Zotob Authors Sentenced in Morocco

By Scott M. Fulton, III | Published September 12, 2006, 7:42 PM

Two convicted developers of a worm designed last year to infect Windows 2000-based systems were sentenced today to one and two years in prison, Maghreb Arabe Presse is reporting this afternoon.

Farid Essebar, age 19, was sentenced to two years imprisonment by a court in his native Morocco for his part in producing the W2K worm, dubbed Zotob, which utilized a mass-mail attachment to copy itself into the Windows SYSTEM32 directory. From there, it would launch a process intended to preclude users from accessing certain Web sites, mainly from anti-virus vendors.

By testing the temper of security companies, Essebar and his accomplice, Achraf Bahloul -- now age 22 and sentenced to one year in jail -- managed to raise threat levels for the worm to critical levels. The FBI and Middle Eastern law enforcement agencies, at one point, worked together in an international manhunt, which at one point pegged as many as 16 suspects, according to the FBI.

The fact that there were so many suspects raised suspicions even further, as some security analysts warned of a kind of worm-writing war going on amongst members of the digital underground.

As it turned out, they were partly right: The two convicted writers did indeed want to show off for their friends and rivals. But they didn't do too great a job of it, as bugs in their own code actually prevents the payload from achieving its main objective to spread itself further.

CNN was among the many news agencies whose systems were affected by the spread of Zotob through the mail attachment, which did work. At one point, reporters in the network's own Atlanta headquarters were able to capture live images of their systems continually rebooting -- a product of the defective code -- without ever leaving the main studio.

Microsoft's most recent edition of its Malicious Software Removal Tool continues to detect and delete the multiple strains of Zotob that resulted from this little skirmish in one of the shallower corners of the digital underground.

Comments

CNN's computers rebooting live. What a memorable TV moment. Maybe Larry King could interview the worm sometime?

Score: 0

|

"little skirmish in one of the shallower corners of the digital underground"

Nice!

Score: 0

|

Can Linux do BitLocker better than Windows 7?

Betanews kicks off a new series with a look at how the Linux operating system's FDE stacks up against BitLocker, the Windows feature that today commands a $120 premium.

Firefox 3.5: The need for speed

This has been the big payoff week for Mozilla's developers, who worked overtime to squeeze out the last drop of performance from their new JavaScript engine.

'GeoHot' gets a shower, cleans up nice, reveals new iPhone 3G S jailbreak

Either puberty has been very kind to the author of the new 'Purple Ra1n' jailbreak tool, or George Hotz may also have some adequate Photoshop skills.

What's Next: Obama gives 'Einstein' the go-ahead, while China gives 'Green Dam' a thumbs-down

Plus: If you put up a Web site and name it after you and you're a federal judge, you might not want a bunch of weird nudity hanging around on it.

Why would Windows 7 customers spend $120 more for BitLocker?

For pre-orders from now until July 11, Microsoft is offering the Windows 7 Professional SKU for a very steep discount. So why invest in Ultimate?

Geeks vs. journalists: A tale of two worldviews

Recovery with Angela Gunn Why geeks think most mainstream journalism is flaky, and why the mainstream thinks geeks are trying to kill them. (They're both right.)

Fire in downtown Seattle data center knocks out businesses, online services

Small fire has global impact with payment centers, city services down.

Hybrid satellite cell phones aren't far off

The first satellite in Terrestar's hybrid cellular/satellite phone network has been launched.

SMS could be a critical iPhone vulnerability, says white-hat hacker

Mac hacker Charlie Miller knows how to get into your iPhone.

Will Oracle's Java-based Fusion middleware 'fuse' with Java?

Now that Oracle has acquired Sun Microsystems, Java developers and supporters are wondering when Oracle will formally welcome Java into the family.

All together now: iPhone and Palm Pre, likely to both grace O2's UK portfolio

European wireless network operator O2 has reportedly reached a deal to exclusively carry the Palm Pre in the UK. O2,...

Vista's dead: Microsoft kills an OS and no one cares

Carmi Levy: Wide Angle Zoom Can you kill an operating system? Microsoft is about to find out.

Kantaris Media Player 0.5.7

July 3 - 5:34 PM ET

Wine 1.1.25

July 3 - 5:30 PM ET

ChrisTV Online! Free 4.00

July 3 - 5:22 PM ET

glu 1.0.19 RC1

July 3 - 5:11 PM ET

Website-Watcher 5.1.0 Beta 10

July 3 - 1:20 PM ET