Moroccan hacker arrested for web virus launch

2005-08-28

Working with the FBI, Moroccan authorities on Thursday (25 August) arrested a young Moroccan in Rabat suspected of designing and distributing the ZOTOB virus, which attacked many of Microsoft Windows 2000 systems. Moroccan authorities detained Farid Essebar, 18, while Turkish authorities arrested Atilla Ekici, 21, on Thursday. TEASER

(Morocco Times 27/08/05, MAP 26/08/05, AP 27/08/05)

[AFP] Turkish hacker Atilla E. (C) escorted by Turkish policemen to court in Ankara

The pair is believed to responsible for unleashing the worm that disrupted computer operations in mid-August at several large news organisations, including The Associated Press, ABC, CNN, and The New York Times. According to investigators, the motives behind designing the virus were mainly financial. The suspects had links with groups specialised in bankcard forgery.

On Friday, Microsoft praised the Moroccan and Turkish authorities, and the FBI for the prompt arrests "We congratulate the Turkish and Moroccan authorities and the FBI for finding and apprehending the alleged authors and distributors of the Zotob and Mytob worms so quickly," said Brad Smith, senior vice president and general counsel at Microsoft.

He added "this arrest demonstrates the value of public-private collaboration, -- the first-class investigative work by the authorities and round-the-clock technical and investigative support provided by our Internet Crime Investigations Team here at Microsoft. The results show clearly that cyber criminals will be identified, apprehended and held accountable for their actions."

Louis Reigel, the FBI Cyber Division Assistant Director, said there had been close teamwork between the FBI, Microsoft Corp, and the Moroccan and Turkish law enforcement authorities. "This case happened very quickly. Had we not had those entities involved in this investigation, I suspect it would still be ongoing today," he told Reuters.

The Zotob worm targeted un-updated Windows machines, mainly Windows 2000. More than 100 firms were affected by the virus, as well as the San Francisco airport.