Trusted Reviews is supported by its audience. If you purchase through links on our site, we may earn a commission. Learn more.

British WannaCry ‘hero’ arrested, accused of creating Kronos malware

The British man responsible for halting the WannaCry malware that paralysed the NHS in May has been detained by US authorities in connection with a separate malicious program.

Marcus Hutchins, 23, managed to prevent the WannaCry ransomware spreading further by inserting a specific domain name within its code.

Hutchins, who works for cybersecurity firm Kryptos Logic, was picked up on Wednesday after attending the Defcon security convention in Las Vegas, according to a friend (via Motherboard).

Related: WannaCry – Are we safe now?

The Guardian reports Hutchins’ arrest is connected to a separate piece of malware, known as Kronos.

Hutchins and another unnamed co-defendant stand accused of creating the malware, which was spread through email attachments and targeted internet banking log-in information.

“Defendant Marcus Hutchins created the Kronos malware,” a filing to the eastern district court of Wisconsin claims.

It is unclear whether he has been officially charged with the alleged six counts of hacking offenses related to Kronos.

He may WannaCry now

Hutchins, who also goes by the username MalwareTech, unwittingly stopped the WannaCry malware spreading with his intervention back in May.

The malicious software had rapidly infected systems around the world, including in Spain, Russia, Turkey, Germany, and Vietnam.

On Wednesday it was reported the Brit was briefly held at the Henderson Detention Centre in Nevada, but he has now been transferred to an unknown facility.

A spokesperson from the UK’s National Cyber Security Centre told Motherboard: “We are aware of the situation. This is a law enforcement matter and it would be inappropriate to comment further.”

This is a developing story and we’ll keep you posted with any updates.

Why trust our journalism?

Founded in 2003, Trusted Reviews exists to give our readers thorough, unbiased and independent advice on what to buy.

Today, we have millions of users a month from around the world, and assess more than 1,000 products a year.

author icon

Editorial independence

Editorial independence means being able to give an unbiased verdict about a product or company, with the avoidance of conflicts of interest. To ensure this is possible, every member of the editorial staff follows a clear code of conduct.

author icon

Professional conduct

We also expect our journalists to follow clear ethical standards in their work. Our staff members must strive for honesty and accuracy in everything they do. We follow the IPSO Editors’ code of practice to underpin these standards.