I work in a small firm of consultants as a Junior. We work in a small office with no more than 15 people.
We get along just fine but I don't think I should cover him up since it's getting in the way of my work and deadlines. He wasn't the one who revealed this to me but a other coworker who is in cahoots with him. I could've just go to my boss and expose him but had no way to prove it; until I sniffed the network and found his method (which I don't think he knows he's using - he's no more than a script kiddie. Not that I'm better but I can grasp what he's doing) of attack which is simply ARP poisoning from his Smartphone. What's ARP poisoning/spoofing? An attack where an user in a network (Called man in the middle) intercepts all the packages, effectively denying communication between two parties (Denial of service) or steal them to get some info, he's doing the first. This is achieved, in this case, with an application whose name I don't know but 'Wifi killer' is an example.
I'm a bit of a coward but don't know if outright tell my boss or simply send him the proofs anonymously. What would people here recommend I do?
Edit: Thanks to everyone for your feedback. I know see that simply by raising this concern and let someone more apt to take it from there is the best course of action, and I will try it.