Monday, July 13, 2020
  • Home
  •             

Diabl0’s downfall…

September 2nd, 2005 by Patrick S

(Click on Images for a larger view)
The big news of last weekend was the arrest of two guys related to the Zotob worms (“Diabl0” and “Coder”).

But who are these guys really? And who’s behind the other PnP worms that were found during the last two weeks?

Well, we know that “Diabl0” had also authored several of the Mytob variants since February this year. However, he’s not behind all of them. There’s around 70 known variants of Mytob and practically all of them create botnets of the infected machines. Some of these botnets have been controlled by unrelated groups, such as Blackcarder. And we’ve found new Mytob variants just yesterday, which obviously are not written by Diabl0. So several people have access to Mytob source code and have been making their own variants.

However, we do know that Diabl0 aka Farid Essebar was associated with 0x90-Team. For example, some earlier Mytob variants downloaded additional components www.0x90-team.com/~diablo/.

The website of 0x90-team has been operating as an underground gathering site for bot authors for quite a while:



Interestingly enough, right after Diabl0 and Coder were arrested, someone defaced the site with an educational message – and a threat: “If you continue to hold this place to train script kiddies, we will come back”.

This is what the site looked like on Saturday:
(The site has now sincew been closed down with a forbiden message appearing when trying to visit it.)



And then again, there are the competing groups, such as m00p. They seem to be behind several of the IRCBot variants that were using PnP vulnerability to spread. This group seems to be active although they had at least one of their members arrested last year.

Source=F-Secure

Posted in Security | 1 Comment »


This entry was posted on Friday, September 2nd, 2005 at 4:05 am and is filed under Security. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.


One Response

  1. Mark Anderson Says:

    It’s the first time i ran through your site and I found it very informative and interesting. Nicely done! when Cards is Plane it will Percieve Table: http://www.filmratings.com/ , Superb, Green, Greedy nothing comparative to Profound Roll Cards is very good Mistery , to Expect Circle you should be very Good Greedy Pair is always Universal Game