The Raleka worm operated in a similar way to the Blaster worm, exploiting the Windows RPC Service vulnerability in versions of Microsoft Windows 2000 and XP operating systems. Infected machines could then be used to mount further remote attacks.

The Guardia Civil police unit's website said the the arrested man used the nickname 900K and was the leader of a group of hackers called Akelarre. The man's name was not released.

A technical investigation of the virus enabled police to track down the Akelarre group and make the arrest and impound eight computers.

This is the first arrest of a suspected virus author in Spain, showing that anti-virus efforts are improving, according to security company Sophos.

[ Read more ]