A Ransom Hero
As a vast “ransomware” attack raced from computer to computer, infecting tens of thousands around the world, a young tech expert worked from his bedroom in England to bring the rampage to a halt. But Marcus Hutchins doesn’t consider himself a hero.
Q WHAT DID HE DO?
A In the first hours after the WannaCry virus struck Friday, the computer whiz and surfing enthusiast who lives with his family in a small seaside town in southwest England discovered a so-called “kill switch” that slowed the unprecedented outbreak. He then spent the next three days fighting the worm that crippled Britain’s hospital network as well as factories, government agencies, banks and other businesses around the world. WannaCry paralyzed computers running mostly older versions of Microsoft Windows by encrypting users’ computer files and displaying a message demanding a ransom of US$300 to US$600 to release them; failure to pay would leave the data mangled and likely beyond repair.
Q HOW DID HE DO IT?
A Hutchins, 22, who works for Los Angeles-based Kryptos Logic, said he came across the solution when he was analyzing a sample of the malicious code and noticed it was linked to an unregistered web address. He promptly registered the domain, something he regularly does to discover ways to track or stop cyber threats, and found that stopped the worm from spreading. Kryptos Logic chief executive Salim Neino said Hutchins’ quick work allowed him to slow the virus on Friday afternoon European time, before it could fully affect the United States.
Q HE SAVED AMERICA?
A Yes, according to his bosses. “Marcus, with the program he runs at Kryptos Logic, not only saved the United States but also prevented further damage to the rest of the world,” Neino said in an interview from Venice, Italy. “Within a few moments, we were able to validate that there was indeed a kill switch. It was a very exciting moment.” Neino said the worm was “poorly designed” — patched together and a “sum of different parts” with an unsophisticated payment system.
Q SO HE’S A HERO?
A Hutchins said he fights malware because “it’s the right thing to do.” In his first face-to-face interview, Hutchins said hundreds of computer experts worked throughout the weekend to fight the virus, which paralyzed computers in some 150 countries. “I’m definitely not a hero,” he said. “I’m just someone doing my bit to stop botnets.” Kryptos Logic is one of hundreds of companies working to combat online threats for companies, government agencies and individuals around the world. Hutchins is part of a global community that constantly watches for attacks and works to thwart them, often sharing information on Twitter.
Q WHAT’S NEXT FOR HUTCHINS?
A He’s been in touch with the FBI, as well as British national cyber-security officials. After more analysis, Hutchins, an avid surfer, plans to take a vacation — travelling to Las Vegas and California on the company dime.