Spyware Sucks
“There is no magic fairy dust protecting Macs" – Dai Zovi, author of “The Mac Hacker’s Handbook"

News: lovesick hacker cripples Northern Territory Health Department, hospital, prison and Supreme Court servers?

March 12th 2009 in Uncategorized

For heavens sake … according to the news report at the URL below it took “130 experts” to “find the problem and fix it” – the “problem” was, apparently, the fact that the “hacker” (and I use that term very loosely) “deleted 10,475 user accounts”.

The incident is explained as:

In submissions from his lawyer Tom Berkley and prosecutor Paul Usher yesterday, the court heard that McIntosh hacked into the system on his workmate’s computer, using her password.

He was living with her in May, 2008, when he logged into government servers and deleted 10,475 user accounts from the Health Department, hospital, prison and Supreme Court servers.

Who was this “workmate”?  And how the heck did he know her password? Especially a password for a user account that I can only assume had high level administrative credentials?  And how can such an unsubtle slash-and-burn attack need “130 experts” and a bill of $1,253,750 to fix?

Cite: http://www.ntnews.com.au/article/2009/03/13/38995_ntnews.html


Comments are closed.

  I have seen multiple, visually identical, versions of the malvertizement shown above, one of which has revealed a new name and domains.  Please be on the look-out.   One sample that I received today is effectively neutralized because the malvertizement hits the domains of-ficialstat.com and securityclick.net, both of […]

Previous Entry

Both are new domains associated with the Registrant "Gabriel Jenks".  Regular readers of my blog will know that "Gabriel Jenks" is a name associated with several malvertizement related domains in recent times, including measurehits.com and statisticsishere.com. hit-detect.com ICANN Registrar: YESNIC CO. LTD Created 10 March 2009 […]

Next Entry