Teen arrested for Web attack on CNN.com

Confirming suspicions that the attacks on popular Web sites in February were the work of "script kiddies," officials have arrested a 15-year-old Canadian who allegedly bragged about perpetrating at least one of the attacks.

The teen, whose hacker name is "Mafiaboy," was arrested Saturday in Montreal and released Monday after pleading not guilty to charges of two counts of mischief to data — in this case, obstruction of the lawful use of data. He is accused of conducting a distributed-denial-of-service, or DDOS, attack on CNN.com and the more than 1,200 sites it hosts worldwide. The attack disrupted access to the sites for more than four hours Feb. 8.

The Yankee Group, a Boston-based research firm, estimated that the attacks cost the industry about $1.2 billion. Mafiaboy allegedly bragged about the attack in Internet Relay Chat forums, according to Michael Lyle, chief technology officer at Recourse Technologies Inc.

The attack used an existing script and required no deep knowledge of computer networks to pull it off.

In addition, the attacker's methods were sloppy. "There were pieces left behind on our computer," says Kevin Schmidt, campus network programmer at the University of California at Santa Barbara, where two computers were compromised, but only one was used in an attack. "There was some indication that Mafiaboy may have been involved. There are indications but not proof."

Yahoo was the first site attacked in February, followed during the next two days by eBay, buy.com, Amazon.com, CNN.com and E-Trade. The FBI said it also was looking into an attack on Excite.com, which came to light after the first attacks were announced.

DDOS attacks are designed to shut down target sites by flooding them with traffic. In this case, the victimized sites were not entirely shut down, but most visitors were unable to reach them. The excessive traffic comes from "zombie" or "slave" computers, usually high-speed servers onto which someone has installed software that includes instructions for carrying out an attack.

Charges in other attacks could be filed against Mafiaboy or other suspects, according to Sgt. Gilles Michaud of the Royal Canadian Mounted Police. If convicted, Mafiaboy faces two years in a juvenile detention center.

— For more Internet economy news, visit TheStandard.com. Article copyright 2000 The Industry Standard.


  • Defense
    Ryan D. McCarthy being sworn in as Army Secretary Oct. 10, 2019. (Photo credit: Sgt. Dana Clarke/U.S. Army)

    Army wants to spend nearly $1B on cloud, data by 2025

    Army Secretary Ryan McCarthy said lack of funding or a potential delay in the JEDI cloud bid "strikes to the heart of our concern."

  • Congress
    Rep. Jim Langevin (D-R.I.) at the Hack the Capitol conference Sept. 20, 2018

    Jim Langevin's view from the Hill

    As chairman of of the Intelligence and Emerging Threats and Capabilities subcommittee of the House Armed Services Committe and a member of the House Homeland Security Committee, Rhode Island Democrat Jim Langevin is one of the most influential voices on cybersecurity in Congress.

Stay Connected


Sign up for our newsletter.

I agree to this site's Privacy Policy.