– IRC News

All about Internet Relay Chat

Person Spreading Trojans Over IRC Arrested

Lately a wave of arrests have been made regarding people using DDoS, and today a press release has been made regarding the arrest of 30 year-old Richard C. Honour, nicknamed Fyle/Anatoly from Seattle.

Honour is believed to have coded and then spread trojans over IRC. Infected PCs were supplying Honour with information such as online banking and other identity and privacy sensitive data.

“This name is not just familiar with DarkMyst, but throughout the IRC community” said Ryan, admin on DarkMyst in a reaction to IRC-Junkie. “Honours’ activities affected many IRC networks, many of which were involved in the operation and provided information that led to his arrest.”

“Computer viruses have the potential to cause an incredible amount of damage to the nation’s economy,”] said United States Attorney Catherine L. Hanaway who is handling this case. “This office will pursue these cases aggressively.”

If found guilty, Honour can receive a maximum of 10 years in prison and a possible fine of $250,000 USD.

DDoS Cripples Hospital

More news concerning DDoS’ers I’m afraid. Christopher Maxwell, of Vacaville California USA, 20 year-old, has been charged that he launched an DDoS attack in which he crippled a hospital. In the hospital the attack caused for the doctor’s pagers not functioning anymore as well as shutting down computers of intensive care units.

Maxwell will see his first court appearance on the 23th of this month.

The botnet is thought to have consisted of 13,000 to 50,000 infected machines which were controlled over IRC.

Although the attack heavily crippled the hospital (Northwest Hospital and Medical Center in north Seattle) nurses quickly switched to using charts and were able to prevent any human harm.

Maxwell and two unidentified juvenile companions used a botnet to display unwanted advertisements on infected computers, which earned them an estimated $100,000.

For his crime, Maxwell can face up to 10 years in jail, $250,000 fine and returning damages. Northwest Hospital published that its costs to repair the network were $150,000.

And Another Bites the Dust

Santiago Garrido, 26 years-old, decided he would resort to DDoS after he was being banned from the Hispano IRC network. The DDoS generated caused such problems for Spanish ISP’s Wanadoo, ONO, Lleida Net and other ISP’s that 3 million users were left without connection. This equals to one third of all Spanish Internet users.

Yesterday Garrido (nicked “Ronnie” or “Mike25″) heard the sentence for his act; 2 years in jail, and a 1.4 million fine (roughly $1.6 million USD).

DDoS'er Pleaded Guilty

Jeanson James Ancheta, 20, of Downey, California, who was arrested in November of last year (we reported on his arrest here) has pleaded guilty to the charges of assembling a botnet, spamming, spreading of malicious software and profiting from these activities by selling services related to the botnet such as performing DDoS attacks.

Among the machines he infected and included in his botnet where computers at the Weapons Division of the United States Naval Air Warfare Center and machines operated by the U.S. Department of Defense.

The U.S. Attorney’s office showed that Ancheta modified and disseminated a trojan horse program called rxbot. With this trojan he created a botnet which he commanded from an IRC channel.

Ancheta admitted that he earned approximately $3,000 by selling services performed with his botnet. He also admitted in earning $60,000 by having approximately 400,000 machines downloading and installing adware.

Ancheta will have to pay $15,000 to the Weapons Division of the United States Naval Air Warfare Center in China Lake and the Defense Information Systems Agency to cover damages. Also the $60,000 earned and a BMW and computer equipment will be forfeited.

Ancheta will hear his sentence on the 1st of May, and might face up to 25 years in prison.

After the recent bust in the Netherlands, this is the second major operation against DDoS’ers showing a genuine growing interest of governments around the world to tackle this growing problem.

Dronerunner Arrested in California

Worldwide the interest from the law enforcing organizations towards rolling up botnets is increasing. Only  a month ago the Dutch police arrested three men who were controlling a net containing an estimated 1500000 machines.

Now Jeanson James Ancheta, 20, of Downey, California has been arrested last Tuesday by the FBI. Apparently it is the first time that a person has been arrested who is selling time on his botnet to outsiders.

He will have to stand trial for a total of 17 counts, including causing damage to protected computers, causing damage to computers owned by the government, fraud and money laundering. Machines found in the potnet belonged to the Weapons Division of the United States Naval Air Warfare Center in China Lake and the Defense Information Systems Agency, both part of the United States Department of Defense.

He also used his botnet for sending spam and DDoS.

He used IRC both to control the bots, and to advertise his ‘services’ to interested parties.

If convicted, he can face up to 50 years in prison.