Accused Kelihos botmaster proclaims innocence
'I did not commit this crime,' says Andrey Sabelnikov, named last week by Microsoft as botnet maker
Computerworld - The Russian man accused by Microsoft of creating and operating the Kelihos spam botnet said on Friday he's innocent.
Microsoft said that Andrey Sabelnikov, a programmer who lives in St. Petersburg, Russian Federation, "created, operated and controlled the Kelihos botnet," which at its peak comprised an estimated 45,000 compromised Windows PCs. Those systems were used to transmit up to 4 billion spam emails daily, Microsoft has alleged.
In an emailed statement today, Microsoft declined to comment on Sabelnikov's claim of innocence. "As this is a case pending in court, we cannot comment further except to say that we look forward to seeing Mr. Sabelnikov in court so we can continue this discussion," said Richard Boscovich, a senior attorney with Microsoft's Digital Crimes Unit.
Last week, Microsoft added Sabelnikov to the list of defendants in a lawsuit first filed in September 2011, when it used a court order to take down Kelihos by commandeering its command-and-control (C&C) servers. Microsoft said its analysis showed evidence in the malware code of Sabelnikov's participation.
Sabelnikov begged to differ.
"I did not commit this crime, have never participated in the management of botnets and any other similar programs, and especially [have] not extracted from it any benefit," he wrote in a Friday blog (in Russian, with Google Translate version here)
Over the weekend, Sabelnikov contacted the BBC, which first reported his claims of innocence.
In his blog, Sabelnikov also said he had returned to Russia from the United States, where he had been on business, when he learned of the charges leveled by Microsoft.
Russian law bans extradition of its citizens to face trial in other countries.
Sabelnikov worked for a pair of security firms, Agnitum and Returnil, from 2005 through late 2011, resigning from the latter on Dec. 21, 2011, according to that company.
Returnil said it was "extremely disappointed and angered that someone who was a member of our team could be implicated in this type of activity."
Other security researchers have said that it was possible that Sabelnikov obtained the source code to another bot Trojan -- dubbed "Waledac" -- during his work at his former employers, or through his own probing of hacker forums. Kelihos, some experts believe, shares characteristics with Waledac.
"I want to emphasize that I do not have any relation to the activities [of] Kelihos and spam," Sabelnikov said. "Unfortunately, an avalanche of press coverage, indicating false facts [and] distort[ing] reality, [have] unwittingly caused the companies where I [have] worked and [now] work ... a huge moral hazard and [an] impact on [their] business reputation."
Sabelnikov has not replied to requests for comment sent to his Skype account.
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- Who's Spying on You? You're aware of the threats of malware to your business but what about the ever-changing ground rules? Cybercriminals today are launching attacks against...
- Pay-as-you-Grow Data Protection: IBM Tivoli's Full-featured Data Protection Suite for Small to Medium Businesses IBM Tivoli Storage Manager Suite for Unified Recovery gives small and medium businesses the opportunity to start out with only the individual solutions...
- Streamline Data Protection with IBM Tivoli Storage Manager Operations Center IBM Tivoli Storage Manager (TSM) has been an industry-standard data protection solution for two decades. But, where most competitors focus exclusively on Backup...
- Simplify and Consolidate Data Protection for Better Business Results Learn about IBM® Tivoli® Storage Manager Operations Center, which provides advanced visualization, built-in analytics and integrated workflow automation features that leapfrog traditional backup...
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well...
- The New Way to Work Knowledge Vault This Knowledge Vault focuses on how, in today's increasingly virtual world, it's more important than ever to engage deeply with employees, suppliers, partners,... All Cybercrime and Hacking White Papers | Webcasts