Authorities in Morocco have given two men prison sentences to for their part in writing and unleashing the Zotob worm which disrupted computers at CNN, The Financial Times, ABC, and The New York Times.
The court sentenced Farid Essebar, a 19-year-old science student, to two years in jail and 22-year-old Achraf Bahloul to one year.
The Zotob worm exploited the critical MS05-039 security vulnerability in Microsoft software in August 2005. Among Zotob's victims was the CNN news station whose programming was disrupted because of infected computers.
Graham Cluley, senior technology consultant at vendor Sophos, said: 'The Zotob gang took over the computers of innocent companies with the intention of making money. By blasting their way into PCs via a Microsoft vulnerability they ripped control of the computer away from its owner and into the hands of hackers.'
'Once the PCs were under their control they could steal information such as credit card details and passwords, as well as potentially use the computers for launching spam and distributed denial-of-service attacks.'
Essebar, a Russian-born resident of Morocco, is believed by Sophos to have used the handle 'Diabl0', a phrase embedded inside the Zotob-A worm. It is not unusual for malware authors to leave their handles inside their malicious code, sometimes alongside other messages. Sophos researchers have linked 'Diabl0' to over 20 other pieces of malware.
According to authorities in Morocco, Essebar and Bahloul worked closely with an accomplice in Turkey, named as Atilla Ekici by the FBI. Essebar and Ekici were arrested in Morocco and Turkey 12 days after the initial attack.
Sophos says Zotob reflects the increasing trend of financially-motivated malware attacks.
'More and more malicious code is written with the intention of filling the pockets of the hackers,' said Cluley.
The authorities should be congratulated for working together to apprehend this gang, and for sending out a clear message that the crimes they committed are not going to be tolerated.
What do you think? Email us at feedback@computing.co.uk
Further Reading:
reader comments