Wantirna computer hacker Brett White avoids jail for Openpay cyber attack

A Wantirna computer hacker who launched cyber attacks on Openpay to settle a personal gripe has had the plug pulled on his fate.

Brett White has managed to avoid jail.

An online hacker who hit businesses with crippling cyber-attacks then tried to extort money out of them has avoided jail.

Brett White, 34, was handed a 12-month suspended jail sentence in the County Court after pleading guilty to five counts of cause unauthorised impairment to electronic communication.

The Wantirna man launched “distributed denial-of-service” (DDoS) cyber attacks on Openpay, a Melbourne pool company and a UK-based online training business in April and May 2018.

A DDoS is a cyber attack targeting a victim server or computer with a large volume of traffic in an attempt to cause a system failure, the court heard.

White targeted Openpay after falling behind on repayments for a $495 purchase made at the Nike Store Eastland.

He abused an Openpay customer service employee through Facebook Messenger after the company deducted money from his account.

“So, you c***s like stealing money from people … cards do you ha-ha wrong person to do it to,” White said.

White said the Openpay website was “down” and it “doesn’t look like it’s going to be back online anytime soon”.

White said he was “completely satisfied” Openpay would be “losing a lot more money” because of his cyber attack.

Openpay confirmed multiple DDoS attacks on its website between April 18 and May 10 on dates when the company attempted to deduct money from White’s bank account.

White also launched a DDoS attack on websites owned by UK health and fitness professional Phillip Learney on April 18.

“Once I’ve got your attention, we’ll get to the glaring issues the site has,” White said.

“I hope you check these messages soon so we can get down to business and get your site secured and online generating money again.”

White then sent Mr Learney screenshots of his account passwords.

“So you’re blackmailing me,” Mr Learney said.

“Absolutely not, I’m also educating you lol,” White replied.

“Well, I’d fix this or tell your team how to fix it … In exchange for a payment … same as anyone else in this industry … they’re called bug bounty payments.”

Mr Learney replied: “You need to stop what you’re doing right now.”

White then took down Mr Learney’s websites by a DDoS attack, which lasted two hours.

“If I were you, I wouldn’t think of doing anything f*** and stupid … otherwise, every course of yours will be released for free,” White said.

“I’ve got all of your server files so I’ll just release them to everyone for free since you Wanna (sic) play gains … silly man.”

White contacted Mr Learney again on April 25.

“Haven’t forgotten about you mate :) and Your (sic) site is about to go down,” White said.

White launched DDoS attacks – with more than 100 million requests – on two Melbourne pool and garden maintenance websites owned by the same victim between May 24 and May 30.

The pair fell out over shoddy programming work White completed for the victim.

Mr Learney’s victim statement read to the court said White had committed “sinister” offending which caused him and his business much distress.

The court heard White had no formal computer training but was “self-taught” and “socially deprived”.

The father ran ‘Dark Arts Marketing’ for four years until April 2018, but was now on the dole.

White told the court he was employed as “network penetration tester” and “information security consultant” and operated a “successful” online security company.

The court was told White is contracted as a “bug bounty programmer” to detect weaknesses in websites.

White has criminal priors including use a carriage service to menace, make threat to kill, stalk another person and threat to inflict serious injury.

“He does have a bit of a common pattern which is relevant to the menacing nature of this offending,” Judge Trevor Wraight said.

White was handed a 12-month jail sentence but released immediately on the condition he provide a $3000 recognisance and be of good behaviour for two years.