Briton admits to router hack that DDoSed Deutsche Telekom

Tells German court it was unintentional

By John Leyden

Posted in Security, 24th July 2017 15:07 GMT

An as yet unnamed 29-year-old pleaded guilty on Friday to charges relating to the hijacking of more than 1.25 million Deutsche Telekom routers, according to reports in the German press.

German news agency DPA and others quoted a court spokesman as saying the accused, who pleaded guilty to "attempted computer sabotage", had "registered under the names 'Peter Parker' and 'Spiderman'".

Deutsche Telekom's routers became infected with a modified version of the Mirai IoT malware late last year, causing over a million pounds' worth of damage, the firm said at the time.

The man reportedly told the court (through a translator) that he'd been hired by a Liberian ISP to take out local competition in the African country for the relatively modest fee of $10,000 for a “good start into married life”.

He claimed the ISP hadn't asked him to hack Deutsche Telekom, but rather to create a botnet that would cripple a competing business.

The self-taught programmer had been "studying computers since childhood", but had not had any specialist training, the DPA reported.

In practice, his efforts had knocked DT's routers offline, creating net outages in German homes and businesses in the process last November.

The Deutsche Telekom attack came a month after Mirai source code leaked online.

The suspect was arrested in a London airport at the end of February by police acting on an international arrest warrant and extradited to Germany.

His sentencing hearing before a Cologne court is scheduled for this Friday, 28 July. ®

Sign up to our NewsletterGet IT in your inbox daily

18 Comments

More from The Register

Cash-machine-draining €1bn cybercrime kingpin suspect cuffed by plod

Bod accused of masterminding malware attacks on banks around the world

Brit police forces spend peanuts on cybercrime training

£1.3m over three years? Get with the times, plod

Cisco bulks up routers for carriers struggling with CDN traffic

IOS XR gets an SDN injection to help things out, too

Do fear the Reaper: Huge army of webcams, routers raised from 'one million' hacked orgs

Check your cameras, broadband gateways, NAS boxes for latest botnet malware

Fresh botnet recruiting routers with weak credentials

With a special HNAP exploit just for D-Link kit

True Telecom busted by Ofcom for 'slamming', misselling and more

Must cough £300k soon after £87k ICO slapdown

Cisco can now sniff out malware inside encrypted traffic

This is Switchzilla’s kit-plus-cloud plan in action

Microsoft emergency update: Malware Engine needs, erm, malware protection

Stop appreciating the irony and go install the patch now

It's finally happened: Hackers are coming for home routers en masse

SoHopeless

Slingshot malware uses cunning plan to find a route to sysadmins

Advanced router code has been in circulation for six years