Western Pa. hacker, 2 others get light sentences after working with FBI |

Western Pa. hacker, 2 others get light sentences after working with FBI

The Associated Press

ANCHORAGE, Alaska — Three young computer hackers whose “botnet” known as Mirai virtually paralyzed chunks of the internet two years ago have received light sentences after helping the FBI with cybercrime and cybersecurity.

Paras Jha, 22, of Fanwood, N.J.; Josiah White, 21, of Washington, Pa.; and Dalton Norman, 22, of Metairie, La., were sentenced Tuesday to five years of probation and 62 ½ workweeks of community service in U.S. District Court in Anchorage.

The three men, who pleaded guilty to computer fraud charges in December, also were ordered to pay $127,000 in restitution and gave up what authorities said was a significant amount of cryptocurrency.

Chief U.S. District Judge Timothy Burgess handed down the sentences after the men cooperated extensively with the FBI on cybercrime investigations and broader defensive efforts, according to a statement from the U.S. attorney’s office in Alaska. Terms of their sentences include the expectation they will keep helping the FBI.

“Cybercrime is a worldwide epidemic that reaches many Alaskans,” Bryan Schroder, the U.S. attorney for Alaska, said in the release. “The perpetrators count on being technologically one step ahead of law enforcement officials.

“The plea agreement with the young offenders in this case was a unique opportunity for law enforcement officers and will give FBI investigators the knowledge and tools they need to stay ahead of cybercriminals around the world,” he said.

The men created a collection of hundreds of thousands of computers and internet-connected devices — including routers, webcams and other devices — infected with malware that they controlled, according to court documents.

A broad “denial of service” attack waged using the Mirai botnet knocked platforms such as Twitter and Netflix offline in October 2016. Prosecutors said they don’t believe the three men were responsible for that attack because Jha had already posted the code for Mirai to online criminal forums.

Jha and Norman also pleaded guilty to a separate conspiracy charge for using another powerful botnet for a “clickfraud” scheme, used to artificially generate advertising revenue by making it appear that a real user clicked on an online ad.

The investigation originated in Anchorage after some internet-connected devices in Alaska were affected by the Mirai malware.

Bill Walton, a special agent who oversees the Anchorage FBI’s Cyber Crime unit, said in December that the botnet’s name is a reference to a Japanese anime called Mirai Nikki, which loosely translated into English means “future diary.” Walton said the three men were fans of that anime.

TribLIVE commenting policy

You are solely responsible for your comments and by using you agree to our Terms of Service.

We moderate comments. Our goal is to provide substantive commentary for a general readership. By screening submissions, we provide a space where readers can share intelligent and informed commentary that enhances the quality of our news and information.

While most comments will be posted if they are on-topic and not abusive, moderating decisions are subjective. We will make them as carefully and consistently as we can. Because of the volume of reader comments, we cannot review individual moderation decisions with readers.

We value thoughtful comments representing a range of views that make their point quickly and politely. We make an effort to protect discussions from repeated comments either by the same reader or different readers

We follow the same standards for taste as the daily newspaper. A few things we won't tolerate: personal attacks, obscenity, vulgarity, profanity (including expletives and letters followed by dashes), commercial promotion, impersonations, incoherence, proselytizing and SHOUTING. Don't include URLs to Web sites.

We do not edit comments. They are either approved or deleted. We reserve the right to edit a comment that is quoted or excerpted in an article. In this case, we may fix spelling and punctuation.

We welcome strong opinions and criticism of our work, but we don't want comments to become bogged down with discussions of our policies and we will moderate accordingly.

We appreciate it when readers and people quoted in articles or blog posts point out errors of fact or emphasis and will investigate all assertions. But these suggestions should be sent via e-mail. To avoid distracting other readers, we won't publish comments that suggest a correction. Instead, corrections will be made in a blog post or in an article.