Skip to content

Croatia Arrests NetWire RAT Operator Mario Zanko

Croatia takes down NetWire RAT operator. The arrest of Mario Zanko could signal the end of this long-running malware threat.

This picture is clicked inside the room. In this picture, we see a table on which laptop, speaker,...
This picture is clicked inside the room. In this picture, we see a table on which laptop, speaker, monitor, keyboard, ball, mouse, scanner and papers are placed. In the left bottom of the picture, we see a table on which electronic goods are placed. Behind that, we see a wall on which charts and posters are pasted.

Croatia Arrests NetWire RAT Operator Mario Zanko

Croatian authorities have arrested a national suspected of operating NetWire, a notorious Remote Access Trojan (RAT) that has been openly sold since 2012. The suspect, Mario Zanko, has confirmed his detention but maintains he has not been charged with any crime.

NetWire, a stealthy malware, allows unauthorized access to infected systems and password theft. It targets various platforms, including Microsoft Windows, Android, Linux, and Mac. The RAT has consistently ranked among the top 10 most active in use.

Zanko, born in July 1983 and listed as an electrical engineer, was an officer in Godbex Solutions LTD. The company claimed to be a 'next generation platform' for gold and cryptocurrency exchange. Authorities suspect Zanko, who also goes by the online handle Dugidox, as the NetWire operator. His arrest coincided with the seizure of the RAT's sales website by the U.S. Federal Bureau of Investigation (FBI) and the seizure of its server in Switzerland.

NetWire's open sale on worldwiredlabs[.]com has ended with a seizure notice from the U.S. Department of Justice. Mario Zanko's role in the operation of this malicious software is under investigation. His detention marks a significant step in dismantling the NetWire operation.

Read also:

Latest