{"id":4207,"date":"2026-09-21T02:59:50","date_gmt":"2026-09-20T21:29:50","guid":{"rendered":"https:\/\/cybx.in\/blog\/?p=4207"},"modified":"2026-09-21T02:59:51","modified_gmt":"2026-09-20T21:29:51","slug":"who-were-the-creators-of-the-mirai-botnet","status":"publish","type":"post","link":"https:\/\/cybx.in\/blog\/who-were-the-creators-of-the-mirai-botnet\/","title":{"rendered":"Who Were the Creators of the Mirai Botnet?"},"content":{"rendered":"\n<meta name=\"description\" content=\"Who Were the Creators of the Mirai Botnet?\nMirai became one of the most talked-about botnets after it started knocking internet services offline in 20\">\n<meta property=\"og:title\" content=\"Who Were the Creators of the Mirai Botnet?\">\n<meta property=\"og:description\" content=\"Who Were the Creators of the Mirai Botnet?\nMirai became one of the most talked-about botnets after it started knocking internet services offline in 20\">\n<meta name=\"twitter:card\" content=\"summary_large_image\">\n<meta name=\"twitter:title\" content=\"Who Were the Creators of the Mirai Botnet?\">\n<meta name=\"twitter:description\" content=\"Who Were the Creators of the Mirai Botnet?\nMirai became one of the most talked-about botnets after it started knocking internet services offline in 20\">\n\n\n<p>Mirai became one of the most talked about botnets after it started knocking services offline in 2016. The name most tied to it is Paras Jha, a Rutgers student who went by &#8220;Anna Senpai&#8221; online. Not some big cybercrime group, just a young programmer with a specific reason for building it.<\/p>\n<h2>The People Behind It<\/h2>\n<p>Jha&#8217;s considered the main author. He built the malware and used it to take over internet connected devices, mostly poorly secured cameras and routers. The motive was tied to a Minecraft server hosting business he was involved in, attacking competing services gave his own an edge.<\/p>\n<p>He wasn&#8217;t working alone though. Josiah White and Dalton Norman were later identified as collaborators, White went by &#8220;Lightness,&#8221; Norman by &#8220;Dread Pirate Roberts.&#8221; All three eventually pleaded guilty in the US to charges connected to Mirai and the attacks tied to it.<\/p>\n<h2>The &#8220;Anna Senpai&#8221; Identity<\/h2>\n<p>Once Mirai made headlines, a post under that name showed up discussing the botnet and released its source code publicly.<\/p>\n<p>That release changed things fast. Once it was out there, other attackers could study it and build their own versions, which is how Mirai went from one operation to a whole family of copycat attacks.<\/p>\n<h2>Why They Built It<\/h2>\n<p>The trick behind it was simple. Scan the internet for devices still using weak or factory default logins, infect whatever&#8217;s vulnerable, bring it under control.<\/p>\n<p>One device alone isn&#8217;t much. Thousands working together is a different story.<\/p>\n<p>There was a Minecraft angle too, a crowded, competitive server market. Jha admitted the group used Mirai for attacks against gaming services and other targets, some tied to disrupting competitors.<\/p>\n<p>Wasn&#8217;t born out of some grand scheme to take over the internet. Grew out of something more ordinary, making money and getting an edge in an online business.<\/p>\n<h2>What Happened To Them<\/h2>\n<p>In 2018, Jha, White, and Norman all pleaded guilty to charges tied to building and running Mirai. Jha got probation and community service, the others got sentences reflecting their cooperation with investigators.<\/p>\n<p>Once the code was out, other criminals didn&#8217;t need Jha at a keyboard anymore. They had the blueprint already.<\/p>\n<h2>Why This Still Matters<\/h2>\n<p>Mirai showed how ordinary connected devices become weapons the moment their security gets neglected. A camera sitting on someone&#8217;s desk could end up part of an attack without the owner ever knowing.<\/p>\n<p>The people behind it got caught eventually. The code just kept moving on without them.<\/p>","protected":false},"excerpt":{"rendered":"<p>Mirai became one of the most talked about botnets after it started knocking services offline in 2016. The name most&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-4207","post","type-post","status-publish","format-standard","hentry","category-learn"],"_links":{"self":[{"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/posts\/4207","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/comments?post=4207"}],"version-history":[{"count":1,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/posts\/4207\/revisions"}],"predecessor-version":[{"id":4228,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/posts\/4207\/revisions\/4228"}],"wp:attachment":[{"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/media?parent=4207"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/categories?post=4207"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/tags?post=4207"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}