Two hackers have plead guilty to creating and operating the massive army of tens of thousands of zombie internet-connected devices better known as the “Mirai” botnet, which caused widespread internet disruptions last year.

Paras Jha and Josiah White plead guilty to hacking charges last week. Their plea agreements were unsealed on Wednesday. Cybersecurity reporter Brian Krebs, as well as independent security researchers, had already identified the two as potentially being behind the Mirai botnet, earlier this year.

Jha plead guilty to writing and implementing the Mirai code in July of 2016, before the botnet garnered worldwide media attention, mostly when it was used to attack Krebs’ website and the internet infrastructure company Dyn with record-breaking distributed denial of service (DDoS) cyberattacks. The attack on Dyn caused widespread internet slowdowns on the US east coast for a few hours.

Jha also plead guilty to releasing the Mirai code online under the pseudonym of “Anna Senpai.” The move, according to court documents was designed “to create plausible deniability if law enforcement found the code on computers controlled by Jha” or his partners in crime.

White, who went by the nicknames “lightspeed” and “thegenius,” plead guilty to working and operating the Mirai botnet, as well as writing the code that was designed to scan the internet for vulnerable devices to enlist in the botnet.

Both Jha and White operated the Mirai botnet, which amassed more than 300,000 devices, according to the court documents, with the goal of making money by renting the botnet out to other hackers, and extorting the victims of their cyberattacks. The two, along with other co-conspirators, also used it to attack competitors in the shady DDoS-for-hire business, an internet turf war that we reported on last year.

The two hackers face a maximum prison sentence of five years.

Read More...