How Redtiz lead to 4 arrests....

[2hd.]

Thought some of you might be interested, I see it as habbo news as it involves habbo staff.

http://www.theregister.co.uk/2001/12..._were_tracked/

Messages coded into the Goner worm and monitoring of the IRC channel used to control its activities led to the arrest of four suspected Israeli virus writers over the weekend.

One of the actions of Goner, which normally spreads as an infected attached-to-email message, is to install denial of service scripts for the mIRC Internet Relay Chat client. By monitoring the #pentagonex channel used to control the worm's activities, security experts working for DALnet IRC were able to track down its suspected creators.

Emma Monks, a volunteer with DALnet's exploits prevention team, said that after disabling the worm's denial of service abilities, which were believed to be targeted at a rival gang's ISP, DALnet's team set to track down the virus authors.

When activated the Goner worm displays a message, apparently from the author to his friends:

"Pentagone - coded by: suid. tested by ThE_SKuLL and [satan]. greetings to: TraceWar, k9-unit, stef16, ^Reno. Greetings also to nonick2 out there where ever you are."

DALnet records the IP address of anyone setting up an IRC channel which combined with the nicknames featured in the message the virus generates gave investigators vital clues.

Monks explained that by cross references the nicknames of those attempting to control drones from compromised machines on the channel with its database gave the IP addresses of members of the virus writing gang.

This information was turned over to the FBI, which in turn passed it on to the Israeli police. The four teenagers who were arrested on Friday are held in a juvenile detention centre pending a court appearance today and their computers have been seized. If convicted they could face a sentence of between three to five years in jail.

Goner is a fairly simple in its design, but it contains some nasty tricks up its sleeve including an attempt to disable antivirus and personal firewall applications. It spreads by ICQ as well as by Outlook.

[Albion]

so habbo staff got arrested for sending viruses ? :s

[Elkaa]

Given it's talking about America - I'm not too sure this is the same Emma Monks.

[fondle]

*Removed*

Edited by ReviewDude (Forum Moderator): Please do not post rude or offensive remarks about other users.

[dbgtz]

Cant be her.

[Jazza]

so habbo staff got arrested for sending viruses ? :s

No, Read it

[Jordy]

I'm quite confident it's her, so a big well done.

Plus she's only a volunteer, whatever that DAL thing is called, she could be a volunteer working from home.

Some of you think she got arrested 4 times lol, do you think sulake would be stupid enough to employ a e-terrorist? There is things called criminal records.

[Ashhizzle]

I'm quite confident it's her, so a big well done.

Plus she's only a volunteer, whatever that DAL thing is called, she could be a volunteer working from home.

Some of you think she got arrested 4 times lol, do you think sulake would be stupid enough to employ a e-terrorist? There is things called criminal records.

Yeah, lol

[Seacat]

Despite your shocking grammar I agree with you. :p

I'm quite confident it's her, so a big well done.

Plus she's only a volunteer, whatever that DAL thing is called, she could be a volunteer working from home.

Some of you think she got arrested 4 times lol, do you think sulake would be stupid enough to employ a e-terrorist? There is things called criminal records.

[crans]

I'm sure its totally wrong Emma Monks