$500 million botnet Citadel attacked by Microsoft and the FBI

Joint operation identified more than 1000 botnets, but operations continue

A joint strike by Microsoft and the FBI, with aid from authorities in more than 80 countries, has begun breaking up the Citadel network - a cybercrime ring responsible for stealing more than $500 million (£323 million) from bank accounts.

The criminals in charge of the Citadel network installed key logging software on up to five million computers to steal data, recording logins and passwords before emptying individuals’ online accounts.

Banks affected by the group’s activities included American Express, Bank of America, HSBC, Wells Fargo, PayPal, and Royal Bank of Canada.

Microsoft describes the internationally-organised assault as “our most aggressive botnet operation to date”, marking the first time that “law enforcement and the private sector have worked together […] to execute a civil seizure warrant as part of a botnet disruption operation.”

During the attack, codenamed Operation b54, more than 1,000 botnets were shut down over Wednesday, with Microsoft stating that 455 of those were hosted in 40 data centres in the US.

Richard Bosovich of the Digital Crimes Unit has said that those that run the data centres are usually unaware of the botnets: “There is no responsibility on their part to see what is in the pipes,” he said.

The reports by Reuters on the operation do warn that this operation will not extinguish the operations of the Citadel group, but it will “significantly disrupt” their operation.

Citadel’s operations were started after the source code for an infamous cybercrime toolkit named Zeus was released in 2011. The code available from Zeus offered tools for many forms of cybercrime, from keystroke logging to phishing schemes.

The code was then augmented by enthusiasts and opportunists on cybercrime forums, with Citadel’s tweaks to the toolkit hiding it from programs designed to track Zeus originally. Citadel even blocked victims’ access to legitimate anti-virus and anti-malware sites, making it more difficult to remove the malignant software, even if they were alerted to its presence.

Microsoft is also hunting a hacker known by the alias Aquabox, who was named as the ringleader of the operation in a civil lawsuit filed by the company in North Carolina.

Richard Boscovich of the Digital Crimes Unit suspects Aquabox lives in eastern Europe, as the programs operated by the botnet are programmed not to attack institutions in Ukraine or Russia, likely to avoid attracting local attention to the criminals.

Boscovich describes Aquabox’s operation as international in its scope, working with at least 81 “herders” who help to run the botnet from anywhere in the world. He also operated a forum for his subordinates where they could suggest new tweaks to the software, and exchange tips on managing the computers in their charge.

“Like many of our past operations, this investigation once again revealed how criminals are adapting and evolving,” said Bosovich. “Cooperation is the key to winning the fight against cybercrime, and I’m excited about the opportunity we had to work with law enforcement and the other partners involved.”

News
Bobbi Kristina Brown with her mother Whitney Houston in 2011
people
News
The actress Geraldine McEwan was perhaps best known for playing Agatha Christie's detective, Miss Marple (Rex)
peopleShe won a Bafta in 1991 for her role in Oranges Are Not The Only Fruit
News
peopleHere's what Stephen Fry would say
Sport
David Silva celebrates with Sergio Aguero after equalising against Chelsea
footballChelsea 1 Manchester City 1
PROMOTED VIDEO
Life and Style
ebookNow available in paperback
ebooks
ebookPart of The Independent’s new eBook series The Great Composers
Arts and Entertainment
Caroline Proust as Captain Laure Berthaud in 'Spiral'
tvReview: Gritty, engaging and well-acted - it’s a wonder France’s biggest TV export isn’t broadcast on a more mainstream channel
Arts and Entertainment
music
Arts and Entertainment
Laura Carmichael in still from Madam Bovary trailer
film
News
i100
Sport
Serena Williams holds the Australian Open title
sportAustralia Open 2015 final report
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Recruitment Genius: Web Design Apprentice

    £6240 per annum: Recruitment Genius: This company is a well established websit...

    Recruitment Genius: Senior .Net Application Developer

    £40000 - £60000 per annum: Recruitment Genius: This is a fantastic opportunity...

    Recruitment Genius: .Net / SQL Developer

    £25000 - £35000 per annum: Recruitment Genius: A skilled .NET developer with e...

    Recruitment Genius: IT Technical Support Engineer - PC/Mac

    £25000 - £30000 per annum: Recruitment Genius: This IT support company are cur...

    Day In a Page

    As in 1942, Germany must show restraint over Greece

    As in 1942, Germany must show restraint over Greece

    Mussolini tried to warn his ally of the danger of bringing the country to its knees. So should we, says Patrick Cockburn
    Britain's widening poverty gap should be causing outrage at the start of the election campaign

    The short stroll that should be our walk of shame

    Courting the global elite has failed to benefit Britain, as the vast disparity in wealth on display in the capital shows
    Homeless Veterans appeal: The rise of the working poor: when having a job cannot prevent poverty

    Homeless Veterans appeal

    The rise of the working poor: when having a job cannot prevent poverty
    Prince Charles the saviour of the nation? A new book highlights concerns about how political he will be when he eventually becomes king

    Prince Charles the saviour of the nation?

    A new book highlights concerns about how political he will be when he eventually becomes king
    How books can defeat Isis: Patrick Cockburn was able to update his agenda-setting 'The Rise of Islamic State' while under attack in Baghdad

    How books can defeat Isis

    Patrick Cockburn was able to update his agenda-setting 'The Rise of Islamic State' while under attack in Baghdad
    Judith Hackitt: The myths of elf 'n' safety

    Judith Hackitt: The myths of elf 'n' safety

    She may be in charge of minimising our risks of injury, but the chair of the Health and Safety Executive still wants children to be able to hurt themselves
    The open loathing between Barack Obama and Benjamin Netanyahu just got worse

    The open loathing between Obama and Netanyahu just got worse

    The Israeli PM's relationship with the Obama has always been chilly, but going over the President's head on Iran will do him no favours, says Rupert Cornwell
    French chefs get 'le huff' as nation slips down global cuisine rankings

    French chefs get 'le huff' as nation slips down global cuisine rankings

    Fury at British best restaurants survey sees French magazine produce a rival list
    Star choreographer Matthew Bourne gives young carers a chance to perform at Sadler's Wells

    Young carers to make dance debut

    What happened when superstar choreographer Matthew Bourne encouraged 27 teenage carers to think about themselves for once?
    Design Council's 70th anniversary: Four of the most intriguing prototypes from Ones to Watch

    Design Council's 70th anniversary

    Four of the most intriguing prototypes from Ones to Watch
    Art should not be a slave to the ideas driving it

    Art should not be a slave to the ideas driving it

    Critics of Tom Stoppard's new play seem to agree that cerebral can never trump character, says DJ Taylor
    Bill Granger recipes: Our chef's winter salads will make you feel energised through February

    Bill Granger's winter salads

    Salads aren't just a bit on the side, says our chef - their crunch, colour and natural goodness are perfect for a midwinter pick-me-up
    England vs Wales: Cool head George Ford ready to put out dragon fire

    George Ford: Cool head ready to put out dragon fire

    No 10’s calmness under pressure will be key for England in Cardiff
    Michael Calvin: Time for Old Firm to put aside bigotry and forge new links

    Michael Calvin's Last Word

    Time for Old Firm to put aside bigotry and forge new links