解除“想哭”勒索软件威胁的英雄在美被捕 WannaCry Hero Arrested in US After Hacking Conference

PlayBar

今年早些时候发现“自毁开关”,有效阻止了“想哭”勒索软件袭击的英国黑客马库斯·哈钦斯被美国安全特工逮捕。

哈钦斯今年23岁,是一名恶性软件研究员,网名为“恶性软件技工”。哈钦斯星期三在美国拉斯维加斯机场准备返回英国时被美国联邦调查局拘捕。他这次来拉斯维加斯是参加两个黑客会议。

星期四公布的法庭文件显示,哈钦斯被控从事的非法黑客活动,跟“想哭”勒索软件袭击无关。

路透社报道说,哈钦斯的罪名是推销和散布一种名叫 Kronos的恶性软件并从中牟利,这种软件在2014年7月到2015年7月间曾被用于盗取网上银行信息和信用卡数据。

哈钦斯尚未发布公开声明。不过,他的母亲告诉伦敦电讯报说,她正努力打探儿子被关在哪里,估计“今天晚上会很忙”。

哈钦斯今年五月因为解除了“想哭”勒索软件的杀伤力一夜之间成了英雄。这种勒索软件侵入了150多个国家里医院、学校、工厂和商店不计其数的电脑,英国国民保健服务的部分系统、美国联邦快递公司、德国铁路公司和西班牙电信公司都感染了病毒。

“想哭”勒索软件的袭击最早是5月12日发现的,持续了整个周末。直到5月15日哈钦斯找到一种所谓的“自毁开关”,才有效阻止了袭击的蔓延。

U.S. security agents have arrested the British hacker known for discovering a "kill switch" that nullified a widespread ransomware attack earlier this year.

Marcus Hutchins, a 23-year-old malware researcher who uses the name Malware Tech, was detained by the FBI on Wednesday at the Las Vegas airport, where he was preparing to return to Britain after attending two hacking conferences in the city.

Court documents unsealed on Thursday indicated Hutchins was arrested on hacking charges unrelated to the ransomware attack known as WannaCry.

Reuters news agency reports Hutchins is accused of advertising, distributing and profiting from malware code known as Kronos that stole online banking credentials and credit card data between July 2014 and July 2015.

Hutchins has not made a public statement, but his mother told London's Telegraph newspaper that she expected to be "rather busy tonight," trying to find out where her son is being held.

Hutchins became an overnight hero in May after disabling the WannaCry worm, which infiltrated software in hundreds of thousands of computers in hospitals, schools, factories and shops in more than 150 countries. Parts of Britain's National Health Service were infected, as well as the FedEx delivery company, German rail Deutsche Bahn and Spain's Telefonica.

The attack first became evident on May 12, 2017, and continued over the weekend. By May 15, Hutchins had discovered a so-called "kill switch" that disabled the worm.