Virus rerouted internet connections to offshore premium phone numbers
Virus rerouted internet connections to offshore premium phone numbers

Virus writer steals £70,000 in three days

Rogue dialler crime spree ends in court

Written by Robert Jaques

The creator of the Marq premium rate email worm has narrowly dodged a jail sentence, but faces a €3,000 fine from an Italian court.

The man wrote a computer worm which netted him €100,000 by illegally rerouting internet connections to offshore premium phone numbers.

If he had not agreed with the court in Milan to pay the fine, he would have been imprisoned for 14 months.

The Marq-A email-aware worm (also known as Voltan or Zelig) directed innocent computer users to a website where a malicious program posing as a screensaver could be downloaded.

If run, the worm changed the phone number used for accessing the internet to a premium rate number based in Aruba in the Dutch Antilles at a cost of €1.8 per minute.

It is claimed that more than 57,000 minutes were logged on the number in just three days at the end of October 2003. If the virus had been allowed to continue, it is estimated that €1.2m would have been stolen every month.

The Italian financial police were able to freeze the money accrued by the worm, which was first sent to a New York bank account, then transferred via Venezuela before ending up in an account belonging to a 'ghost' company in Aruba.

The crime was discovered and blocked after the virus writer, who although born in Pisa lives in Venezuela, came to Italy to increase the number of premium rate telephone connections.

"More virus writers are being caught and convicted than ever before, and the Italian authorities did well to cut this worm's author down to size," said Graham Cluley, senior technology consultant at Sophos.

"Increasingly we are seeing viruses and worms which are designed to steal money or resources from the infected computers of innocent people. Everybody should make the defence of their computers a priority if they wish to connect to the internet."

The Marq worm arrived in the form of an email with the subject line 'The moment is cathartic', written in Italian, directing users to download what was claimed to be a screensaver called zelig.scr.

Flavio Oreglio, one of the stars of the Italian TV comedy show Zelig, is the author of a book called The Moment is Cathartic and it is suspected that this encouraged some Italian-speaking people to download the malicious program.

Tags:

Further reading

Small firms plagued by security fears

Hacking and viruses top concern for UK's small and medium-sized businesses   More...

'Old timers' fill March virus chart

Zafi and Netsky still wreaking havoc on unprotected PCs   More...

BT cuts off rogue diallers

BT Modem Protection alerts users if modem dials an unauthorised number   More...

Security

The latest wave of cyber-crimes and acts of vandalism have demonstrated once again that many systems are still vulnerable to attack.   More...

Related articles

US identity fraudster jailed for seven years

More than $1m nabbed using fake credit cards   More...

P2P clampdown to fuel Wi-Fi hijacking

Digital pirates will steal connectivity to continue downloading   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement