Eskenzi PR ad banner Eskenzi PR ad banner
  • About Us
Friday, 3 February, 2023
IT Security Guru
Eskenzi PR banner
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
IT Security Guru
No Result
View All Result

Marcus Hutchins: Legal proceedings would be a “dark day for the industry”

by The Gurus
August 7, 2017
in This Week's Gurus
Share on FacebookShare on Twitter

If you have been following the technology news over the last few days it has been filled with reports that Marcus Hutchins has been arrested by the FBI. For those that don’t know who Marcus is, you may remember the WannaCry attacks on the NHS last month. Marcus is a security researcher and was credited for stopping the attack on the NHS (or at least limiting the impact by finding the kill switch within the code).
So, the question is why does the FBI believe Marcus is a hacker and what are the charges against Marcus Hutchins? The FBI case is based on the Kronos banking Trojan, which collects bank account passwords and user details. He is being accused of creating and selling this code. It should be noted that the charges do not state he has used the code to gain from it by attacking anyone.
This has shocked the cybersecurity community as research in to vulnerabilities is a critical part of the process of finding vulnerabilities, with many companies offering ‘bug bounties’ for finding issues with their programmes.
This case raises a number of issues between where the cybersecurity community is and where the law is in relation to researching and stopping attacks. If this case progresses then the danger becomes researching and reporting will stop, and the ‘bad guys/girls’ have more opportunity to gain access to the network and end systems.
Ethical hacking and bug hunting are required to keep the public safe. If we are to start legal proceedings for researchers, then it’s a dark day for the industry. Being able to share information and code in good faith by helping other researchers is important for everyone.
I’m not a lawyer, however I believe the problem with this case has is in proving who has written the code. Software is complicated and requires a team approach; the case will therefore require the FBI to prove that he has written the programme and intended to use it for material gain.
The indictment has not provided many details and this may come out later if and when it proceeds to trial. However from what has been released at this time it seems to be an odd case of a researcher being between a rock and a hard place, or as they say, no good deed goes unpunished.
 
 
Ron Austin, Associate Professor, School of Computing and Digital Technology, Birmingham City University, UK

FacebookTweetLinkedIn
Tags: cybersecuritykronosmarcus hutchinsRansomwaretechwannacry
ShareTweetShare
Previous Post

NHS cyber-defender Marcus Hutchins to appear in US court

Next Post

Does the cloud really live up to its security expectations?

Recent News

Ransomware attack halts London trading

Ransomware attack halts London trading

February 2, 2023
Ransomware conversations: Why the CFO is pivotal to discussing and preparing for risk

Ransomware conversations: Why the CFO is pivotal to discussing and preparing for risk

February 2, 2023
JD Sports admits data breach

JD Sports admits data breach

January 31, 2023
Acronis seals cyber protection partnership with Fulham FC

Acronis seals cyber protection partnership with Fulham FC

January 30, 2023

The IT Security Guru offers a daily news digest of all the best breaking IT security news stories first thing in the morning! Rather than you having to trawl through all the news feeds to find out what’s cooking, you can quickly get everything you need from this site!

Our Address: 10 London Mews, London, W2 1HY

Follow Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

This site uses functional cookies and external scripts to improve your experience.

Privacy settings

Privacy Settings / PENDING

This site uses functional cookies and external scripts to improve your experience. Which cookies and scripts are used and how they impact your visit is specified on the left. You may change your settings at any time. Your choices will not impact your visit.

NOTE: These settings will only apply to the browser and device you are currently using.

GDPR Compliance

Powered by Cookie Information