Investigation of Zobot Worms Leads to Arrests in Turkey, Morocco -- Redmondmag.com

Investigation of Zobot Worms Leads to Arrests in Turkey, Morocco

By Scott Bekker
08/26/2005

Almost everything about the Zobot worm has played out like a regular computer security crisis on fast forward. From the emergence of a series of worms within days of a Microsoft patch to Microsoft's release of workarounds and a removal tool to, now, the arrest of suspects.

Authorities arrested suspects on Thursday in Turkey and Morocco after law enforcement in those countries worked with the FBI and the Microsoft Internet Crime Investigation Team.

"We congratulate the Turkish and Moroccan authorities and the FBI for finding and apprehending the alleged authors and distributors of the Zotob and Mytob worms so quickly," Microsoft general counsel Brad Smith said in a statement Friday.

The Zotob worms emerged two weeks ago, within days of a critical Microsoft security bulletin, MS05-039, patching a Plug and Play vulnerability primarily affecting Windows 2000. Although the worm was characterized as slow-moving by Microsoft, it managed to take down servers at high-profile companies, including CNN, The New York Times and Caterpillar Co.

Earlier this week, Microsoft acknowledged the vulnerability of certain Windows XP Service Pack 1 systems to similar attacks, although that applied mostly in home networking settings.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

Real-World Ransomware Recovery

Here's how I was (mostly) successful in recovering a family PC infected with malware.
Microsoft Launches Small AI Models Family Phi-3

Recognizing that bigger isn't always better, Microsoft has released its smallest open AI models to date, Phi-3.
Microsoft and OpenAI Continue Global AI Expansions

Microsoft and OpenAI each continued their global expansion this month, with the announcements of new infrastructure investments and service rollouts in new regions, like Asia and the Middle East.
Cisco Warns of Brute Force Attacks Targeting VPNs and Firewalls

Cisco has revealed that a global increase in brute force attacks targeting Virtual Private Networks (VPNs) and other devices is currently taking place.
What's Inside Microsoft 365's Security Toolbox?

Microsoft provides plenty of native tools to secure Microsoft 365. IT pros just have to know where to look.