Rubbermaid bot master sentenced to 41 months
Adware meltdown
Posted in Enterprise Security, 11th June 2008 18:30 GMT
Free Download - Security Web 2.0
A US-based hacker has been sentenced to 41 months in jail for breaking into corporate computers in Europe and making them part of a money-generating botnet.
Robert Matthew Bentley, 21, of Panama City, Florida, was also ordered to perform three years of supervised release once his prison time is over and to pay $65,000 in restitution, according to federal prosecutors in Pensacola, Florida.
In March, Bentley, who sometimes went by the alias LSDigital, pleaded guilty to two felony counts related to his botnet activities, which inflicted more than $150,000 worth of damage on Newell Rubbermaid. Starting as early as December 2006, Bentley and several unnamed co-conspirators installed customized bots on hundreds of the company's computers. The malware generated so much traffic on Rubbermaid's servers that its network stopped functioning.
New infections from the attack were being detected as recently as March, four months after Bentley was arrested. Federal agents continue to investigate the uncharged suspects. At least one of them lived in Philadelphia.
Federal prosecutors began their case after the Metropolitan Police Computer Crime Unit in London fielded a complaint from Rubbermaid representatives in Europe. According to court documents, Bentley and his cronies generated "thousands of dollars" by installing adware from DollarRevenue.com on the infected machines.
The bot masters used the domain name smokedro.com as a command and control channel. They breached Newell Rubbermaid using at least three malicious files bearing the names 84785_redworld[1].exe, mssecure.exe and msiupdate.exe.
The prosecution is part of an FBI campaign known as Operation Bot Roast, which is designed to crack down on the botnet epidemic, in which thousands of PCs are silently infected and marshaled by miscreants to send spam, perform web attacks and carry out other crimes. On Tuesday, 21-year-old bot master Gregory C. King of Fairfield, California, pleaded guilty to hacking offenses under the same program. ®

An Improved Architecture for High-Efficiency, High-Density Data Centers [WP126]
Implementing Energy Efficient Data Centers [WP114]
LDAP Injection
Securing your Online Data Transfer with SSL
The Register Guide to Extended Validation

Inmate hacked prison network, broke into employee database
Miscreants hijacking machines via (freshly patched) Adobe flaw
Martial law planned for Craigslist's red-light district
Cocaine addicted IT manager hacks ex-employer's mail servers