How do I file a report to the Digital Crime Unit related to the identification of the Hacker behind the 2003 MSBLAST.A Virus ?

Form what I've found, there seems to be very little interest in the actual information that was concealed in the Hack's hex file, which would be of use to their investigations, as well as to their CyberSecurity team's interest in securing their network from these future attacks, as the people behind them are very well-known and affiliated with other crimes that warrant further investigation.

Not to be crass, but I speak from the point of view of Microsoft's declarations that their appeals for assistance are valid, whereas you seem to be unconcerned.

All I asked was where does this get reported.

You don't know the answer......cool with me.

Since I'm just a volunteer moderator and not Microsoft or an employee helping on this user-to-user public website, I simply look for the applicable information that might help a person resolve their issues regardless of what those might be.

By simply asking AI about that initial Anti-Virus Reward Program from 2003 versus the later Bug Bounty programs relating to bugs found in Microsoft's products, I received the following response, so you're barking up the wrong tree and over 2 decades late to the game.

"Microsoft has transitioned from its Anti-Virus Reward Program to a broader bug bounty program that now includes rewards for identifying vulnerabilities in any of its online services, regardless of whether the code is from Microsoft or third parties. This change aims to enhance security by incentivizing researchers to report critical vulnerabilities that could impact Microsoft's services."

Microsoft Bounty Programs | MSRC

The reason you can't find a way to submit for the Anti-Virus Reward Program is that it no longer exists.

Rob

< EDIT > An important thing to realize is that the Anti-Virus Reward Program in 2003 preceded the acquisitions of the original Anti-Virus and Anti-Spyware apps in I 2004 and later that eventually evolved through several different products to become today's Windows Defender app, that's been embedded in Windows versions since 2008 including 10 and 11.

One of the current Bug Bounty programs is specifically related to Windows Defender, so that's apparently how such issues are handled today, rather than chasing the individual malware or its authors that had exploded in quantities decades ago.

That's what the Digital Crimes Unit concentrates on today, taking down the infrastructure used to distribute and operate the various bot networks with the aid of those like the FBI or others in the international community involved in handling these threats. That's noted on their first page in the box immediately below the group's title.

AI started managing the day-to-day malware detection and updates over a decade ago before I left the Microsoft MVP program in 2011-12 and around the time Microsoft Security Essentials was first created in 2008-9, though the server-based backend called SpyNet for malware detection, verification, and classification had existed from the beginning as part of the original Giant Anti-Spyware app that Microsoft acquired to aid in creating their own first offerings in 2006-7.

So basically you are saying that this is the only avenue to report cybercrimes to Microsoft, and that if they refuse to consider it, that it is a closed case, per their statement it does not fall under their interests, as they claimed it was a non-MSRC Case?

I only ask as they made no mention anywhere that their Bounty Program seen in their statement had been closed. It was listed as the only one of this group that had gone unsolved as to a suspect being aprehended, and I figured they would take consideration of that factor as being related to their division's focus.

Since as I stated above, I'm not a Microsoft employee, I have little specific knowledge of any details relating to internal programs or operations since I'm also no longer an MVP with direct access to most program management that I had at that time, I only know what I can see in their public postings such as those I referenced above.

From what I can see it appears that the Anti-Virus Reward Program which began not long after Microsoft's January 2002 "Trustworthy Computing" initiative was announced, had quietly disappeared as the Bug Bounty programs, which appear instead to focus on the operating system, embedded and commercial software along with other products, took its place.

If you have other public information that relates to what you're stating, then feel free to post it, but I've found nothing else specific to what you just mentioned regarding the now 23-year-old case that initiated the Anti-Virus Reward Program, so with no recent official documents I've found, I'd consider it a dead program unless specifically informed otherwise.

If your information is non-public and thus under NDA, as it was for some of what I learned when an MVP, then that's a different matter, but then in that case I'd expect you to have other internal channels as I did to program managers or other official contacts who could answer these questions.

What I'm actually saying above is that not only the programs and software such as Defender and Windows itself, but also the organizational groups like the Digital Crimes Unit or the MSRC have been reorganized and realigned over time, as changes to the threat environment including the products themselves have been modified as well.

As a pertinent example, Microsoft made significant changes to both Windows and its server infrastructure specifically related to that 2003 MSBlast. A worm and similar DDoS attacks among others in that early period, precisely because those vulnerabilities are what made both Microsoft and really everyone providing online services susceptible to such attacks. Those obviously included closing the holes that led to Windows client systems being abused for such purposes, along with moves towards better network protections to detect and suppress the mass DDoS attacks themselves which are now commonly included in Internet facing network gear today.

It's not that I don't believe that there may be a list such as you're describing that still exists detaining which of these particular cases may have been solved or are still (supposedly) open, it's simply that both the amount of time and massive changes in focus for both Microsoft's products and purposes (i.e. AI) seem to me to leave very little reason for Microsoft to care about one specific ancient malware or who might have created and distributed it back in 2003.

For example, find me even one person at Microsoft who was working there in 2003 when those attacks began, since if there are any, I suspect they could be counted on one or two hands, with the current CEO Satya Nadella being one since 1992.

That's the questionable situation I think you're up against, but one reference to an official document stating otherwise could change that completely if it's publicly available to review.

Rob

The details in the 2003 hex file when compared to the 2009 hex file of the BitCoin Genesis Block is shown here.....one requests a reply with a specific key phrase to be used, and the later one contains a specific response mentioning the exact location in this chain of blocks of Stennos where to find the specific phrase in the Microsoft Hack. This is merely one of the worksheets that I have, which expose a communication between Ed Scheidt of TecSec, Inc to Satoshi Tomokiyo, instructing him in creating a paperless money transfer system in Japan. This is only part of the information that was concealed concerning Counterfeiting and Money Laundering operations being established. The use of the phrase along with the "LOVE YOU SAN" shows that the message was to a man in Japan. The phrase "Billy Gates" was found in a previous letter that was called the Seito Sakakibara Letter. I have a complete dossier concerning these operations with it's own FB page at www.facebook.com/SeitoSakakibaraCiphers

Does this look like it was Chinese to you, personally seeing the lists of names mentioned?

Satoshi Tomokiyo is Japanese, not Chinese, and is responsible for the creation of Blockchain and BitCoin as a Counterfeiting and Laundering operation.

If the US is claiming it was another "Salt Typhoon", then it is making the Chinese out to be the people that created these messages, when in fact it is clearly the US - using an employee of the CIA - Ed Scheidt - a Cryptographer, in the concealment of the instructions to a Japanese Cryptographer.

Most can see right through this illusion of an "official statement" and it's not that hard to determine yourself.

Thank you for your references, as it merely helps strengthen my case in the face of the decrypts that I posted.

The initial examination of the text from the hex message showed it concealed an internal set of instructions used to create two reconfigured blocks of the main block in a "fork" technique applied.

The continued examination showed a series of Stennos were hidden inside of the blocks in their layered formats, so as to conceal a number of different variable routes to draw conclusions with. Each being patterned of the descriptions of the others, and relaying information concerning the operations that are hidden in these blocks. This one mentioned the operations of www.facebook.com/SeitoSakakibaraCiphers and www.facebook.com/ProjectArchiteuthis (for references to the listed affairs).

Here the instructions to create the Genesis Block of BitCoin is accompanied with the use of the statement - USE A BACON STENO - RESPOND TO THIS WITH THIMES ON BANKS BALEOUT.

The use of the phrase on the left is to reference the correct breakdown and alignment of the two blocks in the represent positions so as to add a slant - reading POUSSIN IS IN THE PASS AND STOWE. The shape of the name of Nicolas Poussin is the obvious intended inflection to add the ironic slur and pun, which happens to be correctly prounounced in the Old English method from the times of the Freemasons that concealed this Hidden Treasure in the mountain pass above Stowe, VT - A Vault situated in the side of the cliff over 150' off the ground in a real world location of reference found decrypted at - www.facebook.com/SecretMission4King

These are considered confirmations of the perfect use of the methods shown to reconfigure the blocks, and the instructions added for the response to include them, in order to authenticate the reception of these messages as the intended recipient it meant to be a trained Cryptographer that specialized in Classic Cryptograms - Satoshi Tomokiyo

Here the comparison of the second block from the hack with the Genesis Block message shows there is a series of chain mail messages that are being created along a time line, with the response reading clearly - BACON ON SECOND BLOCK OF MICROSOFT HACK.

Confirmation that the man named Satoshi Tomokiyo is not only the creator of BitCoin but the cohort in a series of breaches of Microsoft and the creation of criminal operations using Microsoft to carry these messages to an audience.

In the exposure of these operations, from the decrypted Stennos that are hidden within them, I looked for the confirmation of these criminal activities, and the motives behind them, to find that there were previous affairs that dated to very gruesome murders in Japan during the Seito Sakakibara Letters - this being the discovery that the letters were written by Satoshi Tomokiyo, but also that the phrase "Billy Gates" had originated in these letters, and that Ed Scheidt of the CIA had been communicating plans in Japan through him when this was written in 1995.

This shows a preliminary "grudge" against Bill Gates and Microsoft that will become the motives for the use of the LOVE YOU SAN message in the hack later in 2003.