Mizkif Reacts to Earth's Deadliest [Computer] Virus by Disrupt with Twitch Chat!

the [ __ ] is this [Music] monday a whale explodes in a small town in taiwan president hamid karzai signs the new constitution of afghanistan and the day is just getting started in north america at around 8am an email appears in the inbox of a few users upon opening there's an attachment it has a generic name like document.txt or readme.doc and to the mind of an unsuspecting 2004 human it looks legit right now the virus also known as my doom is now copying itself to the windows system folder and replacing an existing file called taskmod.exe it also creates the file shimjapi.d in the same directory this is a backdoor trojan that opens tcp listening ports ranging from 3127 to 3198 a tcp listening port is a network protocol that an application listens to it acts as a communication endpoint so in this case it acts as a portal that can download and execute other files from wherever the virus was originally deployed one of these files is simply named message the worm then creates two registry keys the first one says that whenever the computer is rebooted the same worm will run again the second one says that whenever the user opens internet explorer the file created earlier shinjapi will also run to the unsuspecting user nothing is happening in the background the worm is now propagating itself sending emails using the original computer's network to other users it disguises under randomly generated email addresses with generic names like adam alex dan maria and sandra but this worm isn't blind it's smart it avoids sending itself to domains that would house users that could discover it [Music] domainslike.edu.gov and others it also avoids informational addresses like help act or admin and that's just before lunch [Music] what the [ __ ] is this [Music] this looks like you [Music] by the midday sun the worm has slowed overall global internet performance by approximately 10 average web page loading times slow by 50 the computing community is reporting that one in 10 email messages now contain the virus the seo group a software company creating linux products offers a 250 000 reward for information leading to the arrest of the warmest creator oh [ __ ] the fbi and secret service also open investigations [Music] a second version of the worm has surfaced my doom dot b this new version includes a denial of service attack against the seo group and an identical attack against microsoft the worm will launch 64 threads each of them requesting the main page of the websites this process of requesting 64 times is repeated every second the request is simple get http 1.1 from every infected machine throughout the globe it's scheduled to begin in six days what the [ __ ] is this [Music] cat am i what the [ __ ] is going on [Music] marcus hutchins walks out the front door of an airbnb mansion in las vegas he's retrieving his order of big mac and fries from a delivery driver when he notices something across the street for a moment he wonders is this finally it he brushes the thought off this is his last night in the city he's been at defcon one of the world's largest hacking conferences where for the past week he's been partying and upheld as a hero because less than three months earlier he had saved the internet from one of the worst cyber attacks in history wannacry companies in ukraine russia the netherlands and england have all reported major disruption he had found and triggered a secret kill switch in the self-propagating virus that had stopped the global spread this had earned him major status in both white and blackhead networks now though as he's at the airport the tsa agents seem to be extra lenient with him he doesn't even have to take his laptops out of their bag he wanders the terminals grabbing a coke and sitting patiently ready to return to his job analyzing malware at a firm called crypto's logic three men walk up are you marcus his mind races through every possible illegal thing he's done that might have interested customs surely he thought it couldn't be the thing that years old unmentionable crime was it that he may have left marijuana in his bag the agents walked him through a security area full of monitors and then sat him down in the interrogation room for the next few minutes the agent struck a friendly tone asking hutchins about his education and krypto's logic for those minutes hutchins allowed himself to believe that perhaps the agents just wanted to know about wannacry perhaps just a particularly aggressive way to get his cooperation into their investigation then 11 minutes into the interview his interrogators asked him about a program called kronos [Music] from the age of six hutchins had watched his mother use windows 95 on the family's dell tower desktop his father was often annoyed to find him dismantling the family pc or filling it with strange programs hutchins develops a keen interest in surfing freedom in the ocean he also grows farther into the other kind of circle he becomes curious about the html characters behind the websites he visits good one and was coding rudimentary hello world scripts in basic by the age of 13. he came to see programming as a gateway to build whatever you wanted [Music] far more exciting than even the wooden forts and catapults he built with his brother on his 13th birthday after years of fighting for time on the family's aging dell hutchins parents agreed to buy him his own computer or rather the components he requested where he played minecraft within a year hutchins is exploring an elementary hacking forum one dedicated to wreaking havoc upon the popular instant messaging platform msn there he finds a community of like-minded young hackers showing off their inventions one brags creating a kind of msn worm that impersonates a jpeg when someone opens it the malware would instantly and invisibly send itself to all their msn contacts some of whom would fall for the bait open the photo which would fire off a round of messages infinitely around the time he turns 14 hutchins post his own contribution to the forum a simple password stealer install it on someone's computer and it could pull the passwords from the victim's web accounts jesus passwords were encrypted but he'd figured out where the browser hid the decryption key when asked on the forum how many passwords he's gotten from the hack he says he didn't it was just a cool thing he made over the next few years he sharpens his skill by executing petty hacks including booting his entire school's admin office out of their network cool he gets suspended for two weeks the original hacking community he started on gets shut down so hutchins joins a new one called hack forums i've been there from petty hacks to more serious ones the community on this site has murkier ethics here hutchins now 15 years old brags about a botnet he had created of more than 8 000 computers mostly hacked with simple fake files he'd uploaded to bittorrent sites into running he also goes on to set up his own business he begins renting servers and then selling web hosting services to the hack form users for a monthly fee the enterprise which hutchins calls ghost hunting advertises itself as a place where all illegal sites are allowed one customer asks if it was acceptable to host juarez black market software hutchins immediately replies [Music] he's got some morals experts discover something in the code an error that will deem the attack non-functional on the day of reckoning some skeptics warn that the error may be a decoy intended to conceal the true purpose of my doom i was alive b is now blocking access to websites of over 60 computer security companies as well as ads by doubleclick and other online marketing agencies it's spreading but not as fast as my doom a one in every five emails now contain the worm we've reached the peak microsoft offers an additional 250 000 to the reward that's so cool to see companies like that do that [ __ ] denial of service attack begins two days earlier than expected an estimated one million computers now infected send connections the company responds by removing the original domain from operation the second attack begins this time aimed at microsoft microsoft responds by directing users to a website unaffected by the attack the attack at this point has remained minimal microsoft.com remains functional a second one it never was functional has appeared it rides the tail end of my doom by sneaking into a back door left open its purpose is the same as its big brother a ddos against microsoft however it doesn't make much of a dent [Music] my doom a stops spreading the back door remains open someone triggers my doom b and stops it from spreading the back door remains open [Music] cyberspace returns to relative normality while the creator of the virus remains a mystery the country of origin has been pinpointed to russia [Music] the variant of my doom attacks google completely stopping functionality of the website for a large portion of the day new versions begin surfacing my doom u v w and x infect more computers and install more back doors sparking worries that a new more powerful my doom is brewing my doom version ao is born then silence just an hour ago we had an attack we had learned from the nysc that they've had some kind of denial of service attack on their website u.s authorities say north korea may be responsible for cyber attacks on government wealth and south korea the code was called trojan.dozer and much of the language it's written in appears to be reused from the my doom worm but the original hasn't resurfaced the ransom money remains unclaimed the estimated damages the virus caused [Music] the individual or the group behind the virus has yet to be found remaining in the shadows of cyberspace and here we go you can see already the massive amount of traffic being pushed out of this virtual machine for every black hat hacker there's a white hat hacker someone hired by a company to specialize in breaking software to ensure maximum security these people know the ins and outs of computer science but they started at the fundamentals offers foundational computer science courses for a fraction of the cost of traditional university rates whether you're looking to become a software developer oh wait it's an app or just want to feed your brand new valuable information.org damn i was going to add honestly i was like huh [Music] in his mind he still sees what he's doing as several steps removed from any real cyber crime hosting shady servers or stealing a few facebook passwords hardly seems like a serious offense he isn't after all carrying out bank fraud [Music] after hearing about this particularly talented young hacker a figure on the forum known as vinnie reaches out to hutchins hey [Music] he says he'll give hutchins half the profits from every sale they'd call the product after the japanese yupus tree whose toxic sap was traditionally used in southeast asia to make poison darts and arrows hutchins agrees and after nine months of work the root kit goes up for sale hutchins doesn't ask vinnie any questions about who's buying the money starts rolling in always in bitcoin the 17 year old tells his parents he's been working on freelance programming projects they buy it he purchases new game consoles and even takes up crypto trading creating his own programs that hedged his bitcoin buys with short selling protecting his holdings against the dramatic fluctuations of the early crypto market damn with the success of yupus kit vinnie tells hutchins that it's time to build yupus kit 2.0 he wants new features for the sequel including a keylogger that could record victims every keystroke the ability to see their entire screen and a feature that could insert fake text entries and other content into the pages that the victims were seeing something is a web inject this last demand in particular gives hutchins a deeply uneasy feeling web injects have a very clear purpose they're designed for bank fraud see most banks require a second factor of authentication when making a transfer they often send code via a text message to a user's phone and ask them to enter it on a web page webin jacks allow hackers to defeat that security measure by sleight of hand a hacker initiates a bank transfer from the victim's account and then when the bank asks the hacker for a confirmation code the hacker injects a fake message onto the victim's screen asking them to perform a routine confirmation of their identity with a text message code when the victim enters that code from their phone the hacker passes it on to the bank confirming the transfer out of their account ah he would now without a doubt be helping thieves steal from innocent victims he refuses a year earlier vinnie offered to give hutchins free weed mushrooms and ecstasy from silk road against his better judgment he agrees to share his address and name to the dark web associate oh no again hutchins declines knowing full well he couldn't find a better hacker than hutchins vinnie proposes something hutchins could code the updated pack just without the web inject hutchins agrees as he develops the next generation root kit over the following months hutchins begins attending a local community college he develops a bond with one of his computer science professors and is surprised to discover that he actually wants to graduate but he strained under the load of studying while also building and maintaining vinnie's malware his dark web business partner now seems impatient to have their new root kit finished he begins pinging hutchins constantly demanding updates to cope hutchins begins turning back to silk road buying amphetamines to replace his nighttime coffee benches after nine months of all night coding sessions the second version of yoopa's kit is ready but as soon as hutchins shares the finish code with vinnie vinnie responds with a surprising revelation he had secretly hired another coder to create the weapon checks that hutchins refused to build with the two programmers work combined vinnie has everything he needs to make fully functioning bank trojan hutchins is livid speechless he quickly realizes he has very little leverage against many the malware is already written and for the most part hutchins had authored it vinnie asks him to combine the two separate codes and reminds him if he quits now he'll get nothing he'd have taken all the risks enough to be implicated but would never receive any of the rewards hutchins instincts tell him to quit his actions go otherwise the root kit is ready vinnie drops the yupa's branding and changes it to the name of a cruel giant in greek mythology the father of zeus and all the other vengeful gods in the pantheon of mount olympus chronicles and the famous wow server the malware is a modest success it has bugs that need fixing and those fixes fall on hudson's shoulder paired with his daytime responsibilities of studying by night he takes more amphetamines where he reaches states of euphoria only in this condition can he enjoy his work he stays up for days studying coding and then crashing into a state of anxiety and depression before sleeping for 24 hour stretches between the highs and lows he meets a friend from l.a called randy unlike vinnie randy is more open about his irl life with hutchins the two form a friendship and eventually randy asks hutching to trade 10 000 of his money on the crypto programs hutchins agrees one morning hutchins wakes up from a deep amphetamine bender to discover an electrical outage during the night all of his computers had powered off just as bitcoin's price crashed erasing close to 5000 of randy's savings still near the bottom of his drug use hutchins panics he finds randy online and admits to losing his money knowing that randy has been looking for bank fraud malware in the past they call it even hutchins graduates from college in the spring of 2015. looking to start life outside of schooling on the right foot he quits the amphetamines cold turkey [Music] what follows are weeks of withdrawal he falls behind on his kronos work and eventually vinnie cuts him off the bitcoin payment stop coming what hutchins largely leaves the hacking underworld and retreats into video games and breaking bad cool in one episode he receives tunnel vision a sense of impending doom he only leaves his home rarely to meet up with his friends or swim in the ocean the waves provide him comfort a reminder of his mortality that's deep months clean some of his strength returns he rejoins cyberspace this time as an anonymous blogger reverse engineering some of the largest botnets in the wild over time his readership grows into the tens of thousands and he gains mutual respect between the black hat and white hat communities through this he receives a job offer when he sees the six figure annual salary all right it was more than he has ever earned as a cyber criminal malware developer hutchins comes to understand for a talented hacker crime truly doesn't pay [Music] a young anesthesiologist is finishing a lunch of chicken curry and chips from the hospital cafeteria trying to check his email before he's called back into surgery but he can't log in the email system is down he shares a brief collective grumble with the other doctors in the room who are all accustomed to computer problems across the nhs after all their pcs are still running windows xp just then an i.t administrator comes in the room and tells the staff that something more unusual is going on a virus is spreading across the hospital's network one of the pcs in the room has rebooted and now it isn't until they check the world news to discover the attack is global cyber security researchers named the worm wannacry after the extension it adds to file names after encrypting them as it paralyzes machines and demands it's bitcoin ransom wannacry is jumping from one machine to the next using a powerful piece of code called eternal blue was stolen from the nsa by a group of hackers known as the shadow brokers it leaked into the open internet a month earlier yeah i remember this marcus hutchins is on vacation he returns from picking up lunch at his local fish and chips shop he sits down in front of his computer and discovers the internet is on fire within minutes a hacker friend who goes by the name caffeine sends hutchins a copy of wannacry's code with his lunch still sitting in front of him he begins dissecting it first he spins up a simulated computer on a server that he runs in his bedroom complete with fake files for the ransomware to encrypt he runs the program in the quarantined test environment he immediately notices that before encrypting the decoy files the malware sends out a query to a certain very random looking web address this strikes hutchins as significant if not unusual when a piece of malware pings back to this sort of domain that usually means it's communicating with a command and control server somewhere that might be giving the infected computer hutchins copies the long website brings it into his web browser and finds so he visits the domain registrar and at exactly 308 he registers the address he hopes that in doing so he'll either be able to steal control away from some of the victim's computers or at least he'll gain a tool to monitor the number and location of infected machines a move that malware analysts call sinkholing sure enough as soon as hutchins sets up the domain on a cluster of servers hosted by his employer it's bombarded with thousands of connections from every new computer oh [ __ ] the virus still infects computers but without connection the botnet can't continue hutchins tweets about the findings he is flooded with hundreds of emails from other researchers journalists and system admins learn more about the plague devouring the world's networks over the next few days kryptos logic and hudson's fight to keep the domain online if it goes down the malware will spread again they battle other botnets that attempt to ddos against the kill switch eventually cloudflare steps in and offers their services they absorb as much traffic as any botnet could throw out the kill switch domain and the standoff is ended hutchins is now no longer anonymous his newfound fame grows a local peaches shop offers him freeza for a year nice his parents finally understand what he does for a living but only at defcon did hutchins truly allow himself to enjoy his new rockstar status it seems his crimes of past will remain that way oh [ __ ] the agents pull up a transcription of the conversation with randy from three years earlier followed by a warrant for his arrest on conspiracy to commit computer fraud and abuse hutchins is driven to a las vegas jail in a black fbi suv that looks exactly like the one he'd spotted earlier he's allowed one phone call which he uses to contact his boss at crypto salom nano news of his arrest spreads and unbeknownst to him the hacker community is raising the alarm demanding his freedom on the day he's arrested a pair of well-known cyber security professionals named tara wheeler and deviant ulam are flying back to their home in seattle from las vegas the two have never met hutchins and barely even interacted with him on twitter wheeler has just received a five-figure severance package from the security giant synantic because her division had been shuttered she and olam have been planning to use the money as a down payment on a new home instead on a whim they decide to spend it bailing out marcus oh [ __ ] in 24 hours of leaving las vegas they get a flight back to the city and after many mix-ups with a few minutes to spare they hand the courthouse clerk a bail check damn that's an appreciation thread from here hutchins awaits trial in a crowded halfway house while even more forces in the hacker community are gathering to come to his aid two well-known veteran lawyers brian klein and hacker defense attorney marcia hoffman take his case pro bono on the condition he pleads not guilty and remains under house arrest in los angeles where klein has an office over the next two months the lawyers chip away at his case eventually he's allowed to travel beyond his temporary marina del rey home and use computers once again oh [ __ ] does logic has him on unpaid leave so he spends his days surfing and cycling down the long seaside path that runs from the apartment to malibu he's in the city he's always dreamed of living in but the circumstances leave him depressed he's tormented by the truth despite all the talk of his heroics he knows deep down he is guilty he's offered a deal if he agrees to reveal everything he knows about the identities of other criminal hackers and malware authors they would recommend a sentence of no prison time hutchins hesitates he says he doesn't actually know anything about the identity of vinnie their real target but he also says that on principle he opposes snitching refuses soon afterward prosecutors hit back with a superseding indictment a new set of charges that bring the total to 10 including making false statements to the fbi in his initial interrogation hutchins and his lawyers see the response as a strong-armed tactic punishing hutchins for refusing to accept the first offer yeah after losing a series of motions including one to dismiss his las vegas airport hello what are you doing i'm working what are you doing hd house tour wait a minute you're one-upping me are you [ __ ] serious my stream product production quality is so much better than yours my you're stealing my content hd how tours are you yeah this is real high quality weight that's actually real high quality what the [ __ ] is that crazy isn't that crazy what the hell you're still in my job sorry about the immersion confession as evidence hutchins finally accepts the plea bargain in april 2019. this new deal is arguably riskier than the one he's been offered earlier they now agree only to make no recommendation for sentencing hutchins would plead guilty to two of the ten charges and would face as much as ten years in prison and half a million dollar fine the choice is up to the judge and we see all sides of the human existence both young old career criminals those like yourself one might view the ignoble conduct that underlies this case against the backdrop of what some have described as the work of a hero and that is what gives this case in particular its incredible uniqueness if we don't take the appropriate steps to protect the security of these wonderful technologies that we rely upon each and every day it has all the potential to raise incredible havoc and it's going to take individuals like yourself who have the skill set to come up with solutions the final call in the case of marcus hutchins today is a sentence of time already served with a one year period of supervised release hutchins is a free man [Music] what an insane video what the actual [ __ ] was that chad what the actual [ __ ] was that holy [ __ ] oh my god that was nuts that was [ __ ] nuts holy [ __ ] that was probably the best video we watched all year it's been a good 18 days [Music] my god that was crazy

Channel: Clipped & Shipped

Views: 19,106

Keywords: mizkif, mizkif reacts, mizkif reacts to earth's deadliest computer virus, mizkif reacts to disrupt, disrupt reaction, earth's deadliest computer virus reaction, earth's deadliest computer virus mizkif reaction, mizkif reacts to earth's deadliest virus with twitch chat, mizkif reacts to disrupt with chat, mizkif reacts to earth's deadliest virus with chat, mizkif reacts with chat, mizkif reacts to disrupt videos with twitch chat, earth's deadliest computer virus, mizkif disrupt

Id: Jj9RCdRIAKQ

Length: 33min 40sec (2020 seconds)

Published: Tue Jan 19 2021