◆ SpookStack

(Rev. 08-28-2000) ‘ . FEDERAL BUREAU OF INVESTIGATION BIC ly Precedence: ROUTINE Date: 02/21/2003 To: New York Attn: FMU MIS From: New York Squad DT-5 Approved By: SAC ASAC 3-2 CSSA 4 bé6 -1 2A SSA | m — ‘ a b7c -1 Drafted By: [( sift bTE -3 Title: ADRIAN LAMO; New York Times-Victim; Computer Intrusion; j 00 : NY Synopsis: Request for case fund expenditure Enclosure(s): One (1) copy of comparision price listing for requested software ‘ Details: ADRIAN LAMO is the subject of the above mentioned computer intrusion investigation. In February 2002, LAMO discovered several misconfigured proxy | servers acting as doorways between the public Internet and the New York Times’ private intranet. LAMO utilized the proxy servers to gain access to the New York Times network. Once on the network, LAMO cracked a password for a userid with supervisor rights. Utilizing this userid he was able to broaden his access as well as perform certain functions within the network. LAMO had access to individuals names and Social Security Numbers. LAMO informed The New York Times of the security vulnerability through SECURITYFOCUS.COM. LAMO has committed computer intrusions into several other corporations such as WORLDCOM, MICROSOFT, AOL, EXCITE@HOME and YAHOO. LAMO uses a “Proxy Hunter” to search the Internet for proxy servers that are misconfigured. Once he obtains this information, he configures his browser to appear and utilize the proxy server as his own*:Once the computer intrusion occurs, \ LAMO searches the network to df@érmisigjif- there are any other BaP OVID FBI(19-cv-1495)-1757