◆ SpookStack

From: . b3 -2 Re: , Date 01/23/2002 b7E -3 To: Counterterrorism System Data: Hardware/configuration (CPU): Various Operating System: Various a Software: Various wt Security Features: Security Software Installed: x yes (identify firewalls, router) Logon Warning Banner: x yes no INTRUSION INFORMATION Access for intrusion: x Internet connection 0 dial-up number [J LAN (insider) If Internet: Internet address: TBD Network name: TBD Method: The individual who caused the intrusion first performed a port scan on their system identifying the vunerable ports. Once he identified the vunerable ports he performed an exploit on the ports gaining access the the outer network. Once inside he was able to obtain employees userids' and social security numbers. He activated guessed the password of a former employee's userid and gained access to the internal network. Once inside he left a password behind so that he could access the system at a later date. He also left his name behind in another system as a type of fingerprint that he had been there. The hacker, Adrian Lamo, held a press conference and admitted to committing the hack. Path of intrusion: TBD addresses: 1. TBD country: facility: Age: 21 Race: W. Sex: _ Male Education: __unknown- well kndwn hacker Alias(s): Motive: Bragging rights and theft of userids and passwords Group Affiliation: Employer: Known Accomplices: Subject: ipment used: myo ME vacdwere/eonfiguration : ‘ FBI(19-cv-1495)-3