May 12, 2005 (IDG News Service) --
A 21-year old Indiana resident was slapped with a 21-month jail sentence for his role in a hacking attack that compromised computers at the U.S. Department of Defense, according to law enforcement officials. Raymond Paul Steigerwalt, a former member of the international hacking gang Thr34t Krew (TK), was sentenced last Friday on one count of conspiracy to commit fraud and related activity in connection with computers and one count of possession of child pornography, officials said. In addition to the jail time, he was also ordered to pay restitution of $12,000 to the Defense Department. The hacking attack launched by TK took place between October 2002 and March 2003, according to U.S. Attorney for the Eastern District of Virginia Paul McNulty. Steigerwalt and his gang were accused of creating a worm that infected Internet-connected computers. The worm installed a Trojan software program, allowing TK to control the infected machines. At least two computers at the Defense Department were infected, McNulty's office said. It was not clear what damage was done. Steigerwalt's sentencing came as a result of an investigation involving the Defense Department, the FBI, the U.S. Army Criminal Investigation Command, the U.S. Secret Service, the Air Force Office of Special Investigations, the Riverside California County Sheriff's Office and NASA. Two other men in northeast England were held in 2003 for their part in creating the TK Trojan. At the time, the U.K.'s National Hi-Tech Crime Unit said that the virus had infected approximately 18,000 computers around the world, causing an estimated $10.3 million in damages. Steigerwalt's sentencing last week represents a small victory for law enforcement officials, but the incident could still prove somewhat embarrassing for the Defense Department, according to Graham Cluley, a senior technology consultant at Sophos PLC. "Most of these government agencies are pretty clued in on security threats, but the problem is that they only need to be unlucky once to have egg on their face," he said. International hacking groups like Thr34t Krew appear to be on the rise and are increasingly focusing on moneymaking schemes, Cluley said. Security experts are warning organizations to be aware of sophisticated attacks designed to steal information or conduct extortion by threatening to launch a denial-of-service attack against a Web site unless money is paid, for instance. Earlier this week it was revealed that data theft reported at Cisco Systems Inc. last year is now believed to be part of a larger incident involving the break-in of servers in several countries. Some of the attacks are also thought to have been directed at U.S. government agencies.
Reprinted with permission from IDG.net Story copyright 2008 International Data Group. All rights reserved.
"Need help sorting through the hype of cloud computing? Here's some IDC research on the benefits, barriers -- and what..."
Read more...
"Stephen Spoonamore offers more details on what I was trying to drive home in my recent column: Because individual votes..."
Read more... Read more Security posts or See all Blogs
From Laggard to Leader: Transforming the Data Center
From Laggard to Leader: Transforming the Data Center Register for this complimentary webcast today! Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing
Intercept Spam & Viruses
Download this whitepaper to learn how to outsmart spam & viruses, compliments of MessageLabs. (Source: MessageLabs) Register for a complimentary 30 day trial of MessageLabs' new managed Anti-virus and Anti-spam security solutions. MessageLabs guarantees complete protection against all known and unknown email threats. By providing 24 hour support, your business can increase productivity and decrease risk.Register now for a complimentary trial and receive a free datasheet. Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Go Green with Webroot® Perimeter Security SaaS! Webroot Perimeter Security SaaS is a powerful alternative to obsolete on-premise hardware based security solutions. SaaS allows businesses to obtain flexible protection through an expert security provider, solving the problems caused by software, hardware and appliance solutions. Benefits include easier manageability, better protection and guaranteed performance all at a lower cost. Register for your free copy of the "Why Security SaaS Makes Sense" whitepaper and Go Green with Webroot! Download this white paper now!
Fired up about IT?Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT the good, the bad, and the rest of the weird stuff you deal with every day.
Companies today are realizing that competitive advantage is harder to sustain when based solely on gains in productivity and cost efficiency. The focus is shifting to invest more in business optimization initiatives which rely on trusted information to develop new insights that deliver better business results. But how can this be done efficiently in a business environment across multiple applications and processes. The answer is an Information Agenda - an innovative approach to transforming business information into a strategic asset for competitive advantage.
Steven J. Vaughan-Nichols: Who writes Linux: Corporate America
The urban myth that Linux is written by unwashed, unemployed hackers living in their parents' basements should be long dead. Rather, it needs a shove back into its grave. ... [more]