Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Security

December 18th, 2010, 12:51 GMT · By

Fannie Mae Attempted Saboteur Gets 41-Month Prison Sentence

SHARE:

Adjust text size:


Rogue Fannie Mae UNIX engineer jailed
Enlarge picture
A former UNIX engineer was sentenced to 41 months in prison for planting a logic bomb with the purpose of bringing Fannie Mae's entire computer network down.

Rajendrasinh Babubhai Makwana, 36, of Montgomery County, Maryland, was sentenced U.S. District Judge J. Frederick Motz yesterday after a federal jury found him guilty of computer intrusion at the beginning of October.

Makwana worked as a contractor at Fannie Mae's Urbana Technology Center between 2006 and October 24, 2008, when he was fired. His job gave him administrative access to the mortgage giant's servers.

On October 29, 2008, during a routine check, a senior Fannie Mae systems engineer noticed a hidden unauthorized script scheduled to execute on January 31, 2009.

The script's purpose was to propagate through the entire computer network, delete data from all its 5,000 servers and lock administrators out with the message "Server Graveyard."

Investigators estimated that, had the program ran as intended, Fannie Mae's network would have been disabled for a week, leading to millions of dollars in losses.

By analyzing the logs, the program was traced back to the IP address assigned to Makwana's work laptop. Investigators determined that it was uploaded on October 24, the same day when the computer engineer emailed his family in India to tell them not to return to the United States.

"Computer intrusion cases are a high priority for federal law enforcement because of the potential to cause serious damage. Mr. Makwana was trusted with access to the computer system, and he violated that trust," said U.S. Attorney Rod J. Rosenstein.

Incidents of disgruntled employees taking revenge on companies by disrupting their IT infrastructure are relatively common. The most famous case is that of Terry Childs, the former San Francisco computer engineer who held the city's multimillion-dollar network hostage for almost two weeks in 2008 after learning of his impending dismissal.

TELL US WHAT YOU THINK:

1,598 hits · 1 comment · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


Former Fannie Mae Engineer Found Guilty of Planting Destructive Program

Rogue San Francisco Network Admin Sentenced to Four Years in Prison

Rogue IT Admin Close to Shutting Down Mortgage Giant

Man Pleads Guilty to Damaging Oil-Leak Detection System

READER COMMENTS:


Comment #1 by: mrethiopian on 01 Jan 2011, 23:57 UTC reply to this comment

Much of core of this story omitted from this article makes no sense and it only shows how inept our US government is in applying security concepts that practitioner like myself have been implementing for years in the private sector. Rajendrasinh implemented his time-bomb on a development server that sat under his desk and then planted a hook that called that script from the production UNIX systems. Segregation of Development and Production environments is nothing new, nor is code review or having a single IP to implement new code into production (Software Release life cycle). So why is it that production servers at Fannie May can be accessed by an IP of any worker on the wire? Sounds like Fannie May has allot of work to do.

mrethioian

Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM