A university student who created malware that targeted government websites while living with his parents has been jailed.
Amar Tagore, 21, a third-year cybersecurity student, offered buyers malicious software to disrupt corporate and state-run websites while living in Alexandria, West Dunbartonshire.
He supplied a tool used by hundreds of online customers to carry out distributed denial of service (DDoS) attacks, which forced users to take their websites offline, and made nearly £45,000.
He also provided technical support to those who bought the cyberattack software, which he built and sold, according to the Crown Office and Procurator Fiscal Service (COPFS).
Tagore was jailed for 21 months at Dumbarton sheriff court after admitting computer misuse charges and a breach of proceeds of crime legislation.
Advertisement
Police were alerted after the Department for Work and Pensions suffered regular DDoS attacks at a Jobcentre in Braintree, Essex, between May 12 and August 18, 2022, the court was told.
Officers identified a suspect whose mobile phone was found to run a programme called Myra, which was running two attack “commands” towards the department’s computer system, according to prosecutors.
The Myra homepage and its IP address were traced to Tagore.
The website provided various Myra packages including a “normal” one for beginners and a VIP package giving users a “larger network increase and complex vector structures”.
A “VIP+” package stated that it had “access to all add-on packages for full accessibility to the network. Specialised with your attack suite to meet any desires.”
Advertisement
Officers carried out a search of the house that Tagore shared with his parents in November 2022 and found him logged into a “Myra VI” terminal window through two large monitors. He was using “commands” which allowed another user to operate two separate attack methods, the court was told.
Analysis of Tagore’s laptop revealed 73,347 search references including the word “Myra”, with another 1,131 on his mobile phone.
A financial investigation found that between January 2020 and November 2022 Tagore earned £44,433 from the sales of his malicious software.
Sineidin Corrins, deputy procurator fiscal for specialist casework at COPFS, said: “Amar Tagore’s criminal conduct had the potential to cause serious disruption to government-affiliated and commercial websites all over the world.
“He made tens of thousands of pounds through the sale of his malicious software and technical expertise.
Advertisement
“But he is now paying the price for his criminal conduct, and we are already taking steps to recover his criminal benefit under proceeds of crime legislation.
“This investigation involved domestic and international partners and reflects the worldwide nature of cybercrime investigations, which does not stop at traditional borders. COPFS is committed to fighting cybercrime at all levels and to protecting our communities and businesses from the effects of such criminality.”
Tagore will be subject to confiscation action under proceeds of crime legislation.
