'Mastermind' of Mariposa botnet arrested

Filed Under: Law & order, Malware

Mariposa botnet butterfly net
Last week I blogged about the net closing in on a group of Slovenian hackers believed to be connected to the Mariposa botnet.

Today it is being reported that a 23-year-old Slovenian, known as Iserdo, was arrested in the city of Maribor, Slovenia. The arrest comes after an international investigation involving the FBI and Slovenian and Spanish police.

Iserdo's real name has not been revealed, but it is understood that he has been released on bail pending further investigations.

Almost 13 million computers in more than 190 countries are believed to have silently recruited into the Mariposa botnet, named after the Spanish word for "butterfly". The affected computers were comandeered by hackers after they were infected by a polymorphic family of malware called W32/Rimecud, which spread itself via a number of methods including copying itself to removable storage devices, instant messaging and P2P file-sharing systems.

It is believed that Slovenian hackers created the malware, and sold it to cybercriminals in Spain who used it in their attacks.

It's great to see international co-operation like this in the fight against the computer underground - helping to make everyone's online activities safer, and sending a strong message that the authorities will not turn a blind eye to cybercrime.

, ,

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

About the author

Graham Cluley is senior technology consultant at Sophos. The readers of Computer Weekly voted him security blogger of the year in 2009 and 2010, and he pipped Stephen Fry to the title of "Twitter user of the year" too. Which was nice. He was also named "Best Security Blogger" by the readers of SC Magazine in 2011. You can subscribe to Graham's updates on Facebook, follow him on Twitter and circle him on Google Plus for regular updates.