Marcus Hutchins' attorney says he plans to plead not guilty to all charges; judge sets $30K bail
US prosecutors say a British computer expert has admitted to creating software that harvests bank details. — But Marcus Hutchins' own lawyer says he denies six charges of creating and distributing the Kronos malware.
Context & Ripple Effects
Days after Marcus Hutchins was widely credited with blunting the WannaCry outbreak, the FBI arrested him leaving Def Con, and a DoJ indictment accused him of helping spread the Kronos banking trojan in 2014-2015 (arrested by the FBI after Def Con). This update is the first procedural beat in that case: his attorney says he will fight all six counts, and the judge has set $30,000 bail.
The stakes of the defense are unusually high because Hutchins' value to the security community rests on the same hands-on malware expertise the indictment criminalizes — the government is prosecuting the profile of researcher it previously celebrated.
First-order effects
- Hutchins remains in US custody pending trial rather than returning to the UK, with his legal team now committed to contesting all six Kronos charges instead of negotiating an early resolution.
- US prosecutors must carry the case through discovery and trial on evidence tied to 2014-2015 activity, against a defendant whose post-2016 defensive work is central to his public identity.
Second-order effects
- The eventual outcome forces a precedent either way: when Hutchins later pleaded guilty to conspiring to distribute Kronos, the not-guilty strategy gave way to a negotiated admission that resolved the government's core claim.
- The case becomes a reference point for every security firm employing researchers with grey-hat histories, pushing employers toward stricter vetting of pre-hire malware work.
Third-order effects
- With the sentence ultimately time served plus one year of supervised release, the pattern that emerges is leniency calibrated to cooperative posture — signaling to researchers that early admission, not defiance, is the priced-in path through US federal malware prosecutions.
- If that calibration holds, the industry's informal pipeline from malware authorship to defensive research acquires a formal legal discount structure, shaping who is willing to disclose their past and under what terms.
The trend: US prosecutors are establishing a de facto framework for handling security researchers with prior offensive-malware histories, trading charge severity against cooperation and disclosure.