Second Arrest Made in Computer Worm Attack (Update)
By Gene Johnson, Associated Press Writer
September 27, 2003

SEATTLE (AP)—Investigators have made a second arrest in connection with the Blaster computer worm, and the latest suspect is another juvenile accused of creating a variant of the worm.

Prosecutors refused to release any information about the suspect, not even the youth's gender or home state. They cited confidentiality rules protecting juveniles accused of crimes.

The U.S. Attorney's Office in Seattle said in a statement that the youth was arrested as a juvenile for intentionally causing damage to protected computers.

The variant the juvenile allegedly created was known as RPCSDBOT. Prosecutors did not say how many computers they believe were infected.

Detectives have yet to determine who created the main version.

Collectively, different versions of the virus-like worm, alternately called LovSan or Blaster, snarled corporate networks worldwide, inundating 1.2 million computers, said Oliver Friedrichs, a senior manager with Symantec Corp., a leading maker of antivirus software.

Friedrichs said Symantec had not determined how many computers the RPCSDBOT variant infected. Its chief difference from the original worm was that it used a Trojan horse that allowed the attacker to retain control of infected systems, he said.

Earlier this month, Jeffrey Lee Parson, a high school senior from a Minneapolis suburb, pleaded innocent in Seattle to federal charges he crippled more than 7,000 computers by modifying a version of the Blaster worm. The charges carry up to 10 years in prison.

Federal prosecutors in Seattle are handling the cases because the worms directed infected computers to bombard Redmond-based Microsoft Corp. Web sites with e-mails.

Earlier this month, police in Romania said they were investigating Dan Dumitru Ciobanu, a 24-year-old former student suspected of modifying the worm to attack computers at a university he attended. A Bucharest computer security company said Ciobanu had been arrested, but police denied that.

eWeek