+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: World News (https://sinister.ly/Forum-World-News)
+--- Thread: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI (/Thread-Marcus-Hutchins-WannaCry-killer-hit-with-four-new-charges-by-the-FBI)
Pages:
1
2
Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - Wezuviy - 06-07-2018
Marcus Hutchins, the British malware analyst who helped stop global Wannacry menace, is now facing four new charges related to malware he allegedly created and promoted it online to steal financial information.
Hutchins, the 24-year-old better known as #, was arrested by the FBI last year as he was headed home to England from the DefCon conference in Las Vegas for his alleged role in creating and distributing Kronos between 2014 and 2015.
Kronos is a Banking Trojan designed to steal banking credentials and personal information from victims' computers, which was sold for $7,000 on Russian online forums, and the FBI accused Hutchins of writing and promoting it online, including via YouTube.
Hutchins pleaded not guilty at a court hearing in August 2017 in Milwaukee and release on $30,000 bail.
However, earlier this week, a revised superseding indictment was filed with the Wisconsin Eastern District Court, under which Hutchins faces four new charges along with the six prior counts filed against him by the FBI a month before his arrest.
Marcus Accused of Creating and Selling Another Malware:
According to the new indictment, Hutchins created a second piece of malware, known as "UPAS Kit," and also lied to the Federal Bureau of Investigations (FBI) when he was arrested and questioned last year in Las Vegas.
As described by prosecutors, UPAS Kit is Spybot virus that "allowed for the unauthorized exfiltration of information from protected computers" and "used a form grabber and web injects to intercept and collect personal information," including credit card details.
UPAS Kit advertised to "install silently and not alert antivirus engines," for prices ranged above $1,000 back in 2012.
According to the indictment, Hutchins created UPAS Kit in 2012, when he was just 18, and sold it online to another unnamed co-defendant identified as "VinnyK" (aka Aurora123), who was also involved in promoting Kronos.
Full reading: https://thehackernews.com/2018/06/marcus-hutchins-malware.html
RE: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - Pikami - 06-07-2018
And that kids, is why you shouldn't keep your code on your devices while traveling.
Also, when prosecutors go for "lying to an investigator" it's because they've got literally nothing else...
RE: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - mothered - 06-08-2018
(06-07-2018, 05:23 PM)Pikami Wrote: And that kids, is why you shouldn't keep your code on your devices while traveling.
Alternatively, keep It but encrypt the device, preferably two forms/layers of encryption- an encrypted volume Inside an encrypted device.
AES-Twofish-Serpent ciphers will suffice.
RE: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - Pikami - 06-08-2018
(06-08-2018, 05:44 AM)mothered Wrote:(06-07-2018, 05:23 PM)Pikami Wrote: And that kids, is why you shouldn't keep your code on your devices while traveling.
Alternatively, keep It but encrypt the device, preferably two forms/layers of encryption- an encrypted volume Inside an encrypted device.
AES-Twofish-Serpent ciphers will suffice.
I'll just post this here:
![[Image: fHIFH0e.png]](https://i.imgur.com/fHIFH0e.png)
RE: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - mothered - 06-08-2018
(06-08-2018, 09:28 AM)Pikami Wrote:(06-08-2018, 05:44 AM)mothered Wrote:(06-07-2018, 05:23 PM)Pikami Wrote: And that kids, is why you shouldn't keep your code on your devices while traveling.
Alternatively, keep It but encrypt the device, preferably two forms/layers of encryption- an encrypted volume Inside an encrypted device.
AES-Twofish-Serpent ciphers will suffice.
I'll just post this here:
Nice, however users need to think laterally and work around the obvious. People hear the word "encryption" and assume a password Is used to authenticate.
It's not good practice to use a password. Authenticate via an external device (USB stick), obviously hidden where even the sniffer dogs won't detect It. I have a Flash Drive that's barely an Inch long, hence concealing It Is no Issue whatsoever.
RE: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - Pikami - 06-08-2018
(06-08-2018, 11:03 AM)mothered Wrote:(06-08-2018, 09:28 AM)Pikami Wrote:(06-08-2018, 05:44 AM)mothered Wrote: Alternatively, keep It but encrypt the device, preferably two forms/layers of encryption- an encrypted volume Inside an encrypted device.
AES-Twofish-Serpent ciphers will suffice.
I'll just post this here:
Nice, however users need to think laterally and work around the obvious. People hear the word "encryption" and assume a password Is used to authenticate.
It's not good practice to use a password. Authenticate via an external device (USB stick), obviously hidden where even the sniffer dogs won't detect It. I have a Flash Drive that's barely an Inch long, hence concealing It Is no Issue whatsoever.
The thing is: you can use what ever encryption you want, but if you know a way to decrypt it, it's up to you to keep that knowledge in your head and if a person is willing to kill for that knowledge you won't be able to protect it.
RE: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - mothered - 06-08-2018
(06-08-2018, 02:06 PM)Pikami Wrote:(06-08-2018, 11:03 AM)mothered Wrote:(06-08-2018, 09:28 AM)Pikami Wrote: I'll just post this here:
Nice, however users need to think laterally and work around the obvious. People hear the word "encryption" and assume a password Is used to authenticate.
It's not good practice to use a password. Authenticate via an external device (USB stick), obviously hidden where even the sniffer dogs won't detect It. I have a Flash Drive that's barely an Inch long, hence concealing It Is no Issue whatsoever.
The thing is: you can use what ever encryption you want, but if you know a way to decrypt it, it's up to you to keep that knowledge in your head and if a person is willing to kill for that knowledge you won't be able to protect it.
My post Is based on realistic terms.
I've yet to read nor hear of anyone willing to commit murder over access to an encrypted device.
RE: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - xyzo - 06-12-2018
For someone that has a deep knowledge in cyber security it seems weird that he travels with malicious software on his computer.
Well i guess this is karma doing it s thing.
RE: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - Wezuviy - 06-13-2018
(06-12-2018, 10:18 PM)xyzo Wrote: For someone that has a deep knowledge in cyber security it seems weird that he travels with malicious software on his computer.
Well i guess this is karma doing it s thing.
Sometimes it happens. Gal Vallerius is an example: https://www.washingtonpost.com/news/morning-mix/wp/2017/10/05/he-came-to-the-u-s-for-a-beard-competition-law-enforcement-was-waiting/?utm_term=.0c0402f34a82
RE: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI - Torwaldson - 06-14-2018
I have no idea what do they think while passing the boarder with this data on their laptops. It`s weird.