Zotob author may be virus mastermind

The teenager arrested on suspicion of writing and distributing the Zotob Windows 2000 worm may have authored more than 20 other viruses, it has emerged.

The claim was made by anti-virus company Sophos, which has analysed a number of viruses incorporating the Diabl0 "handle" or moniker used by the accused, 18-year-old Farid Essebar.

Other viruses and worms suspected of being his handiwork include the Mydoom variant, Mydoom-BG, and the Zotob-related Mytob worm that the company says currently accounts for over half of all virus traffic reported to it in August.

The Russian-born Moroccan resident was arrested last Thursday, after computer forensic work by the FBI traced him and his alleged accomplice, Atilla Ekici, to addresses in the country, and in Turkey.

Police have since widened their net in Turkey, arresting a further 16 people earlier this week on suspicion of distributing Zotob and Mytob, which caused widespread disruption to Windows 2000 systems around the world two weeks ago.

"It appears that whoever wrote Zotob had access to the Mytob source code, ripped out the email-spreading section, and plugged in the Microsoft exploit," said Graham Cluley of Sophos. The two used different methods to spread, but were otherwise closely related, he said. "It's possible that several people have access to the Mytob source code -- so it may not be the last we see of this Internet scourge."

The case throws some light on the way that virus and worm distribution appears to be becoming a group rather than individual activity. It is also noteworthy that police have been able to trace the alleged culprits in only a matter of days. In the past, such investigations would have taken months and probably proved inconclusive.

What seems to have helped police unravel the true size of the group activity is the association of Essebar with a group called the 0x90-Team, which operated its own website to help with coordination. This site was defaced at the weekend, probably by a rival group.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

John E. Dunn

Techworld.com
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?