Teen arrested for Web attack on CNN.com
- By Elinor Abreu
- Apr 21, 2000
Confirming suspicions that the attacks on popular Web sites in February
were the work of "script kiddies," officials have arrested a 15-year-old
Canadian who allegedly bragged about perpetrating at least one of the attacks.
The teen, whose hacker name is "Mafiaboy," was arrested Saturday in Montreal
and released Monday after pleading not guilty to charges of two counts of
mischief to data in this case, obstruction of the lawful use of data.
He is accused of conducting a distributed-denial-of-service, or DDOS, attack
on CNN.com and the more than 1,200 sites it hosts worldwide. The attack
disrupted access to the sites for more than four hours Feb. 8.
The Yankee Group, a Boston-based research firm, estimated that the attacks
cost the industry about $1.2 billion. Mafiaboy allegedly bragged about the
attack in Internet Relay Chat forums, according to Michael Lyle, chief technology
officer at Recourse Technologies Inc.
The attack used an existing script and required no deep knowledge of computer
networks to pull it off.
In addition, the attacker's methods were sloppy. "There were pieces left
behind on our computer," says Kevin Schmidt, campus network programmer at
the University of California at Santa Barbara, where two computers were
compromised, but only one was used in an attack. "There was some indication
that Mafiaboy may have been involved. There are indications but not proof."
Yahoo was the first site attacked in February, followed during the next
two days by eBay, buy.com, Amazon.com, CNN.com and E-Trade. The FBI said
it also was looking into an attack on Excite.com, which came to light after
the first attacks were announced.
DDOS attacks are designed to shut down target sites by flooding them with
traffic. In this case, the victimized sites were not entirely shut down,
but most visitors were unable to reach them. The excessive traffic comes
from "zombie" or "slave" computers, usually high-speed servers onto which
someone has installed software that includes instructions for carrying out
an attack.
Charges in other attacks could be filed against Mafiaboy or other suspects,
according to Sgt. Gilles Michaud of the Royal Canadian Mounted Police. If
convicted, Mafiaboy faces two years in a juvenile detention center.
For more Internet economy news, visit TheStandard.com.
Article copyright 2000 The Industry Standard.