Arrest of WannaCry researcher sends chill through security community

Re:Arrest of WannaCry researcher sends chill through securit... by sillysaurus3 on Friday August 04, 2017 @05:23PM (#14932409)

Banking trojans. They're saying that the DOJ might convict people for selling trojans in the course of their security work.

I think the "selling" part is the problem, not the writing. Don't sell trojans and you won't go to jail. Seems pretty clear.

[ Parent | on HN ]

Re:Arrest of WannaCry researcher sends chill through securit... by weaksauce on Friday August 04, 2017 @06:01PM (#14932712)

I'd say making them is legal and using them on systems you own is completely legal... selling them or using them on machines you are not allowed to access are illegal. Giving them away to someone that sells them or uses them to commit a crime would be a grey area but likely illegal.

[ Parent | on HN ]

Re:Arrest of WannaCry researcher sends chill through securit... by ShabbosGoy on Friday August 04, 2017 @08:02PM (#14933385)

Is selling Trojans illegal? If so, why are companies like Punkbuster and nProtect allowed to develop anticheat software?

A lot of AC software runs in ring0 and behaves a lot like a Trojan. I remember nProtect specifically injecting DLLs into explorer.exe among other nasty "black hat" techniques.

[ Parent | on HN ]

Re:Arrest of WannaCry researcher sends chill through securit... by sillysaurus3 on Friday August 04, 2017 @08:20PM (#14933465)

It's a difference in kind, not degree. The trojan in this case was meant to harvest banking and Amazon logins.

[ Parent | on HN ]

Re:Arrest of WannaCry researcher sends chill through securit... by ryanlol on Friday August 04, 2017 @08:17PM (#14933449)

Intent matters.

[ Parent | on HN ]