Court filing: US government seeks to continue FBI work with Mirai botnet hackers, who pled guilty to creating the malware last Dec., as part of their sentencing
THE THREE COLLEGE-AGE defendants behind the the Mirai botnet—an online tool that wreaked destruction across the internet …
Context & Ripple Effects
The three college-age defendants behind Mirai pleaded guilty in December 2017 to creating the DDoS botnet — originally built to hit Minecraft servers before it was turned on major internet platforms — after an FBI investigation traced the perpetrators. This new filing goes further than the guilty pleas themselves: the government is asking the court to bake ongoing FBI work directly into the sentence.
The precedent cut matters. When a US court sentenced a Russian Citadel botnet operator in 2015, the outcome was a four-and-a-half-year prison term; here, prosecutors are pursuing a cooperation-as-punishment structure for homegrown offenders instead.
First-order effects
- The three defendants' sentencing now hinges on continued FBI service rather than custody alone, formalizing the arrangement that later reporting says let them avoid prison.
- The FBI retains working access to the people who built and ran Mirai, whose exploitation of insecure IoT devices disrupted access to major internet platforms.
Second-order effects
- Prosecutors gain a template for young, technically skilled US offenders: trade expertise for leniency, a path structurally unavailable to the foreign Citadel operator who received prison time.
- Future botnet defendants have a visible incentive to cooperate early and deeply, shifting leverage in plea negotiations toward whoever holds operational knowledge of the malware.
Third-order effects
- If the pattern holds, US botnet prosecutions resolve around converting malware authors into investigative assets rather than deterring through imprisonment alone — a two-track system where nationality and skill determine the sentence shape.
- The underlying exposure stays unresolved either way: Mirai demonstrated that unsecured consumer IoT devices can be weaponized at scale, so the security burden remains on device makers and network operators no matter who is prosecuted.
The trend: Cybercrime sentencing is shifting from fixed prison terms toward open-ended cooperation deals, with the FBI converting convicted malware authors into standing investigative resources.