Notes

Minecraft Link To Net's Biggest Botnet

Minecraft link to net's biggest botnet



Malware that launched the net's biggest ever cyber-attack in the year 2000 included links to Minecraft servers, according to those investigating it.



Brian Krebs, security blogger has spent months researching the attack that knocked his blog offline.



He claims that the genesis of the Mirai botnet can be traced back to rivalries within the Minecraft community.



His claims are backed up by a security expert who provided security on the net for Minecraft servers.



Robert Coelho, vice president of security firm ProxyPipe said to the BBC that his suspicions about who was behind the Mirai code have been passed to the FBI who are "actively looking into" the claims.



Mirai, a botnet of more than 500,000 connected devices such as routers and webcams, was created.



The attacks it unleashed such as denial-of service (DDoS) attacks that hit web pages with such a large amount of data they fall over was the largest that web had ever seen.



Victims who were knocked offline included Twitter, Spotify and Reddit.



'Hundreds of hours'



Shortly after the attacks, the person who claimed responsibility, utilizing the codename Anna Senpai, posted the source code online, opening the door to copies of the attacks.



Later the malware was modified and the malware was used to attack UK internet service providers TalkTalk or the Post Office.



Since being hit by the Mirai botnet in September 2016, Mr Krebs has put in "hundreds of hours" into uncovering who was behind it.



"If you've ever wondered why it seems that so few cyber criminals are brought to justice, I can tell you that the amount of persistence and investigative resources required to determine who's responsible for what (and why) in the digital age is tremendous," he wrote.



His research led him to Minecraft the computer program owned by Microsoft that lets users create things with cubic blocks.



It has a massive following, especially among children, and it is estimated that at any one moment, more than one million people are playing it.



According to Mr Krebs the large and successful Minecraft web server with more than 1,000 players who log on daily can earn up to $50,000 (PS40,600) per month, mainly from players who rent space to build their own Minecraft worlds.



He writes that Anna Senpai's identity was not revealed until he was able to understand Mirai the most recent member of an IoT botnet family that had been in development for almost three years.



The code used in the earlier versions was commonly used to hack into web servers used to host Minecraft, he claims.



ProxyPipe owned by Mr. Coelho was a popular provider of Minecraft servers as clients and in mid-2015, it was hit by a massive attack which was carried out by an unidentified botnet that was made up of IoT devices such as web cameras.



BBC interviewer Mr Coelho stated that he was suspicious about the attacker, and added that "Minecraft is a tight-knit community." We know who is talking to who."



He alleged that the attack was a result of an alternative security company, that also provided DDoS protection to Minecraft clients.



He claimed that the founder and client of the security firm previously ran the Minecraft web server.



He claims that Anna Senpai, the Mirai author approached him via Skype at September's end to explain that the attack against his company was "not personal" and to boast about how he was paid by owners of a huge Minecraft server to launch an attack against a rival server.



What is a DDoS attack and how can it be prevented?



7 March 2016



'Smart' devices used in cyberattacks



22 October 2016

Minecraft servers
Read More: https://coopwb.org/