◆ SpookStack

(01/26/1998) FEDERAL BUREAU OF INVESTIGATION b6é -1 b7c -1 Precedence: ROUTINE Date: 03/14/2002 To: New York From: New York Squad C-37 slf (Derrkttig) b3 -2 bIE -3 " Drafted By: Case ID #: Your Times- -Victim; Cony my er Intrusion; ie] Details: In February 2002, LAMO discovered several misconfigured proxy servers acting as doorways between the public Internet and the New York Times’ private intranet. LAMO utilized the proxy servers to gain access to the New York Times’ network. Once on the network, LAMO cracked a password for a userid with supervisor rights. Utilizing this userid he was able to broaden his access as well as perform certain functions within the network. LAMO had access to individuals’ names and Social Security Numbers. LAMO informed The New York Times of the security vulnerability through ECURTTYPOCUS - COM. ie cad -4 LAMO has committed computer intrusions into several other corporations such as WORLDC »EXCTTE@HOME and YAHOO, LAMO uses a “Proxy Hi ott eestor proxy“géFvers that are misconfigured. Once he obtains this information, he configures his browser to appear and utilize the proxy server as his own. Once the computer intrusion occurs, LAMO searches the network to determine if there are any other vulnerabilities and in the case of The New York Times, left a backdoor go that he could enter at another time undetected. Each time LAMO commits a computer intrusion on a high profile organization he reports the venerability and intrusion to the media causing a distrust of the company’s clients. The above mentioned corporations have lost significant money and trust of their clients. FBI(19-cv-1495)-40