Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down

Lxer • May 1, 2026

313 Team tells Canonical: pay up or the packets keep coming Canonical says its web infrastructure is under attack after a pro-Iran hacktivist group instructed its members to target the open source giant.… Full Story

« Return to the newswire homepage

This topic does not have any threads posted yet! You cannot post until you login .

You cannot post until you login .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Pro-Iran Hacktivist Group Launches DDoS Attack on Canonical's Ubuntu Infrastructure On April 30, 2026, a coordinated DDoS attack targeted Canonical, the company behind the Ubuntu Linux distribution, disrupting its web infrastructure and preventing users from accessing updates. The attack was claimed by a hacktivist group known as The Islamic Cyber Resistance in Iraq, or 313 Team, which announced the assault via their Telegram channel. The attack has resulted in widespread outages, affecting Canonical's main website and several subdomains, with users unable to download or update Ubuntu. The attackers reportedly utilized a DDoS-for-hire service called Beamed, capable of launching attacks exceeding 3.5 Tbps. As of May 1, 2026, the attack has persisted for over 20 hours, with Canonical working to restore services. The group has also indicated a shift towards extortion, threatening continued attacks unless demands are met. This incident highlights vulnerabilities in open-source systems and the risks posed by DDoS-for-hire services. 10 sources 72

Extracted Entities

Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Domains (1)

MITRE ATT&CK (1)