Kelihos suspect: I didn't do it
Andrey Sabelnikov heads online to protest his innocence after Microsoft claims he was helping run the Kelihos botnet.


A Russian man suspected of helping run and create the Kelihos botnet has proclaimed his innocence.
Last week, Microsoft issued an amended complaint at the US District Court for the Eastern District of Virginia claiming former antivirus professional Andrey N Sabelnikov was "responsible for the operations of the Kelihos botnet."
Sabelnikov has subsequently posted a blog on LiveJournal, saying he was "dismayed" at being named a suspect.
We look forward to seeing Mr Sabelnikov in court so we can continue this discussion.
The Russian claimed he "did not commit this crime" and had "never participated in the management of botnets."
Sabelnikov said he had been over to America on business in late January when Microsoft lodged the complaint, but decided to return to Russia as he could not afford legal assitance in the US.
He added he was ready to answer questions relating to Kelihos.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
The Kelihos botnet was shut down last year, but Microsoft has continued to hunt for the perpetrators and have them prosecuted.
Microsoft had previously accused Dominique Piatti, a Czech man running the dotFREE domain hosting company, claiming his business was registering subdomains used to operate Kelihos.
However, Microsoft came to the conclusion dotFREE was simply being used by Kelihos's controllers and came to an agreement with Piatti.
Cooperation with Piatti led to this week's fresh allegations against Sabelnikov.
At its peak, the Kelihos spam engine had infected an estimated 40,000 machines.
Microsoft response
In response to Sabelnikov's claims, Microsoft said it stood by its original complaint and it looked forward to seeing the Russian in court.
"As this is a case pending in court, we cannot comment further except to say that we look forward to seeing Mr Sabelnikov in court so we can continue this discussion," Richard Boscovich, senior attorney for Microsoft's Digital Crime Unit, told the BBC.
Read on for our look at the war on botnets.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Why keeping track of AI assistants can be a tricky business
Column Making the most of AI assistants means understanding what they can do – and what the workforce wants from them
By Stephen Pritchard
-
Nvidia braces for a $5.5 billion hit as tariffs reach the semiconductor industry
News The chipmaker says its H20 chips need a special license as its share price plummets
By Bobby Hellard
-
Seized database helps Europol snare botnet customers in ‘Operation Endgame’ follow-up sting
News Europol has detained several people believed to be involved in a botnet operation as part of a follow-up to a major takedown last year.
By Emma Woollacott
-
Horabot campaign targeted businesses for more than two years before finally being discovered
News The newly-discovered Horabot botnet has attacked companies in the accounting, investment, and construction sectors in particular
By Ross Kelly
-
Brand-new Emotet campaign socially engineers its way from detection
News This latest resurgence follows a three-month hiatus and tricks users into re-enabling dangerous VBA macros
By Ross Kelly
-
Microsoft says “it’s just too difficult” to effectively disrupt ransomware
News The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy
By Connor Jones
-
Beating the bad bots: Six ways to identify and block spam traffic
In-depth Not all traffic is good. Learn how to prevent bad bots from overrunning your website
By Sead Fadilpašić
-
Ukraine's vigilante IT army now has a DDoS bot to automate attacks against Russia
News The 270,000-strong IT Army of Ukraine will now combine supporters' cloud infrastructure to strengthen the daily attacks against their invaders
By Connor Jones
-
Microsoft's secure VBA macro rules already being bypassed by hackers
News Recent analysis of Emotet activity has revealed a shift away from malicious Office documents to drop malware
By Connor Jones
-
Emotet infrastructure has almost doubled since resurgence was confirmed
News Researchers confirm the infrastructure has also been upgraded for a "better secured", more resilient operation
By Connor Jones