SUCCESSES AND FAILURES APPREHENDING MALWARE AUTHORS
Raymond Pompon · 2010
This paper walks through the Donttrip malware case, a successful malware investigation prosecution, from the initial infection to the concluding sentencing. Along the way, the paper will point out and examine signifi cant issues while reviewing other relevant malware cases. The paper will include commentary from law enforcement personnel as well as victims on the key problems and methods used to investigate and prosecute malware criminals. Two interesting fi ndings resulted from this analysis. Although malware criminals are diffi cult to apprehend, once caught nearly all of them admit guilt. Also, the lack of victim reporting of malware crimes not only severely limits the apprehension of malware criminals but degrades the overall effort of law enforcement to predict and punish malware authors.