<div dir="ltr"><span class="gmail-main-article-info">
<a href="https://thehackernews.com/2017/08/malwaretech-marcus-hutchins.html" target="_blank">Marcus Hutchins</a>, the British malware analyst who helped stop <a href="https://thehackernews.com/2017/05/how-to-wannacry-ransomware.html" target="_blank">global Wannacry menace</a>, is now facing four new charges related to malware he allegedly created and promoted it online to steal financial information.<br>
<br>
Hutchins, the 24-year-old better known as MalwareTech, was <a href="https://thehackernews.com/2017/08/marcus-hutchins-arrested-fbi.html" target="_blank">arrested by the FBI</a>
last year as he was headed home to England from the DefCon conference
in Las Vegas for his alleged role in creating and distributing Kronos
between 2014 and 2015.<br>
<br>
Kronos is a Banking Trojan designed to steal banking credentials and
personal information from victims' computers, which was sold for $7,000
on Russian online forums, and the FBI accused Hutchins of writing and
promoting it online, including via YouTube.<br>
Hutchins <a href="https://thehackernews.com/2017/08/malwaretech-marcus-hutchins.html" target="_blank">pleaded not guilty</a> at a court hearing in August 2017 in Milwaukee and release on $30,000 bail.<br>
<br>
However, a revised superseding indictment
was filed with the Wisconsin Eastern District Court, under which
Hutchins faces four new charges along with the six prior counts filed
against him by the FBI a month before his arrest.<br>
<h3 style="text-align:left">
Marcus Accused of Creating and Selling Another Malware</h3>
According to the new indictment, Hutchins created a second piece of malware, known as "<b>UPAS Kit</b>," and also lied to the Federal Bureau of Investigations (FBI) when he was arrested and questioned last year in Las Vegas.<br>
<br>
As described by prosecutors, UPAS Kit is Spybot virus that "allowed for
the unauthorized exfiltration of information from protected computers"
and "used a form grabber and web injects to intercept and collect
personal information," including credit card details.<br>
<br>
UPAS Kit advertised to "install silently and not alert antivirus engines," for prices ranged above $1,000 back in 2012.<br>
<br>
According to the indictment, Hutchins created UPAS Kit in 2012, when he
was just 18, and sold it online to another unnamed co-defendant
identified as "VinnyK" (aka Aurora123), who was also involved in
promoting Kronos.<br>
<br>
VinnyK then sold UPAS Kit to another person in Wisconsin in 2012, who
allegedly used the malware to attack computers in the United States.<br><br>
Two other charges relate to Hutchins "aiding and abetting" the
distribution of invasive code in an attempt to damage "10 or more
protected computers," and helping others to hack computers for financial
gain.<br>
<br>
<h3 style="text-align:left">
Marcus Appealed to his Followers for Donations to Cover Legal Costs</h3>
As the news on the revised indictment broke, Hutchins, who has
repeatedly denied any illegal activity, called the charges "bullshit"
and appealed to his Twitter followers for donations to cover legal
costs.<br>
<blockquote class="gmail-tr_bq">
"Spend months and $100k+ fighting this case, then they go and reset the
clock by adding even more bullshit charges like 'lying to the FBI,'"
Hutchins <a href="https://twitter.com/MalwareTechBlog/status/1004420585869332480?ref_src=twsrc%5Etfw&ref_url=https%3A%2F%2Fwww.cyberscoop.com%2Fmarcus-hutchins-upas-kit-charges-fbi%2F" rel="nofollow" target="_blank">wrote</a> on his Twitter, calling for donations by adding a quote from Starcraft video game: "We require more minerals."</blockquote>
Hutchins' lawyer Brian Klein called the charges "meritless" and said he expects his client to be cleared of all charges.<br>
<blockquote class="gmail-tr_bq">
"[We] are disappointed the govt has filed this superseding indictment,
which is meritless," Klein tweeted. "It only serves to highlight the
prosecution's serious flaws. We expect [Hutchins] to be vindicated and
then he can return to keeping us all safe from malicious software."</blockquote>
Hutchins, who is living in Los Angeles on bail, is unable to leave the
United States since last year due to his pending criminal charges.<br>
<br>
Hutchins stormed to fame and hailed as a hero earlier last year when he <a href="https://thehackernews.com/2017/05/wannacry-ransomware-cyber-attack.html" target="_blank">accidentally stopped</a> a global epidemic of the <a href="https://thehackernews.com/2017/05/wannacry-ransomware-unlock.html" target="_blank">WannaCry ransomware attack</a> that crippled computers all across the world.</span><br><span class="gmail-gI"><span class="gmail-go"><span></span></span></span></div>