A brand new documentary collection about cybercrime airing subsequent month on HBO Max options interviews with Yours Actually. The four-part collection follows the exploits of Julius Kivimäki, a prolific Finnish hacker just lately convicted of leaking tens of 1000’s of affected person information from a web based psychotherapy follow whereas trying to extort the clinic and its sufferers.
The documentary, “Most Needed: Teen Hacker,” explores the 27-year-old Kivimäki’s prolonged and more and more damaging profession, one which was marked by cyber assaults designed to end in real-world bodily impacts on their targets.
By the age of 14, Kivimäki had fallen in with a gaggle of legal hackers who have been mass-compromising web sites and milking them for buyer fee card information. Kivimäki and his associates loved harassing and terrorizing others by “swatting” their properties — calling in pretend hostage conditions or bomb threats at a goal’s tackle within the hopes of triggering a heavily-armed police response to that location.
On Dec. 26, 2014, Kivimäki and fellow members of a gaggle of on-line hooligans calling themselves the Lizard Squad launched an enormous distributed denial-of-service (DDoS) assault towards the Sony Ps and Microsoft Xbox Dwell platforms, stopping hundreds of thousands of customers from enjoying with their shiny new gaming rigs the day after Christmas. The Lizard Squad later acknowledged that the stunt was deliberate to name consideration to their new DDoS-for-hire service, which got here on-line and began promoting subscriptions shortly after the assault.
Finnish investigators mentioned Kivimäki additionally was answerable for a 2014 bomb risk towards former Sony On-line Leisure President John Smedley that grounded an American Airways airplane. That incident was broadly reported to have began with a Twitter submit from the Lizard Squad, after Smedley talked about some upcoming journey plans on-line. However in accordance with Smedley and Finnish investigators, the bomb risk began with a telephone name from Kivimäki.
Julius “Zeekill” Kivimaki, in December 2014.
The creaky wheels of justice appeared to be catching up with Kivimäki in mid-2015, when a Finnish courtroom discovered him responsible of greater than 50,000 cybercrimes, together with information breaches, fee fraud, and working a world botnet of hacked computer systems. Sadly, the defendant was 17 on the time, and obtained little greater than a slap on the wrist: A two-year suspended sentence and a small high-quality.
Kivimäki instantly bragged on-line in regards to the lenient sentencing, posting on Twitter that he was an “untouchable hacker god.” I wrote a column in 2015 lamenting his laughable punishment as a result of it was clear even then that this was an individual who loved watching different folks endure, and who appeared completely incapable of regret about any of it. It was additionally abundantly clear to everybody who investigated his crimes that he wasn’t going to stop until somebody made him cease.
In response to a few of my early reporting that talked about Kivimäki, one reader shared that that they had been coping with continuous harassment and abuse from Kivimäki for years, together with swatting incidents, undesirable deliveries and subscriptions, emails to her associates and colleagues, in addition to threatening phonecalls and texts in any respect hours of the night time. The reader, who spoke on situation of anonymity, shared that Kivimäki at one level confided that he had no cause in anyway for harassing her — that she was picked at random and that it was simply one thing he did for laughs.
5 years after Kivimäki’s conviction, the Vastaamo Psychotherapy Heart in Finland grew to become the goal of blackmail when a tormentor recognized as “ransom_man” demanded fee of 40 bitcoins (~450,000 euros on the time) in return for a promise to not publish extremely delicate remedy session notes Vastaamo had uncovered on-line.
Ransom_man, a.okay.a. Kivimäki, introduced on the darkish internet that he would begin publishing 100 affected person profiles each 24 hours. When Vastaamo declined to pay, ransom_man shifted to extorting particular person sufferers. In response to Finnish police, some 22,000 victims reported extortion makes an attempt concentrating on them personally, focused emails that threatened to publish their remedy notes on-line until paid a 500 euro ransom.
In October 2022, Finnish authorities charged Kivimäki with extorting Vastaamo and its sufferers. However by that point he was on the run from the legislation and residing it up throughout Europe, spending lavishly on fancy vehicles, residences and a hard-partying way of life.
In February 2023, Kivimäki was arrested in France after authorities there responded to a home disturbance name and located the defendant sleeping off a hangover on the sofa of a lady he’d met the night time earlier than. The French police grew suspicious when the 6′ 3″ blonde, green-eyed man offered an ID that said he was of Romanian nationality.
A redacted copy of an ID Kivimaki gave to French authorities claiming he was from Romania.
In April 2024, Kivimäki was sentenced to greater than six years in jail after being convicted of extorting Vastaamo and its sufferers.
The documentary is directed by the award-winning Finnish producer and director Sami Kieski and co-written by Joni Soila. In response to an August 6 press launch, the 4 43-minute episodes will drop weekly on Fridays all through September throughout Europe, the U.S, Latin America, Australia and South-East Asia.
