Phatbot author arrested (HL2 leaker)

MythicaL · May 17, 2004, 01:07 AM

Phatbot author caused large damage

One week ago the arrested presumed Phatbot Entwicker Axel G. respectively "Ago" was obviously working at full capacity with the programming of the Trojaners. It time for various activities remained, about break-downs in stranger of systems. After searches of heise on-line "Ago" was considerably involved in the spectacular source code theft of the PC play Halflife 2. Indications for its co-operation are even in publicly accessible Chatlog files.

In September 2003 the code in the InterNet, geklaute by servers of the US-American Halflife manufacturer valve, had been published. Valve does not have the long expected play until today into the sales to give . When indicated reason for the fact that the SOURCE code did not only betray the most important bases and software techniques, but also an inadvertent knowledge jump provided for Cheatern, which want to provide advantages opposite other players in such Multiplayer Games. After information of heise on-line numbered US-American determination authorities the developed damage on more than 100 million US dollar.

Also German enterprises consider formulating demands for payment of damages against Axel G.. The Karlsruher Provider Schlund&Partner for example became victim of a Phatbot test run: "since at the end of of February we had schlund.net a strongly growing number of HTTP post office inquiries to our enterprise addresses and einsundeins.de determined", said to firm speaker Andreas bricklayer heise on-line. "these inquiries did not come from a Browser, and their structure referred strongly to the Phatbot/Agobot worm." Each Request contained 200 KByte of useless data. Afterwards it turned out that Phatbot in this way determines the InterNet range of the landlord, whom he infected with a "speed test in such a way specified".

Throat had rather fast succeeded it to filter the Phatbot Requests. "we would not have gepatcht our Web servers, by the Request alone in March about three Terabyte at detailed data garbage would not have accumulated", so bricklayers. The Provider registered appropriate HTTP inquiries of approximately 750,000 different IP addresses. At least so many PCS are thus infected of the worms Agobot3 or Phatbot already. Virus experts estimate the number of the stricken systems even at well over one million.

Throat did not let it be based on this realization. "Stutzig made us that it was under the IPs a Linux Rootserver gehosteter of us, from which a Windows worm come should", reported bricklayers. "we got permission from the customer concerned for looking at us its computer. There we found the current source text of the Agobot3-Wurms as well as further information, which pointed on the fact that the worm was spread by this system." Throat conveyed the collected data finally to the kriminalpolizei and refunded an announcement approximately unknown.

Ev!L-aLphA · May 17, 2004, 01:45 AM

haah i beat u :P i got it to the news before u mauhahaha

MythicaL · May 17, 2004, 03:18 AM

Dammit! You suck!!

***craig5320*** · May 18, 2004, 01:45 AM

Now now

MythicaL · May 18, 2004, 03:04 AM

It's cool Craig, me and Ev!L go back some time from the Steam forums

*cough* Steam forums SUCK *cough*

Ev!L-aLphA · May 18, 2004, 03:40 AM

ahah ya dont worry we r just jokin :P

jonis · May 18, 2004, 02:22 PM

Go get them all!

MythicaL · May 18, 2004, 02:31 PM

Nice sig jonis... I was gonna do something like that, but I didn't know how to crop the image so it fits into one of those three boxes.

jonis · May 18, 2004, 02:47 PM

Quote:

Originally posted by JJohnson1988
Nice sig jonis... I was gonna do something like that, but I didn't know how to crop the image so it fits into one of those three boxes.

Thanx JJohnson, it was my first attempt at it.

Riffer · May 18, 2004, 02:50 PM

Can anyone tell me the source of this news? On Heise Online I can not find anything about this...

jonis · May 18, 2004, 02:54 PM

Quote:

Originally posted by Riffer
Can anyone tell me the source of this news? On Heise Online I can not find anything about this...

dunno either, but it sure seems like its been run through babelfish or similar... Looks like source is german

pr0digal jenius · May 18, 2004, 04:14 PM

ircspy.com has a big article on it

May 17, 2004, 01:07 AM	#1
MythicaL I like computers. Join Date: Jan 2004 Location: In front of a monitor Posts: 3,399 Rep Power: 89 System Specs	Phatbot author arrested (HL2 leaker) Phatbot author caused large damage One week ago the arrested presumed Phatbot Entwicker Axel G. respectively "Ago" was obviously working at full capacity with the programming of the Trojaners. It time for various activities remained, about break-downs in stranger of systems. After searches of heise on-line "Ago" was considerably involved in the spectacular source code theft of the PC play Halflife 2. Indications for its co-operation are even in publicly accessible Chatlog files. In September 2003 the code in the InterNet, geklaute by servers of the US-American Halflife manufacturer valve, had been published. Valve does not have the long expected play until today into the sales to give . When indicated reason for the fact that the SOURCE code did not only betray the most important bases and software techniques, but also an inadvertent knowledge jump provided for Cheatern, which want to provide advantages opposite other players in such Multiplayer Games. After information of heise on-line numbered US-American determination authorities the developed damage on more than 100 million US dollar. Also German enterprises consider formulating demands for payment of damages against Axel G.. The Karlsruher Provider Schlund&Partner for example became victim of a Phatbot test run: "since at the end of of February we had schlund.net a strongly growing number of HTTP post office inquiries to our enterprise addresses and einsundeins.de determined", said to firm speaker Andreas bricklayer heise on-line. "these inquiries did not come from a Browser, and their structure referred strongly to the Phatbot/Agobot worm." Each Request contained 200 KByte of useless data. Afterwards it turned out that Phatbot in this way determines the InterNet range of the landlord, whom he infected with a "speed test in such a way specified". Throat had rather fast succeeded it to filter the Phatbot Requests. "we would not have gepatcht our Web servers, by the Request alone in March about three Terabyte at detailed data garbage would not have accumulated", so bricklayers. The Provider registered appropriate HTTP inquiries of approximately 750,000 different IP addresses. At least so many PCS are thus infected of the worms Agobot3 or Phatbot already. Virus experts estimate the number of the stricken systems even at well over one million. Throat did not let it be based on this realization. "Stutzig made us that it was under the IPs a Linux Rootserver gehosteter of us, from which a Windows worm come should", reported bricklayers. "we got permission from the customer concerned for looking at us its computer. There we found the current source text of the Agobot3-Wurms as well as further information, which pointed on the fact that the worm was spread by this system." Throat conveyed the collected data finally to the kriminalpolizei and refunded an announcement approximately unknown. __________________ Always knew I didn't belong in this world. I wasn't made for this. But I'll never forget those who betrayed me, and those who never failed my trust.

May 17, 2004, 01:45 AM	#2
Ev!L-aLphA \| n f e c t e D Join Date: Sep 2003 Location: California Posts: 4,111 Rep Power: 0	haah i beat u :P i got it to the news before u mauhahaha __________________ R.I.P 8/8/04 4/21/08

May 17, 2004, 03:18 AM	Thread Starter #3
MythicaL I like computers. Join Date: Jan 2004 Location: In front of a monitor Posts: 3,399 Rep Power: 89 System Specs	Dammit! You suck!! __________________ Always knew I didn't belong in this world. I wasn't made for this. But I'll never forget those who betrayed me, and those who never failed my trust.

May 18, 2004, 01:45 AM	#4
*craig5320* HH Administrator Join Date: May 2002 Location: Manchester, UK Posts: 8,565 Rep Power: 445 System Specs	Now now __________________ HardwareHeaven on Facebook

May 18, 2004, 03:04 AM	Thread Starter #5
MythicaL I like computers. Join Date: Jan 2004 Location: In front of a monitor Posts: 3,399 Rep Power: 89 System Specs	It's cool Craig, me and Ev!L go back some time from the Steam forums cough Steam forums SUCK cough __________________ Always knew I didn't belong in this world. I wasn't made for this. But I'll never forget those who betrayed me, and those who never failed my trust.

May 18, 2004, 03:40 AM	#6
Ev!L-aLphA \| n f e c t e D Join Date: Sep 2003 Location: California Posts: 4,111 Rep Power: 0	ahah ya dont worry we r just jokin :P __________________ R.I.P 8/8/04 4/21/08

May 18, 2004, 02:22 PM	#7
jonis Alien mindbender Join Date: Dec 2002 Location: Valhalla Posts: 539 Rep Power: 0	Go get them all! __________________ [color=yellow]P4 2.533GHz 533MHz \| 2 x Samsung 512MB PC2700 (1GB) \| Hercules 3D Prophet 9700 Pro \| ASUS P4S8X (fw v1.005) \| SB Audigy Platinum WDC 120GB SE (8MB buffer) x 2 \| M$ intellimouse Explorer 3.0 \| WinXP SP-1 \| DX 9.0c & CATs 5.10 \| Viewsonic VP191b (19" TFT)[/color]

May 18, 2004, 02:31 PM	Thread Starter #8
MythicaL I like computers. Join Date: Jan 2004 Location: In front of a monitor Posts: 3,399 Rep Power: 89 System Specs	Nice sig jonis... I was gonna do something like that, but I didn't know how to crop the image so it fits into one of those three boxes. __________________ Always knew I didn't belong in this world. I wasn't made for this. But I'll never forget those who betrayed me, and those who never failed my trust.

May 18, 2004, 02:50 PM	#10
Riffer DriverHeaven Newbie Join Date: Dec 2003 Posts: 12 Rep Power: 0	Can anyone tell me the source of this news? On Heise Online I can not find anything about this...

May 18, 2004, 04:14 PM	#12
pr0digal jenius Delete Me Join Date: Mar 2004 Posts: 14,648 Rep Power: 0	ircspy.com has a big article on it