Hacker who helped stop global cyberattack arrested

LAS VEGAS -- Marcus Hutchins, a young British researcher credited with derailing a global cyberattack in May, was arrested on charges of creating and distributing malicious software designed to collect bank-account passwords, U.S. authorities said Thursday.

Hutchins was detained in Las Vegas on his way back to Britain from an annual gathering of hackers and information-security gurus. A grand-jury indictment charged him with creating and distributing the Kronos banking Trojan.

Such malware infects web browsers, then captures usernames and passwords when an unsuspecting user visits a bank or other trusted location.

News of Hutchins' detention came as a shock to the cybersecurity community. Many had rallied behind the researcher whose quick thinking helped control the spread of the WannaCry attack that crippled thousands of computers in May.

The indictment, filed in a Wisconsin federal court last month, alleges Hutchins and another defendant -- whose name is redacted -- conspired between July 2014 and July 2015 to advertise the availability of the Kronos malware on internet forums, sell the malware and profit from it. The indictment also accuses Hutchins of creating the malware.