Feeds

Blaster-F suspect arrested in Romania

Dan Dumbitru

  • alert
  • submit to reddit

Secure remote control for conventional and virtual desktops

Romanian police yesterday arrested a man on suspicion of releasing a variant of the prolific Blaster worm. It's the second arrest of a copycat author of the worm in the last week.

Dan Dumitru Ciobanu, 24, from the northern Romanian city of Iasi, is alleged to have created the relatively tame Blaster-F version of the worm.

Blaster-F, first spotted on September 1, shares the same functionality and active mechanisms as original Blaster worm. The only differences are a change of the virus filename into enbiei.exe, a change in target for the DDoS attack from windowsupdate.com to Iasi's Hydrotechnical University and the addition of a text string within the virus in Romanian criticising the University and one of its professors.

Blaster-F, unlike the original worm which infected hundreds of thousands of Windows PCs, failed to cause much harm. AV vendors describe it as "low spreading and low risk".

According to Romanian AV developer BitDefender, which helped police track down the suspect, Ciobanu, a graduate student at Hydrotechnical, was apprehended while working in a photo developing lab. Police have seized two computers from Ciobanu's home and workplace for forensic examination.

BitDefender says the trail of evidence that led to Ciobanu's arrest was easy to follow. The viral code contained a reference to Ciobanu's nickname "Enbiei" and referred in disparaging terms to one his teachers.

Ciobanu is yet to be charged. Under recently passed Romanian cybercrime law, he faces a prison term of up to 15 years if convicted, according to Mihai Radu, PR manager at Softwin, the parent company of BitDefender.

The Romanian arrest follows that of Minnesota teenager Jeffrey Lee Parson last Friday. Parson is suspected of creating and releasing the Blaster-B variant of the worm. As in the Romanian case, Parson's online nickname "teekid" appeared in the variant of Blaster he is alleged to have created.

The author of the original Blaster worm remains at large. ®

Related Stories

Blaster worm spreading rapidly
Blaster worm variants make mischief
Blaster rewrites Windows worm rules
Windows Update still standing despite Blaster
Blaster variant offers 'fix' for pox-ridden PCs
FBI arrests Blaster suspect
Parson not dumbest virus writer ever, shock!
Feds sexed up case - Blaster suspect

New hybrid storage solutions

More from The Register

next story
Google recommends pronounceable passwords
Super Chrome goes into battle with Mr Mxyzptlk
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
Snowden, Dotcom, throw bombs into NZ election campaign
Claim of tapped undersea cable refuted by Kiwi PM as Kim claims extradition plot
Reddit wipes clean leaked celeb nudie pics, tells users to zip it
Now we've had all THAT TRAFFIC, we 'deplore' this theft
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
TorrentLocker unpicked: Crypto coding shocker defeats extortionists
Lousy XOR opens door into which victims can shove a foot
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.