Tuesday, March 4, 2025
HomeComputer SecurityMirai Botnet Creators To Help Law Enforcement Agencies On Cybercrime Investigations

Mirai Botnet Creators To Help Law Enforcement Agencies On Cybercrime Investigations

Published on

SIEM as a Service

Follow Us on Google News

The three hackers who controlled the notorious Mirai botnet was sentenced last year in a conspiracy to violate the Computer Fraud & Abuse Act.

Mirai is malware which turns computer systems running Linux into remotely controlled “bots”, that can be used as part of a botnet in large-scale network attacks.

Mirai Botnet Creators

The Mirai botnet was used in some of the largest and most disruptive distributed denial of service (DDoS) attacks. Paras Jha, 21, Josiah White, 20, Dalton Norman, 21, are the Mirai Botnet Creators who pleaded guilty in District Court of Alaska for Computer fraud and abuse act.

The Mirai botnet targeted IoT devices including wireless cameras, routers, and digital video recorders, the Mirai operators gain control over the devices by exploiting disclosed and non-disclosed vulnerabilities to gain control over the devices and to add them in botnet network.

After cooperating extensively with FBI, Jha, White, and Norman were each sentenced to serve a minimum period of five-year probation and continue to cooperate with the FBI on cybercrime and cybersecurity matters.

The prosecutors ordered the three hackers to pay $127,000, 2,500 hours of community service and voluntarily hand over cryptocurrency seized during the course of the investigation.

The operators of Mirai botnet conducted a number of powerful DDoS attacks, for instance, the attack on a college in the U.S lasted for 54 hours, around 2.8 Billion Requests sent.

From December 2016 to February 2017, the defendants successfully infected over 100,000 primarily U.S.-based computing devices, such as home Internet routers, with malicious software.

“The perpetrators count on being technologically one step ahead of law enforcement officials. The plea agreement with the young offenders, in this case, was a unique opportunity for law enforcement officers, and will give FBI investigators the knowledge and tools they need to stay ahead of cybercriminals around the world,” said U.S. Attorney Bryan Schroder.

“The sentences announced today would not have been possible without the cooperation of our partners in international law enforcement and the private sector,” said Special Agent in Charge of FBI’s Anchorage Field Office, Jeffery Peterson.

Related Read

Dangerous Mirai Botnet Attack Attempts Detected Again from 9,000 Unique IP Addresses

You, Too, Can Rent the Mirai Botnet

Hackers who created Dangerous Mirai IoT Botnet Plead Guilty

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

CISA Alerts on Active Exploitation of Cisco Small Business Router Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent warning on March...

Threat Actors Exploiting AES Encryption for Stealthy Payload Protection

Cybersecurity researchers have uncovered a surge in the use of Advanced Encryption Standard (AES)...

33.3 Million Cyber Attacks Targeted Mobile Devices in 2024 as Threats Surge

Kaspersky's latest report on mobile malware evolution in 2024 reveals a significant increase in...

Routers Under Attack as Scanning Attacks on IoT and Networks Surge to Record Highs

In a concerning trend, the frequency of scanning attacks targeting Internet of Things (IoT)...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Winos4.0 Malware Targets Windows Users Through Malicious PDF Files

A new wave of cyberattacks leveraging the Winos4.0 malware framework has targeted organizations in...

Lotus Blossom Hacker Group Uses Dropbox, Twitter, and Zimbra for C2 Communications

The Lotus Blossom hacker group, also known as Spring Dragon, Billbug, or Thrip, has...

Squidoor: Multi-Vector Malware Exploiting Outlook API, DNS & ICMP Tunneling for C2

A newly identified malware, dubbed "Squidoor," has emerged as a sophisticated threat targeting government,...