◆ SpookStack

"Rey, 0828-2000) Precedence: PRIORITY Date: 03/14/2002 To: All Field Offices Attn: NIPC SSA From: New York Squad C-37 Contact: SA Approved By: Title: ADRIAN LAMO; New York Times-Victim; Computer Intrusion; OO: NY Synopsis: Canvass all FBI Offices for positive information regarding ADRIAN LAMO. Details: In February 2002, LAMO discovered several misconfigured proxy servers acting as doorways between the public Internet and the New York Times’ private intranet. LAMO utilized the proxy servers to gain access to the New York Times network. Once on the network, LAMO cracked a password for a userid with supervisor rights. Utilizing this userid he was able to broaden his access as well as perform certain functions within the network. LAMO had access to individuals names and Social Security Numbers. LAMO informed The New York Times of the security vulnerability through SECURITYPOCUS.COM. iO has committed co tér intrusiefis into-.several other corporations such as WO OM, MICROSOFT AQi” EXCL @HOME 0. LAMO uses a “Pr HUHCSr’”" Cor Sear. e-Typernet “for servers that are miSConfigured. mce he Obtains this inférmation, he configures his browser to appear and utilize the proxy server as his own. Once the computer intrusion occurs, LAMO searches the network to determine if there are any other vulnerabilities and in the case of: The New York Times, left a backdoor so that he could enter at another time undetected. Hach time LAMO commits a computer intrusion on a high profile organization he reports the vunerability and intrusion to the media causing a distrust of the company’s clients. The above mentioned corporations have lost significant money and trust of their clients. FBI(19-cv-1495)-36