Richard Honour admitted to distributing the spyware through emails he sent to users of DarkMyst, an IRC chatroom popular with players of online games.
He also released messages with embedded links claiming to connect to online film clips to other internet users. However, by clicking on the link it would download and install the spyware on to the recipient’s computers.
The 31-year-old then used the infected machines to steal online banking details and other personal information in order to commit identity theft.
The FBI began to investigate the case after receiving complaints from internet users. The US authorities finally arrested him at his home in Washington DC, where forensic officers seized evidence from his computer that suggested he had written the malicious code and stolen sensitive data from the victims’ PCs.
He could face a maximum prison term of five years plus a fine of £128,000 when he is sentenced later this year.
“Criminals like Richard Honour lure the unwary by disguising their Trojan horses as seemingly harmless links to movie files,” said Graham Cluley, senior technology consultant for Sophos.
“The rise of the Trojan has been one of the key developments in cyber crime in recent years, as hackers increasingly use them to steal information and money from unsuspecting internet users. Everyone should be on their guard against this type of attack - and the authorities should be congratulated for bringing complicated cases such as this to a successful resolution.”
Honour is due to be sentenced on 4 May.
US citizen pleads guilty to creating spyware and ID theft
By Fiona Raisbeck on Feb 26, 2007 12:53AM