Connect with us

Hi, what are you looking for?



Arrest Shines Light on Shadowy Community of Good, Bad Hackers

Two months ago, Marcus Hutchins was an “accidental hero,” a young computer whiz living with his parents in Britain who found the “kill switch” to the devastating WannaCry ransomware.

Two months ago, Marcus Hutchins was an “accidental hero,” a young computer whiz living with his parents in Britain who found the “kill switch” to the devastating WannaCry ransomware.

Today, the 23-year-old is in a US federal prison, charged with creating and distributing malicious software designed to attack the banking system.

His arrest this week stunned the computer security community and shines a light on the shadowy world of those who sometimes straddle the line between legal and illegal activities.

Hutchins’ arrest following Def Con in Las Vegas, one of the world’s largest gathering of hackers, delivered “an extreme shock,” according to Gabriella Coleman, a McGill University professor who studies the hacker community.

“The community at Def Con would not admire a hacker who was doing hard core criminal activity for profit or damage — that is frowned upon,” Coleman told AFP.

“But there are people who do security research… who understand that sometimes in order to improve security, you have to stick your nose in areas that may break the law. They don’t want to hurt anyone but they are doing it for research.”

Hackers are generally classified as “white hats” if they stay within the law and “black hats” if they cross the line.

Advertisement. Scroll to continue reading.

At gatherings like Def Con, “you have people who dabble on both sides of the fence,” said Rick Holland, vice president at the security firm Digital Shadows.

An indictment unsealed by US authorities charges Hutchins and a second individual — whose name was redacted — of making and distributing in 2014 and 2015 the Kronos “banking Trojan,” a reference to malicious software designed to steal user names and passwords used at online banking sites.

– Hacker mindset –

James Scott, a senior fellow who follows cybersecurity at the Institute for Critical Infrastructure Technology, said it is sometimes difficult to separate the white hats from the black hats.

The hacker mindset includes “an insatiable need to satisfy their intellectual curiosity,” Scott said.

“Hackers have that thing, they can’t sleep. It’s persistent and it’s constant and it can drive you nuts.”

Scott said he did not know details of the Hutchins case but that it is possible he wrote code that someone else “weaponized.”

Some friends and collaborators of Hutchins said they found the allegations hard to believe.

“He worked with me on a project in 2014 he refused payment for,” said a tweet from Jake Williams of Rendition InfoSec. “This is incongruous with a black hat writing code for money at the same time.”

Security researcher Andrew Mabbitt tweeted that Hutchins “spent his career stopping malware, not writing it.”

– Chilling effect –

Regardless of the outcome of the case, some security professionals said the arrest could erode trust between the hacker community and law enforcement.

Coleman said many hackers and researchers already tread carefully in light of the Computer Fraud and Abuse Act, a law that makes it illegal to access a computer system without authorization and has been roundly criticized by some security professionals.

“The statute is very broad and it can be wielded as a tool against researchers,” Coleman said.

She noted that many in the hacker community are still reeling over the 2013 suicide of activist Aaron Swartz, who was charged under the same law for illegally downloading academic journals.

Hutchins’ arrest “might actually drive certain security researchers further underground,” said John Dickson of Denim Group, a security consultancy.

“I know several security researchers from Europe, whom I consider on the ‘white hat’ side of the house, who will no longer travel to the US to be on the safe side.”

Holland of Digital Shadows added that it may lead to “strains in the security community, and it could make people more circumspect about who they may collaborate with.”

Scott said the arrest may be counterproductive for cybersecurity because hackers like Hutchins help expose security flaws in order to fix them.

“The establishment needs hackers more than hackers need the establishment,” he said.

Scott added that Hutchins’ obvious talents could make him an asset for national security instead of a liability.

“I wouldn’t be surprised if a federal agency made him an offer he can’t refuse,” Scott said.

“A guy like that should be at Fort Meade,” he added, referring to the headquarters of the National Security Agency.

Written By

AFP 2023

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.


Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.


Expert Insights

Related Content


The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.


Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.


As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.


A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...


Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.


Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Artificial Intelligence

The degree of danger that may be introduced when adversaries start to use AI as an effective weapon of attack rather than a tool...