Microsoft has identified a former antivirus software developer as the alleged operator of a botnet that at its peak commandeered 41,000 computers and distributed more than 3.8 billion spam a day.
Andrey N. Sabelnikov of St. Petersburg, Russia, was added to an amended complaint filed Monday with the U.S. District Court in Virginia, Microsoft lead lawyer Richard Domingues Boscovich said in the company's blog. The Redmond, Wash.-based software maker claims Sabelnikov operated the Kelihos botnet, which Microsoft took down in September, along with partners Kyrus and Kaspersky Labs.
Microsoft gathered evidence on Sabelnikov with the cooperation of defendants named in the original complaint filed in September. As a result, Microsoft settled with Dominique Alexander Piatti and dotFREE Group SRO and dropped them from the complaint.
Microsoft alleges that Sabelnikov wrote the code for the Kelihos malware, which was used to control, operate, maintain and grow the Kelihos botnet. "These allegations are based on evidence Microsoft investigators uncovered while analyzing the Kelihos malware," Boscovich said.
According to the amended complaint, Sabelnikov works as a freelancer for a software development and consulting firm. Previously, the defendant worked as an engineer and product manager at a company that provided firewall, antivirus and security software. The BBC identified the company as St. Petersburg-based Agnitum, which told the British television network that Sabelnikov worked there from 2005 to 2008.
Kelihos was not the first time Microsoft took part in downing a botnet. The company last March participated in the destruction of the Rustock botnet, which security experts say cut by half the amount of spam spewing across the Internet the week after the takedown.
|
DDoS Attacks: If Money's Not The Motivator Anymore, What Is? Hactivism replaces profit as the main driver behind most DDoS attacks, according to Arbor Networks' annual survey of network operators. |
|
Symantec's Code Red: The Law Enforcement/Anonymous E-Mail Exchange Law enforcement officials negotiated via e-mail for more than two weeks with an Anonymous group member trying to extort $50,000 from Symantec to keep stolen product code off the Internet. |
|
How To Sell IT Security Services To Your Customers Cyberattacks can cost a business thousands, even millions, of dollars, and can deal a death blow to some. Here's how IT solution providers can help guard against malicious attacks. |
 More
Slide Shows |
- Insider Threats: The Next Frontier for Security Resellers and SMBs
- Complete Security and Your Bottom Line: Sophos, Value and the Channel
- Tough Threats, Tougher Security: How You Can Leverage New Solutions To Combat A “Targeted Attack” Landscape
- Dark Clouds Ahead: Why the Mid-Market Needs To Ramp Up Cloud Security and How You Can Help Them Get There
