Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Profile of the Mind of a Virus Writer

Posted by timothy on Mon Feb 09, 2004 07:17 AM
from the read-on-empty-stomach dept.
zdburke writes "Clive Thompson, writing for the NY Times, has profiled several young computer virus writers around the world. A young Austrian wrote a Batch Trojan Generator which has simple options for constructing your next virus: fomat drive C? Overwrite every file? It's very well written by an author who clearly knows his stuff."
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by Anonymous Coward on Monday February 09 2004, @07:19AM (#8224388)
    ...they're pretty proficient in VB.
  • by La_Boca (201988) on Monday February 09 2004, @07:20AM (#8224392) Journal
    ...US Slashdot editors get tricked once again by the "news media" to post another dupe.
  • by snatchitup (466222) on Monday February 09 2004, @07:22AM (#8224401) Homepage Journal
    Or do the pictures of these guys remind you of the Calvin Cline ads awhile back that bordered on kiddie porn? These kids look like they are wearing makeup and exude a bit of homo-erotic teasing.

    It just gave me the creeps, knowing that this is an article for nerds.

    • by Anonymous Coward
      I'm sorry these pictures are arousing previously unearthed feelings for you. I can sympathize with your feelings of uneasiness as the facade of homophobia slowly melts away to reveal your true inner self [photo.net].

      On a more serious note, get a grip. If the sight of some bare shoulders on a guy is having you squirm like a pre-pubescent girl, you've got some serious growing up to do.

      As for whatever brain donors modded his whining "Insightful," quit trying to rival the goatsecx guy and pull your heads out of own asses
  • by stevey (64018) on Monday February 09 2004, @07:22AM (#8224403) Homepage

    On the down side this is a duplicate article [slashdot.org], on the plus side this version has a link to the Google partner version of the article. (So no login required).

    I guess this means that I can't gain karma by posting a mirror. Do you think I'm in with a chance of anything else? ;)

  • Hmmm. (Score:5, Insightful)

    by DarkHelmet (120004) * <mark.seventhcycle@net> on Monday February 09 2004, @07:23AM (#8224412) Homepage
    You know, maybe I don't get it... Maybe it's just me.

    But it says right there... "Please write the online editor at daddypants@slashdot.org for any corrections.".

    I decide to write that it was a dupe. Sure enough, the thing gets posted anyway.

    I mean, that's partly what subscribers are for. And that's also why subscribers can't do comments early. Right?

    It's silly. Not only should the editors actually read slashdot, they should more importantly look at email from subscribers saying "It's a dupe!" before posting the thing.

    But maybe it's just me thinking in a perfect world. Forget it.

    • Re:Hmmm. (Score:3, Informative)

      I've reported at least a dozen of these and never once had any response. Has anyone ever had any luck from a daddypants email? I suspect they're devnulling it...
    • Re:Hmmm. (Score:5, Funny)

      by __past__ (542467) on Monday February 09 2004, @09:00AM (#8225011)
      I mean, that's partly what subscribers are for. And that's also why subscribers can't do comments early. Right?
      Do I understand correctly - you actually pay money for being allowed to do the job of the (paid, but incompetent) editors, so that I (freeloader) don't have to read dupes?
    • As a subscriber, you got to see the dupe before the rest of us!
  • by juuri (7678) on Monday February 09 2004, @07:24AM (#8224413) Homepage
    This has been around for something like 12 years, IIRC, Nowhere Man of that funny group of happy guys at [NuKE] wrote the VCL (Virus Creation Lab) in 92 (maybe 93?). Basically it was a text based GUI app with windows and drop downs that let you design a virus and produced a working one ready for distribution.

    Today's viruses are absolutely pathetic compared to some of the older stuff.
  • by andih8u (639841) on Monday February 09 2004, @07:28AM (#8224432)
    Downstairs, his mother is cleaning up after dinner. She isn't thrilled these days, either. But what bothers her isn't Mario's poster. It's his hobby. When Mario is bored -- and out here in the countryside, surrounded by soaring snowcapped mountains and little else, he's bored a lot -- he likes to sit at his laptop and create computer viruses and worms.

    Maybe this is just crazy talk, but couldn't this woman just take his computer away from him? She knows that he's upstairs doing illegal stuff...he's 16, take away his laptop. "Oh, well little Billy's just upstairs making pipe-bombs...I'll leave him alone."

    Parents are there to be...parents.
    • by mxf8bv (118038) on Monday February 09 2004, @07:33AM (#8224449)
      Well, he claims it is for educational purposes and even published it on his website. So probably it's not illegal what he's doing - as long as he doesn't (admit to) realease his creations into the wild.
      • by Anonymous Coward on Monday February 09 2004, @08:04AM (#8224574)
        I think we should start looking at intent. The article said it: These people publish their works on the Internet knowing, even wanting, their viruses to be used by script kiddies. Just read what some of the people that were interviewed said. Things like "When my first virus was issued as an alert, I was thrilled." That says illegal to me, or at least should.
  • Deja-vu (Score:5, Funny)

    by hyperherod (574576) on Monday February 09 2004, @07:31AM (#8224442)
    I think I've been here before... I've been told this usually happens because of a glitch in The Slashdot...
  • by InsaneCreator (209742) on Monday February 09 2004, @07:32AM (#8224446)
    oh, wow... he wrote a VBS generator... how 1337... It's not even a real trojan; it just deletes files (at least it seem so from the article).

    When I was 17, there wren't any trojans that would come with source code. At that time, NetBus was pretty popular, so I wrote my own client-server trojan using Delphi. Since I was the ony person who had access to it, it was completely immune to antivirus software and that meant lots & lots of fun with school computers. :)

    Ah, good old times...
    • A good virus generator would be able to produce viruses without anything in common. I bet there is a string, common to all this kid's generator's viruses that antivirus programs can find and use to block all present and future viruses generated by this bot.

      Another good feature would be to include the code for the generator itself with each copy of the generated viruses that would intermittently pop up a dialog box saying: "The virus you have been infected with needs to evolve, please answer a few questio

  • script kiddies (Score:5, Insightful)

    by tuxette (731067) * <[moc.liamg] [ta] [ettexut]> on Monday February 09 2004, @07:33AM (#8224455) Homepage Journal
    The people who release the viruses are often anonymous mischief-makers, or ''script kiddies.'' That's a derisive term for aspiring young hackers,

    Aspiring young hackers?! Aspiring young hackers don't cut and paste other people's code.

  • by SiChemist (575005) on Monday February 09 2004, @07:43AM (#8224486) Homepage
    Our virus detector has just been triggered by a message you sent:-

    To: editor@slashdot.org
    Subject: Profile of the Mind of a Virus Writer
    Date: Mon Feb 9 6:00:55 2004

    Any infected parts of the message have not been delivered.This message is simply to warn you that your computer system may have a virus present and should be checked. The virus detector said this about the message:

    Report: message.zip contains Worm.MyDupe.Slashdot
  • Cool (Score:5, Insightful)

    by Dark Lord Seth (584963) on Monday February 09 2004, @07:44AM (#8224488) Journal

    It has pictures, name and locations.

    Now the sysadmins have someone to beat up and the legal department can take some potshots at them for paying damages caused by virusses.

  • by theolein (316044) on Monday February 09 2004, @07:44AM (#8224489) Journal
    This one is a dupe, yet again. Christ, man, use the fucking search feature or hand over the moderator status to someone who will. And yes, you are definitely the worst one when it comes to duplicating stories.
  • by SpaceRook (630389) on Monday February 09 2004, @07:47AM (#8224502)
    This [nytimes.com] article is about as ill-informed as that BBC article that was posted last week. From the article:

    MyDoom's ultimate target was an obscure software company named SCO. Champions of the open Net have portrayed SCO as the Antichrist since it sued to establish part-ownership of a popular and free computer operating system called Linux. Linux has become an icon of the so-called open-source movement, which is seeking to limit the influence of companies like SCO and the industry giant, Microsoft, which closely guard their software.
      • I did not read the article, but the quoted statement is grossly inaccurated:
        • ASAIK, it has been demonstrated that mydoom did not target SCO, only appeared to;
        • obscure software company named SCO? : well, this is almost fun :-)
        • open Net : what is it ?
        • so called open source : like it has not been around for more than ten years, sponsored by companies like IBM and Oracle, and several times mentioned by mainstream press;
        • which is seeking to limit the influence of companies like SCO and the industry gian
  • by rjshields (719665) on Monday February 09 2004, @07:59AM (#8224547)
    "Stephen Mathieson, Detroit. The 16-year-old virus writer is dismissive of hackers who release other people's viruses: "The kids just cut and paste.""

    So, we have a 16 year old virus writer accusing other hackers of being childish. Doesn't that seem just a tad ironic?
  • by W1K-Galoot (745033) on Monday February 09 2004, @08:04AM (#8224576)
    Michelangelo was a master. A spray-can toting kid is just a vandal. These aren't "masters" either, no matter how much they label themselves as such. Want to show off your elite skills, kids? Want to show how much better than Microsoft you are? Write a self-replicating program that patches holes instead of exploiting them.
    Nope. They're vandals posing as artists.
    • by globalar (669767) on Monday February 09 2004, @12:13PM (#8226825) Homepage
      It's a sign of immaturity that you have to prove yourself and exercise your ability in every small way. For example, locksmiths don't go around opening people's doors and leaving strange notes just because they can. They have a job where these abilities are applied for a wage. Their capabilities are productive and non-intrusive.

      Some hackers find problems with popular software, others create security schemes, some experiment with protocols, some reverse engineer drivers, etc. Some hackers are productive and non-intrusive.
    • The last worm that tried to fix a hole was buggy and caused more damage than the original.

      Apparently, these folks don't realize that the traffic from spreading the worm is a large portion of the damage caused.

      Perhaps they should read some of the literature that's rather widely available?
  • Call me cynical but I think this story is a well-constructed lie.

    First, the accurate but uncheckable details: name of some guy in Austria, his 15-year old girlfriend.

    Secondly, as has been remarked, the photos. They are just too well shot, and I can't for a second believe that a virus author would sit still while the makeup girls did their thing, lighting got the shadows right... no frigging way!

    Thirdly, the technical details are obviously wrong. Formatting hard drives? Deleting files? That is so 1980's. Today's virus writers are obsessed with the social interface: how to confuse people into clicking the attachment.

    Forthly, the timing. A long, detailed investigation into youthful virus writers just as the worst ever virus hits the Internet, with no mention of mafia connections, of zombie spam engines, of "sorry, andy, but this was just my job",...? WTF?

    Conclusion: it's a set-up. These young dudes don't exist as described, the shots are of actors, and the story was invented behind a desk. Someone wants to create a convincing enemy for new legislation which will paint uncontrolled hacker youthdom as the enemy of all that is right and proper. Long prison sentences for simply creating the wrong kind of software ("because it could be released and do harm"). Rapid implementation across the globe ("cause these guys are in, like, Austra!").

    Now, allow me to get really cynical and ask this question: why is no-one bothering with profiles of the organized criminals behind most of the damage done to people's computers? Could it be because misdirecting the blame at youth hackerdom means the problem will not be solved, and so the hand of oppressive government can become stronger and stronger...

    Of course, I could be wrong, and really viruses like mydoom could just be the work of guys like this.

    • First, that sort of thing is in numerous articles.. so it's a useless starting point.

      Second, the photos aren't very good. It's easier to tell if you look at the pictures in the NYTimes magazine. One's blurry and grainy, another is heavily dodged (darkened) everywhere except where that "Benny" guy is, and the detroit kid does seem to have on makeup, but the picture is just slow shutter with soft focus and a light flare.

      Third, when I read the article.. it talked about how formatting hard drives was old an
  • Come on! Get it together /.! You guys had this article on Friday! [slashdot.org] Don't you read your own site?
  • by cabazorro (601004) on Monday February 09 2004, @08:36AM (#8224809) Homepage Journal
    On the creator of the Sobig.F virus...
    ''The F.B.I. is out for the Sobig guy with both
    claws, and they want to make an example
    of him,'' David Perry.

    Women don't write viruses?
    Women don't read slashdot?
    I feel so pigeonholed!!
  • by vasqzr (619165) <vasqzr.netscape@net> on Monday February 09 2004, @08:56AM (#8224979)
    Just sit back and laugh. Journalists can't cover this stuff. It's a joke.

    Now, think about how off-center computer-related articles are. Anything that deals with technology.

    Have you ever had first-hand experience with a story your local paper covered? And while reading the story, you think to yourself, "Where the hell did they get their (mis)information??"

    Apply that to EVERY story in the news. Scary, isn't it?
  • VB? WTF?! (Score:5, Interesting)

    by fudgefactor7 (581449) on Monday February 09 2004, @09:10AM (#8225095)
    Visual Basic is a computer language popular among malware authors for its simplicity; Philet0ast3r has used it to create several of the two dozen viruses he's written.

    Jeez...VB? Real virus hax0rz work in assembly, it's smaller, neater, and faster. These guys are a bunch of script kiddie punks. No wonder they were hip to being interviewed, they had no talent and wanted a name for themselves.

    Perhaps we should kill them.
  • by Savage-Rabbit (308260) on Monday February 09 2004, @09:31AM (#8225271)
    That's easy, Bart Simpson with a Windows PC....
    • Why it's so easy for us to accept the typical cracker/hacker defense ("I am just exposing vulnerabilities in this computer system or data encryption scheme") and reject similar defense of a virus writer ("I am just teaching computer users to handle binary attachments with care")?
      • Who's us? I find both of those excuses unconvincing.
      • Why it's so easy for us to accept the typical cracker/hacker defense ("I am just exposing vulnerabilities in this computer system or data encryption scheme")

        Who accepts that? Just last year a man (I can not remember the name but the story made slashdot) almost went to jail for reporting a weaskness that could be exploited to a large corporation. e did not even exploit it, simply noticed it. If you think that in this post patriot act world you can hack using the above as an excuse, you are a bit out of to
    • by 0123456 (636235) on Monday February 09 2004, @07:42AM (#8224482)
      "Throw these antisocial delinquents in the slammer for 10 years for each offense."

      I believe the average sentence for murder in America is about eight years. Are you really suggesting that writing a virus is a more serious crime than murder?

      (Ok, I'd agree, if that virus caused infrastructure damage that killed people... but then they should be jailed for manslaughter, not virus writing)
    • at the same time... (Score:5, Interesting)

      by tuxette (731067) * <[moc.liamg] [ta] [ettexut]> on Monday February 09 2004, @07:48AM (#8224508) Homepage Journal
      ...better IT education from an early age is needed. The author of the article writes "[s]cript kiddies often have only a dim idea of how the code works and little concern for how a digital plague can rage out of control." It looks like we need to do a better job (than the seemingly non-existant now) in teaching children why they shouldn't cut and paste "strange code" and what the consequences are of doing such a thing. It is not enough to say "don't do it."

    • If you want stiffer punishment, see this story [slashdot.org].
    • I think that what virus writers do is to some degree helpful and harmless, the idiots that distribute the viruses are the people that should be drawn-and-quartered. Writing something is not the same as doing something with it. These 'programmers' have every right to produce and publish their programs. But the fact that these programs are destructive is why it's illegal to distribute/release/run them. I have no problem with these folks writing these things and publishing them, it allows me to see what they a
      • by kfg (145172) on Monday February 09 2004, @08:05AM (#8224577)
        Tha Riot Be Tha Rhyme of The Unheard -jediman1138-

        As it happens a very appropriate sig to the matter at hand.

        I'd point out, however, that the rioter is often expressing a generalized anger, often against the innocent, indeed often against the very supporters of his own cause. It reduces the cause to an act of thuggery in way no different than any other act of violence.

        A thoughtful and directly relevant resistence is more fruitful, just and likely to draw further support.

        John Brown's taking of the Harper's Ferry Armory is still the stuff of legend. Tim McVeigh's bombing of the Murrah Federal Building is, and shall remain, an act of infamy.

        Some virus writers are angry young men with legitimate cause for their anger.

        Wiping Grandma's C drive as part of an act of generalized vandalism is a poor way to express that anger and does nothing to actually relieve it's cause. It does not even leave one with an idea what the virus writer percieves that cause as being.

        John Brown is considered a terrorist by a good many to this day, but at least we know what the hell he was mad as heaven about.

        If one has a distaste, or even an anger, about certain aspects of society or orginizations within that society, well and good. Oppose them. Oppose them with your words, your actions and even your very life if need be, but please, leave my mom and my grandmom out if it unless they are directly involved.

        As to the issue of punishing minors as adults, I will accept this only at such time as the legally defined as adults. To deny a person of youth the franchise as a full citizen because he is too young, ignorant and immature, but hold him responsible, without the proper rights and benfits of full citizenship and representation, because he "is old enough to know the difference between right and wrong" is hypocritical, unjust and undemocratic.

        This issue came to a head in the 60s when teenagers were being drafted for the Vietnam war, and yet those same teenagers were denied the right to vote on representation or other issues which had obvious life or death consequences to them.

        That is why the age of majority was lowered from 21 to 18.

        Rights and responsibilites should always, always, always march hand in hand.

        KFG

          • With regards to law? Absolutely. The age of 18 may well be "magic" (which is really to say somewhat arbitrary), but it is real nonetheless. If one does not like that lower the age. If one does not like the idea of lowering the age, that only serves to make my point. Set the age wherever you like, but abide by the age.

            I might also point out that this record incriminates not so much the child, but the juvenile detention system. If he commits an armed robbery at 17 and beats an old woman half a year latter wh