Update: IT admin used inside knowledge to hack and steal
Madrid faces 12 years in prison for hacking, ID theft, burglary
IDG News Service - A former San Jose network administrator is facing 12 years in prison after pleading guilty to hacking, ID theft, burglary and drug charges.
According to the Santa Clara District Attorney's office, Andrew Madrid, 34, used his IT experience to pull off a variety of crimes between September 2006 and March 2008.
"This was one of the most sophisticated computer crimes our office has prosecuted," said Ben Field, Santa Clara's deputy district attorney. "There's computer intrusion in the first place, there's the introduction of spyware, there's the theft of proprietary data from a computer network and sometimes the destruction of proprietary data from a computer network."
One of Madrid's victims was his former employer, a Sunnyvale, California, high-technology company. According to Field, Madrid destroyed data on the company's servers in the hope that "they would ask him to come back and fix the very problem that he created."
The District Attorney's office declined to name any of the victims of Madrid's crimes.
To make his hacking harder to trace, Madrid would often use his neighbor's open wireless networks, Field said.
Posing as a security guard or an IT worker, he also breezed through Bay Area companies late at night looking for laptops and other computer equipment to steal, Field said. "He had a good eye for what was valuable," Field said.
Madrid sometimes gained access to different parts of the building by picking up security badges he found lying in unoccupied cubes, Field said.
If stopped by company employees, "he would talk to them as if he was completely justified in being there," Field said. "Like he was an IT person doing some work or a security guard making sure the place was secure."
"Being a former network administrator, he could talk the talk as an IT guy," he added.
Madrid even wore clothes that resembled a security guard's uniform, Field said.
In another scheme, Madrid would change bar-code tags on computer equipment in stores in order to pay retailers less than the value of their merchandise. He sometimes manufactured his own price tags, Field said, and a mobile bar-code printer was found in his car. Sometimes the scam was as simple as taking the bar code off a cheap eMachine and putting it on a more expensive Hewlett-Packard Co. computer, Field said.
Madrid pleaded guilty Friday in Superior Court in Santa Clara. He faces six to 12 years in prison on the charges, which include two counts of possession of methamphetamine for sale. Sentencing is set for Jan. 22.
- Big Data, Big Mess: Sound Risk Intelligence Through Complete Context This paper examines the insecurity of the small businesses in the supply chain and offers tips to close those backdoors into the enterprise.
- Using Cyber Insurance and Cybercrime Data to Limit Your Business Risk This paper examines the challenges of understanding cyber risks, the importance of having the right cyber risk intelligence, and how to use this...
- 5 Tips to Secure Small Business Backdoors in the Enterprise Supply Chain This paper examines the insecurity of the small businesses in the supply chain and offers tips to close those backdoors into the enterprise.
- Confront consumerization with convergence Virtualization expert Elias Khnaser spotlights the security, compliance, and governance issues that arise when enterprise users "consumerize" with shadow IT and public cloud...
- NSS Labs & Cisco Present: Evaluating Leading Breach Detection Systems Today's constantly evolving advanced malware and APTs can evade point-in-time defenses to penetrate networks. Security professionals must evolve their strategy in lockstep to...
- Will the Real Endpoint Threat Detection and Response Please Stand Up? This webinar explores new technologies & process for protecting endpoints from advanced attackers as well as the innovations that are pushing the envelope... All Knowledge Center White Papers | Webcasts