Mafiaboy Took Major Websites Offline at 15—and Exposed the DDoS Threat

In February 2000, some of the internet’s largest websites suddenly became unavailable. The attacker using the name Mafiaboy was Michael Calce, a 15-year-old student from Montreal.

Building a distributed attack

Calce compromised computer networks at universities and used their combined capacity to overwhelm selected websites with traffic. This made legitimate requests difficult or impossible to serve—a distributed denial-of-service, or DDoS, attack.

Targets included Yahoo, CNN, Amazon, eBay, Dell and E-Trade. At a time when online commerce was rapidly expanding, the incidents demonstrated that even famous internet companies could be knocked offline.

Michael Calce, whose 2000 attacks exposed DDoS risks.

The investigation

Because Calce was a minor, Canadian law initially protected his identity. Investigators connected him to the attacks after online boasting and evidence gathered from his systems.

He pleaded guilty in juvenile court to numerous charges and received an eight-month open-custody sentence, probation and restrictions on internet use.

From notoriety to security work

Calce later wrote and spoke about the attacks and worked in cybersecurity. His story became an early example of a former offender applying experience to defense.

The technical concept behind DDoS was not new, but the scale and visibility of the targets turned it into a boardroom concern. Modern attacks can recruit enormous botnets, making the defensive challenge far larger.

The geek lesson

Internet services depend on shared infrastructure and finite capacity. Mafiaboy’s attacks showed that compromising many ordinary systems can create extraordinary collective force—and that resilience must be designed before traffic surges arrive.