NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home / News / Security

Security


Terminated Employee Hacks His Way Back In

The disgruntled hacker compromises 1,000 servers

By Lucian Constantin, Web News Editor

15th of January 2009, 10:48 GMT

Adjust text size:


Hacker crashes his ex-employer's servers
Enlarge picture
David Ernest Everett Jr., from Blaine, Minnesota, has pleaded guilty to computer hacking charges in a federal court. He faces 10 years in prison for installing malware on 1,000 computer servers administered by his former employer and crashing several of them.

Mr. Everett, 21, used to work as a tech support staffer for Wand Corporation, a firm that provides and administers computer systems for other companies, including fast-food chains such as Pizza Hut, KFC, and Burger King. Everett admitted to launching "malicious software attacks" against computers belonging to Wand's business customers, three-weeks after being fired for reasons that were not disclosed to the press.

In order to instrument his attacks, Everett developed three malicious files, which he then distributed to over 1,000 servers located in various restaurants, with the intention of crashing them. The servers are connected to the cash registries and store financial data, payroll information, inventory, and work schedules.

Fortunately, the hacker was only able to crash 25 servers until Wand Corp. was notified by its customers about the technical difficulties. Upon investigating the situation, the company's staff identified the virus implanted by Everett and were able to clean it from the rest of the servers. "We were able to minimize the damage, once we knew what was going on," Dave Perrill, vice president at Wand Corp., notes.

The investigation concluded that Everett exploited a security hole, which he became aware of while working for the company. "I think the message we should all learn from this sorry case is the importance of changing passwords and resetting access rights when a member of your staff leaves your employment," Graham Cluley, senior technology consultant for anti-virus vendor Sophos, writes.

Even though their servers crashed, the fast-food restaurants did not suffer major losses, as they were still able to serve customers. However, fixing the problem did cost Wand Corp. $49,000 and the company estimates that, if all servers had been seriously affected, the losses would have amounted to $4.25 million.

Other similar incidents that we have previously reported involve a former network admin who hacked the computers of his ex-employer and destroyed data, hoping that he would be hired back in order to fix them. Another upset employee turned the e-mail server of the company he used to work for into a spam relay, claiming that he was threatened and forced to resign by another employee of a higher rank. And then, there is, of course, the infamous case of Terry Childs, the upset network administrator, who locked the municipality of San Francisco out of its own multi-million dollar FiberWAN network.

TAGS:

Wand Corporation | David Ernest Everett | fast-food restaurant | malware development | server hacking
Read by 2,025 user(s) | Add comment | Link to this article TWEET THIS


Article rating:
NOT RATED 0 vote(s)    

Subscribe to news | Print article | Send to friend

© Copyright 2001-2009 Softpedia
Contact:

 

 

SEARCH THE NEWS ARCHIVE :




Today's News
| Yesterday's News | News Archive


MORE RELATED ARTICLES:


Former Network Admin Turns Full-Time Criminal

Disgruntled Ex-Employee Turns Company Server into Spam Relay

FiberWAN Network Admin Hands Over Password

Zlob Trojan Writer Packs Up Shop and Greets Microsoft

US Attorney Office Discloses Informants' Names

Voicemail Hack Costs Business Owner $43,000

Symantec and HP Lose Employees' Personal Information

User opinions:


Comment #1 by: Sonny vang on 11 Aug 2009, 18:33 GMT reply to this comment

I can completely understand why he did it. Go to http://www.jobvent.com
The company gives you no respect and are overly abusive bosses.
You are forced to be a help desk support even if it's not your field. I used to work there as an Field Technician Installer for them. Every time any Installer comes back and stays for in house, they are forced to be help desk support. There is no such thing ever mentioned in the employee hand book except installers are to work 45 hours when they are in house. We installers were never asked if we wanted to help out with help desk. Because installers are on Salary they abuse the system. This has not been reported to the IRS. It will shortly after I right this. This is clearly misclassified employee and they know it. They been doing for over 10 years. Just think over 10 years times all the installers as Help Desk Support hourly rate. That is bi money wouldn't you say so. I have worked there for 3 years and know what they have done wrong and right. I also know their love triangle between workers and bosses. The bosses and the owners themselves that run there doesn't care about the employees and always give them no respect. If you look into their history, Why are they always firing, letting go, and kicking people out every week,other week, month,and other months. I know why because they don't give a damn care about employees it's only about the money.Everything about this company is bad.

Share your opinion:

Your Name:
Your Email Address:
(will not be used for commercial purposes)
Solve this to prove you're not a bot: =
Your review/opinion:

 




Windows tabGames tabDrivers tabMac tabLinux tabScripts tabMobile tabHandheld tabGadgets tabNews tab

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   ENTER NEWS SITE   |   ENGLISH BOARD   |   ROMANIAN FORUM