June 11, 2008

Hacker pleads guilty to attacking anti-phishing group

California man launched a Valentine's Day attack that nearly knocked the Castlecops anti-phishing Web site offline

A Fairfield, Calif., hacker has pleaded guilty to launching a Valentine's Day 2007 computer attack that nearly knocked an anti-phishing Web site offline.

Gregory King, 21, pleaded guilty Tuesday in federal court to two counts of "transmitting code to cause damage to a protected computer," for launching distributed denial of service (DDOS) attacks against the CastleCops anti-phishing Web site and Killanet, an online forum for gamers and graphic designers.

He was arrested on Oct. 1 as part of the U.S. Federal Bureau of Investigation's Operation Bot Roast. As agents knocked on his door, King stashed his laptop computer in his backyard, but it was eventually recovered, according to the U.S. Department of Justice (DOJ).

Killanet was attacked between 2004 and 2006 by King's botnet of about 7,000 hacked computers, the DOJ said in a statement.

CastleCops said that its attack reached a peak strength of 969Mbps. If the volunteer-run organization had been charged for all that bandwidth, it would have had to close shop, the group said.

CastleCops collects information on phishing attacks and works with law enforcement to thwart the attacks.

King's plea agreement calls for a two-year prison sentence. He is set to be sentenced on Sept. 3 by U.S. District Judge Lawrence Karlton.

Sign up to receive Security Resource Alerts

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.