Microsoft closes Kelihos botnet case after latest settlement

Share this article:

Andrey Sabelnikov, a Russian software programmer named in January as a defendant in the Kelihos botnet case, has reached a confidential settlement with Microsoft -- a development that effectively closes the case.

Richard Boscovich, assistant general counsel for Microsoft's digital crimes unit, announced the news Friday on the company's TechNet blog, where a joint statement with Sabelnikov said the programmer was “not the operator of the botnet or involved in its activities,” although he did write code for the large network of compromised PCs.

Microsoft shut down the now-defunct Kelihos botnet in September 2011, after finding that the network of approximately 41,000 infected computers was capable, at its peak, of spamming out 3.8 billion emails a day. Allegedly, victims' personal information, like emails and passwords, were stolen and sites promoting the sexual exploitation of children were promoted through the botnet, among other scams, according to Microsoft.

The Kelihos botnet was dismantled on more than one occasion by Microsoft, as its perpetrators continued to resurrect the network by tweaking the malware used in the attacks.

Last October, Microsoft dismissed its case against another defendant, Dominique Piatti, and his company, dotFREE Group SRO, after a settlement was reached.

As a part of the terms of that settlement, Piatti agreed to delete or transfer subdomains connected to the Kelihos botnet, which led to Microsoft uncovering additional evidence that led to action against Sabelnikov.

“Today, I am pleased to say we have reached an agreement with Mr. Sabelnikov, and have officially settled and closed the Kelihos botnet case," Boscovich wrote.


Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

ISSA tackles workforce gap with career lifecycle program

ISSA tackles workforce gap with career lifecycle program ...

On Thursday, the group launched its Cybersecurity Career Lifecycle (CSCL) program.

Amplification DDoS attacks most popular, according to Symantec

Amplification DDoS attacks most popular, according to Symantec

The company noted in a whitepaper released on Tuesday that Domain Name Server amplification attacks have increased 183 percent between January and August.

Court shutters NY co. selling security software with "no value"

A federal court shut down Pairsys at the request of the Federal Trade Commission.