And RIAA After MegaUpload Takedown". Forbes. Retrieved 2013-11-22.
- "THE INFORMATION DEFENSE INDUSTRY AND THE CULTURE OF NETWORKS - Amodern". Amodern. Retrieved 2018-11-09.
- Homeworld, Homeworld 2, Unreal Tournament 2004, Ogame, Ratchet & Clank: Up Your Arsenal, StarCraft
- metatags generator (2012-09-27). "Low Orbit Ion Cannon". Web.archive.org. Archived from the original on September 27, 2012. Retrieved 2013-11-22.CS1 maint: unfit url (link)
- "18 U.S. Code § 1030 - Fraud and related activity in connection with computers". LII / Legal Information Institute. Retrieved 2018-10-07.
|Wikimedia Commons has media related to Low Orbit Ion Cannon.|
- Original LOIC with professional GUI
- LOIC Special Lowbandwidth Operating Weapon
- An improved version of LOWC forked from GoogleCode
- LOIC IRC-0 IRC controlled version of LOIC-0
- LOIC SLOW Now With IRC and Webpage as C&C
- project development and downloads at SourceForge
- LOIC project development and downloads at GitHub
- Web version of LOIC at Google Code