◆ SpookStack

xINKOS. LAMO exploited a vulnerability in a WORLDCOM proxy server fo gain unauthorized access to their network. After committing the pack and reporting it toL______] LAMO commented "The downside is, I’m yunning out of major US Corporations". Also, one of LAMO’s prized possessions is a screen capture of WORLDCOM’Ss stock price falling after he announced he had hacked the company. -~--- Working Copy ---- Page 3 Ge In February 2002, LAMO contacted the reporter, L____—d newsbytes.com to inform him that he had gained unauthorized access b6 into SBC COMMUNICATIONS. LAMO gained access to SBC COMMUNICATIONS network in December 2001 but choose not to disclose his access until b7c -5 February 2002. LAMO utilized an exploit to gain access to SBC’s internal network. LAMO used a free internet connection at KINKO’s to perform the hack. LAMO gained access to usernames, passwords, telephone numbers, addresses and other sensitive customer information, -5 In February 2002, LAMO discovered several misconfigured proxy servers acting as doorways between the public Internet and the NEW YORK TIMES private intranet. LAMO contacted[ Jof securityfocus.com to inform him that he had gained unauthorized access into The NEW YORK TIMES intranet. LAMO utilized the proxy servers to gain access to the NEW YORK TIMES network. Once on the network, LAMO cracked a password for a userid with supervisor rights. Utilizing this userid he was able to broaden his access as well as perform certain functions within the network. LAMO created four (4) Lexis/Nexus accounts off of the NEW YORK TIMES intranet and utilized these accounts for himself and/or friends to run over 3,000 searches of individuals, address and/or court documents. LAMO has committed other computer intrusions into several other corporations such as AOL and EXCITE@HOME. Bach time LAMO commits a computer intrusion on a high profile organization he reports the vunerability and intrusion to the media causing a distrust of the company’s clients. The above mentioned corporations have lost significant money and trust of their clients, In the enclosed San Francisco Weekly article, dated April 16, 2003, LAMO states “he is preparing to announce, in a few days, weeks or months -- whenever he decides the time is right -- his biggest hack yet. On the record, he defines his target as a "oritical-infrastructure-related company"; off the record, he exhibits ample evidence of his repeated incursions into the corporations internal system." NYO believes that LAMO is a threat to the infrastructure of the United States. The NYO along with the Southern District of New York (SDNY) are currently completing a complaint charging LAMO with his unauthorized access into WORLDCOM, NEW YORK TIMES, LEXIS/NEXUS, SBC COMMUNICATIONS and MICROSOFT. The NYO and the SDNY will have the complaint completed the week of July 7, 2003. The NYO will charge his other hacks upon indictment. be bIC -3, -5 LAMO is reports to be homeless and usually stays with ' ° friends or in hostels for lodging. LAMO makes money in the computer security field when ssary. His cell phone bill goes to his arents residence at IO keeps in contact with we mown hackers su _ FBI(19-cv-1495)-444