Sasser worm suspect taken into custody

jcat

Mo(w)gli's can opener
Thread starter
Veteran
Joined
Feb 13, 2003
Messages
73,213
Purraise
9,851
Location
Mo(w)gli Monster's Lair
Am I going nuts, or did Mary Anne post something about this? The thread appeared, and then disappeared. The kid is facing up to five years' imprisonment, plus compensation payments that will run into the millions.

Police: Sasser suspect confesses
Saturday, May 8, 2004 Posted: 11:18 AM EDT (1518 GMT)



The suspect was held in the northern town of Waffensen.


BERLIN, Germany (AP) -- German authorities have arrested an 18-year-old suspected of creating the "Sasser" computer worm, which infected hundreds of thousands of computers worldwide, an official said Saturday.

The suspect, a high school student, was arrested Friday and has told authorities he was behind the worm, said Frank Federau, a spokesman for the state criminal office in Hanover.

Police and prosecutors on Friday searched his parents' house in the northern town of Waffensen, Federau said. He did not release the man's identity, and said he did not immediately have details of how the suspect was tracked down.

The teenager is being investigated on suspicion of computer sabotage, which carries a maximum sentence of five years in prison, said Detlef Ehrike, another state criminal office spokesman. After being questioned, he was released pending charges.

The German newsweekly Der Spiegel reported, without citing sources, that the CIA and FBI also were involved in the hunt for the worm's creator, whom it identified as Sven J. It said the suspect's motives were unclear.

The worm raced around the world over the past week, exploiting a flaw in Microsoft Corp.'s Windows operating system.

The German government's information technology security agency said there were four versions of Sasser. Spokesman Michael Dickopf said he didn't know whether the arrested teenager was responsible for all of them.

"The first version was amateurish," Dickopf said. However, the others "were clearly different in the damage they caused."

Unlike most outbreaks, Sasser does not require users to activate it by clicking on an e-mail attachment. Once inside, the worm scans the Internet for others to attack, causing some computers to continually crash and reboot.

Sasser is known as a network worm because it can automatically scan the Internet for computers with the security flaw and send a copy of itself there.

On Monday, the worm hit public hospitals in Hong Kong and one-third of Taiwan's post office branches. Twenty British Airways flights were each delayed about 10 minutes Tuesday due to Sasser troubles at check-in desks, while British coast guard stations used pen and paper for charts normally generated by computer.

Home users were particularly hit hard, computer security experts say, because they generally lack the know-how to install patches and tend not to have the firewalls needed to keep Sasser from spreading to other computers via the Internet.

Copyright 2004 The Associated Press.
 

hissy

TCS Member
Veteran
Joined
Feb 19, 2001
Messages
34,872
Purraise
77
No you aren't nuts, I deleted it because I wanted to find the link and had lost it-
I am glad you posted the story behind it, for I just heard about it over the radio-
 

talon

TCS Member
Top Cat
Joined
Dec 2, 2003
Messages
2,299
Purraise
3
Location
NVA, USA
Yeah! I am glad that they caught the fellow. These worms and viruses cost so much time money and aggrevation.
 

weatherlight

TCS Member
Adult Cat
Joined
Apr 23, 2004
Messages
260
Purraise
1
Maybe, if people were a little smarter, a little less gullible, and a little less lazy, it wouldn't be such a widespread problem.

I'm on Winblows myself, but I accept that it's not nearly as safe an OS as, say, FreeBSD. It's a risk that I chose to take. It wouldn't be nice for someone else for exploit that, but I'm not completely blameless either.

Even though I'm computer-illiterate, though, it just takes a little reading to figure out how to get rid of viruses for me. Computer-illiteracy isn't the same as illiteracy ^^
 

cheeseface

TCS Member
Veteran
Joined
Jun 10, 2003
Messages
11,614
Purraise
19
I'm glad they caught him, but I don't think he should go to jail. I think they should just chop his fingers off.
 
  • Thread Starter Thread Starter
  • #6

jcat

Mo(w)gli's can opener
Thread starter
Veteran
Joined
Feb 13, 2003
Messages
73,213
Purraise
9,851
Location
Mo(w)gli Monster's Lair
Originally Posted by Weatherlight

Maybe, if people were a little smarter, a little less gullible, and a little less lazy, it wouldn't be such a widespread problem.

I'm on Winblows myself, but I accept that it's not nearly as safe an OS as, say, FreeBSD. It's a risk that I chose to take. It wouldn't be nice for someone else for exploit that, but I'm not completely blameless either.

Even though I'm computer-illiterate, though, it just takes a little reading to figure out how to get rid of viruses for me. Computer-illiteracy isn't the same as illiteracy ^^
I spend far too much time online, but I agree that people don't take the necessary precautions. On Wednesday, I "wasted" an entire translation lesson talking about "Sasser", cybercrime, and the need for firewalls with my translators' class, but I don't feel the least bit guilty about it. These kids are in their late teens/early twenties, and thus have grown up with PCs and the Internet, but to a great extent seem unaware of the potential risks. This week a young woman here in Germany arranged to meet a guy she met in an Internet chatroom, and turned up stabbed to death and thrown in a river, Her murderer has been traced and charged. I love the Internet, but feel that far too many people underestimate the risks involved.
 

kiwideus

TCS Member
Veteran
Joined
Jul 4, 2002
Messages
13,901
Purraise
12
Location
Aotearoa
I am glad that they caught this jerk.

I don't think it is a matter of stupidity or laziness when it comes to computers and not knowing what to do - some of the words out there pertaining to computers can be very difficult to understand and try explaining things like that to people when they don't understand is difficult. Not everybody spends hours on a computer like others - some only use their cpus at work, etc so I don't blame people for not knowing about how to repair computers nor do I call them gullible or lazy. That is just life.
 

hissy

TCS Member
Veteran
Joined
Feb 19, 2001
Messages
34,872
Purraise
77
It is kind of scary how computer savvy some teens are to be able to create such a destructive force. So does he get tried by a world court? Because he did crash computers around the world?
 

weatherlight

TCS Member
Adult Cat
Joined
Apr 23, 2004
Messages
260
Purraise
1
Oooh, and don't get me started on businesses that require people to use Winblows. I feel bad for all those employees. At best, the people who make decisions in such companies are ignorant :p I know one company where everyone had to "upgrade" to WinME
Terrible stuff.

I do think people are gullible if they open every virus they get, though. When I was a kid, I didn't know better and would run .exes and such, but my younger brother beat it into my head that I was an idiot
Many problems require that the user actually open/run something they should just delete.

Many things are scary: idiots in large numbers, script kiddies with too much time, etc etc. Some sayings have some truth to them


BTW, I don't think that case of the murder should be blamed on "internet risks." There's always a risk in meeting people, and the risks go up when you have less information showing that they are nonviolent. She could just as easily have met him in a bar, gone off somewhere with him, and then been stabbed and thrown in a river. People should just always take precautions like letting people know where they're going, bringing trusted friends, going to safer places, and so on.
 

talon

TCS Member
Top Cat
Joined
Dec 2, 2003
Messages
2,299
Purraise
3
Location
NVA, USA
Weatherlight said:
I do think people are gullible if they open every virus they get, though.
A few of the later viruses, including sasser - did not need someone to click on anything, or receive anything from email. All it required was either an unpatched and/or un-firewalled PC.

Patches for home computers can be scheduled to download critical only patches - which for those of us with high speed access is a snap. For those without highspeed accesss, while not a snap, it will at least alert you to the fact that something very important needs to be downloaded (a little icon on the lower right of your task bar)

I suggest alos that those of you without a firewall, get a very good free version called ZoneAlarm (you can get it from downloads.com)

As far as business keeping up with patches etc. It is fairly easy to keep those who are hardwired into the system to be kept uptodate without the user even knowing about it. The real problem comes with laptop only users. If they have dialup - eeks, it would take forever to complete - even they could stay on long enough for it to complete, and ... well I could go on, but I won't!
 

katl8e

TCS Member
Veteran
Joined
Jan 21, 2002
Messages
12,622
Purraise
3
Location
Movin' on up!
An article in this morning's paper said that the kid claims to have been trying to create an anti-virus, to fight Netsky and this thing got away from him. If so, why are there FOUR different versions of Sasser?

Admittedly, I'm a computer dummy but, in two-and-a-half years of owning a computer, I have NEVER had a virus. Less than a month ago, I installed ZoneAlarm, after reading about it, in the paper. In addition, I download updates, as they pop up, on my computer. Better safe, than sorry.

At work, we have a Windows Xp support project and the techs have done almost nothing BUT talk people through getting rid of this thing, for the past week. Even some of the techies have gotten it. Nice to know that I'm a step or two ahead of the geeks.
 
Top