A brand new documentary sequence about cybercrime airing subsequent month on HBO Max options interviews with Yours Really. The four-part sequence follows the exploits of Julius Kivimäki, a prolific Finnish hacker just lately convicted of leaking tens of 1000’s of affected person data from a web-based psychotherapy follow whereas making an attempt to extort the clinic and its sufferers.
The documentary, “Most Wished: Teen Hacker,” explores the 27-year-old Kivimäki’s prolonged and more and more damaging profession, one which was marked by cyber assaults designed to lead to real-world bodily impacts on their targets.
By the age of 14, Kivimäki had fallen in with a gaggle of legal hackers who had been mass-compromising web sites and milking them for buyer fee card knowledge. Kivimäki and his pals loved harassing and terrorizing others by “swatting” their houses — calling in faux hostage conditions or bomb threats at a goal’s handle within the hopes of triggering a heavily-armed police response to that location.
On Dec. 26, 2014, Kivimäki and fellow members of a gaggle of on-line hooligans calling themselves the Lizard Squad launched a large distributed denial-of-service (DDoS) assault towards the Sony Ps and Microsoft Xbox Stay platforms, stopping thousands and thousands of customers from taking part in with their shiny new gaming rigs the day after Christmas. The Lizard Squad later acknowledged that the stunt was deliberate to name consideration to their new DDoS-for-hire service, which got here on-line and began promoting subscriptions shortly after the assault.
Finnish investigators stated Kivimäki additionally was chargeable for a 2014 bomb menace towards former Sony On-line Leisure President John Smedley that grounded an American Airways aircraft. That incident was extensively reported to have began with a Twitter submit from the Lizard Squad, after Smedley talked about some upcoming journey plans on-line. However in line with Smedley and Finnish investigators, the bomb menace began with a telephone name from Kivimäki.
Julius “Zeekill” Kivimaki, in December 2014.
The creaky wheels of justice gave the impression to be catching up with Kivimäki in mid-2015, when a Finnish court docket discovered him responsible of greater than 50,000 cybercrimes, together with knowledge breaches, fee fraud, and working a world botnet of hacked computer systems. Sadly, the defendant was 17 on the time, and obtained little greater than a slap on the wrist: A two-year suspended sentence and a small positive.
Kivimäki instantly bragged on-line concerning the lenient sentencing, posting on Twitter that he was an “untouchable hacker god.” I wrote a column in 2015 lamenting his laughable punishment as a result of it was clear even then that this was an individual who loved watching different individuals undergo, and who appeared totally incapable of regret about any of it. It was additionally abundantly clear to everybody who investigated his crimes that he wasn’t going to give up except somebody made him cease.
In response to a few of my early reporting that talked about Kivimäki, one reader shared that they’d been coping with continuous harassment and abuse from Kivimäki for years, together with swatting incidents, undesirable deliveries and subscriptions, emails to her pals and associates, in addition to threatening phonecalls and texts in any respect hours of the evening. The reader, who spoke on situation of anonymity, shared that Kivimäki at one level confided that he had no purpose by any means for harassing her — that she was picked at random and that it was simply one thing he did for laughs.
5 years after Kivimäki’s conviction, the Vastaamo Psychotherapy Middle in Finland turned the goal of blackmail when a tormentor recognized as “ransom_man” demanded fee of 40 bitcoins (~450,000 euros on the time) in return for a promise to not publish extremely delicate remedy session notes Vastaamo had uncovered on-line.
Ransom_man, a.okay.a. Kivimäki, introduced on the darkish net that he would begin publishing 100 affected person profiles each 24 hours. When Vastaamo declined to pay, ransom_man shifted to extorting particular person sufferers. In accordance with Finnish police, some 22,000 victims reported extortion makes an attempt focusing on them personally, focused emails that threatened to publish their remedy notes on-line except paid a 500 euro ransom.
In October 2022, Finnish authorities charged Kivimäki with extorting Vastaamo and its sufferers. However by that point he was on the run from the legislation and residing it up throughout Europe, spending lavishly on fancy automobiles, residences and a hard-partying way of life.
In February 2023, Kivimäki was arrested in France after authorities there responded to a home disturbance name and located the defendant sleeping off a hangover on the sofa of a girl he’d met the evening earlier than. The French police grew suspicious when the 6′ 3″ blonde, green-eyed man introduced an ID that said he was of Romanian nationality.
A redacted copy of an ID Kivimaki gave to French authorities claiming he was from Romania.
In April 2024, Kivimäki was sentenced to greater than six years in jail after being convicted of extorting Vastaamo and its sufferers.
The documentary is directed by the award-winning Finnish producer and director Sami Kieski and co-written by Joni Soila. In accordance with an August 6 press launch, the 4 43-minute episodes will drop weekly on Fridays all through September throughout Europe, the U.S, Latin America, Australia and South-East Asia.
