Thursday, February 27, 2025
HomeCyber Crime21-year-old Hacker Sentenced to 30 Months Prison for Creating Popular Hacking Tool...

21-year-old Hacker Sentenced to 30 Months Prison for Creating Popular Hacking Tool LumunosityLink RAT

Published on

SIEM as a Service

Follow Us on Google News

A 21-year-old Kentucky Man sentenced to 30 months in federal prison for creating and selling the hacking tool LuminosityLink RAT that can be used the customers to gain access to the victim’s machine without user interaction.

21-year-old man Colton Grubbs, the developer of the tool pleads guilty last July for conspiracy to illegal access to computers, money laundering and illegal removal of property.

LuminosityLink RAT

Grubbs sold the RAT for $40, that contains malicious functions such as recording keystrokes, capturing cameras and microphones, access to computer files and to steal the website passwords.

“In his plea agreement, Grubbs admitted to selling this software for $39.99 apiece to more than 6,000 customers. These customers and their victims were located throughout the United States and around the world”, reads DoJ press release.

Palo Alto spotted the first sample in mid of April 2015, they observed over 43,000 unique LuminosityLink RAT samples through various methods.

“Our modern society is dependent on computers, mobile devices, and the use of the internet, people simply have to have confidence in their ability to use these modern instruments to transact their business, privately communicate, and securely maintain their information,” said Robert M. Duncan.

Grubbs need to serve 85 percent of his sentence in prison and ordered to pay the money he earned from crimes as fine, including 114 bitcoin that worth more than $725,000.

“The sentence announced today would not have been possible without the cooperation of our partners in the private sector and international law enforcement, specifically the Palo Alto Networks Unit 42 and the United Kingdom’s Southwest Regional Cyber Crime Unit,” said Michael A. Christman, Acting Special Agent in Charge, FBI.

Related Read

Hackers Selling Facebook Account Logins Details On Dark Web For $3

Dark Web Drug Vendor Pleads Guilty After Federal Authorities Seized his Bitcoin Worth Nearly $1 Million

Largest Dark Web Marketplace Black Hand Shut Down By Authorities

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

New “nRootTag” Attack Turns 1.5 Billion iPhones into Free Tracking Tools

Security researchers have uncovered a novel Bluetooth tracking vulnerability in Apple’s Find My network...

Authorities Arrested Hacker Behind 90 Major Data Breaches Worldwide

Cybersecurity firm Group-IB, alongside the Royal Thai Police and Singapore Police Force, announced the...

Cisco Nexus Vulnerability Allows Attackers to Inject Malicious Commands

Cisco Systems has issued a critical security advisory for a newly disclosed command injection...

New Wi-Fi Jamming Attack Can Disable Specific Devices

A newly discovered Wi-Fi jamming technique enables attackers to selectively disconnect individual devices from...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

New “nRootTag” Attack Turns 1.5 Billion iPhones into Free Tracking Tools

Security researchers have uncovered a novel Bluetooth tracking vulnerability in Apple’s Find My network...

Authorities Arrested Hacker Behind 90 Major Data Breaches Worldwide

Cybersecurity firm Group-IB, alongside the Royal Thai Police and Singapore Police Force, announced the...

Cisco Nexus Vulnerability Allows Attackers to Inject Malicious Commands

Cisco Systems has issued a critical security advisory for a newly disclosed command injection...