iPad Hackers Charged by Federal Prosecutors

January 19, 2011 -

ABC News reports that two men have been charged with hacking AT&T's servers and stealing the private information of nearly 120,000 iPad users including such notables as Hollywood heavyweight Harvey Weinstein, New York Mayor Michael Bloomberg, and President Obama's former chief of staff Rahm Emanuel. Some have called the men "Internet trolls" because of the way they allegedly bragged about it online. The security breach occurred during the initial release of Apple's iPad, according to court documents.

The two are 26-year-old Daniel Spitler of San Francisco, and 25-year-old Andrew Auernheimer of Fayetteville, Ark. Both received a charge of fraud and conspiracy to access a computer without authorization. The charges were announced by the U.S. prosecutors office in Newark, N.J.

According to the complaint filed by the FBI in Newark this week, Spitler and Auernheimer allegedly used a "brute force hack tactic" over the course of several days on AT&T servers. After breaching security, the duo uncovered email addresses related to 120,000 iPad accounts.

After the attack, Gawker.com was allegedly supplied with information obtained during the hack from the group Goatse Security, described in the complaint as a "loose association of internet hackers" that Spitler and Auernheimer were allegedly associated with.

The court papers cite that Gawker report. Around 120,000 emails were captured including notable personalities and politicians such as Bloomberg, Weinstein, Rahm Emanuel, ABC News anchor Diane Sawyer, and several Department of Defense employees.

Auernheimer and Spitler also allegedly talked about the hack in chat logs, which were given to the FBI. The FBI says that Auernheimer also took credit for the attack in an email he sent to the U.S. Attorney's office in New Jersey in November.

"AT&T needs to be held accountable for their insecure infrastructure as a public utility and we must defend the rights of consumers, over the rights of shareholders," he wrote, according to the complaint.

While Auernheimer claimed to do this in the name of exposing a security flaw to AT&T to protect iPad users, the FBI isn't buying that explanation: they see it purely as a crime done simply for thrills or notoriety:

"Hacking is not a competitive sport, and security breaches are not a game. Companies that are hacked can suffer significant losses, and their customers made vulnerable to other crimes, privacy violations, and unwanted contact," U.S. Attorney Paul J. Fishman tells ABC News.

"Unauthorized intrusions into personal privacy adversely affect individual citizens, businesses, and even national security," said Michael Ward, special agent in charge of the FBI's Newark field office. "Such intrusion cases, regardless of the motive is criminal gain or prestige among peers in the cyber-hacking world, must and will be aggressively pursued to ensure these rights are protected to the highest degree."

The ABC News report also points to a 2008 interview that Auernheimer did with the New York Times:

"I hack, I ruin, I make piles of money. I make people afraid for their lives," he said to the Times.

The FBI also claims that the men wanted to make money off the stolen data.. in the stock market. During one online conversation between the two, they discussed holding off on announcing the security breach so they could "short AT&T stock."

The logs, which were handed over to the FBI by an anonymous source last summer, are part of the court documents filed this week, according to Computer World. Spitler surrendered to the FBI in Newark on Tuesday and is scheduled to appear in federal court. Auernheimer is scheduled to appear in federal court in Fayetteville. Neither men have entered a plea.

Source: ABC News

 


Comments

Re: iPad Hackers Charged by Federal Prosecutors

Re: iPad Hackers Charged by Federal Prosecutors

So, bragging = trolling somehow?

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
Andrew EisenNow, having said that, what sites are you reading that are claiming that if "you self-identify as a Gamer, you're immediately the problem" or that gamers are "obligated to stop harassment"? Or was that hyperbole too?09/21/2014 - 1:03am
Andrew EisenFirst of all, ONE person in the Shout box suggested an obligation to call harassers out on their harassing but only after YOU brought it up. Plus, Techno said "when you see it happening." If you don't see it, you're not under any obligation.09/21/2014 - 1:02am
Sleaker@Craig R. - at this point I don't even know what the hashtags are suppsed to be in support of. what does GamerGate actually signify.09/21/2014 - 12:21am
Sleaker@AE - Hyperbole for the first 2, but it seems like some of the comments in the shout are attempting to place blame on fellow gamers because they aren't actively telling people to stop harassing even though they don't necessarily know anyone that has.09/21/2014 - 12:16am
Andrew EisenSleaker - Who the heck are you reading that is claiming "all gamers are bad," we "need to pass laws or judgement on all gamers," that if "you self-identify as a Gamer, you're immediately the problem," or that gamers are "obligated to stop harassment"?09/20/2014 - 9:44pm
erthwjimhe swatted more than just krebs, I think he swatted 30 people http://krebsonsecurity.com/2014/05/teen-arrested-for-30-swattings-bomb-threats/09/20/2014 - 9:31pm
Craig R.Btw, the guy who swatted security expert Brian Krebs? He got picked up recently. It can be done.09/20/2014 - 8:55pm
Craig R.Such things are not done in a vacuum... hence why the 4chan and other logs show what fools you've all been, tricked into doing the trolls' work09/20/2014 - 8:49pm
Sleaker@Technogeek - How do you call someone out that anonymously calls in a SWAT team, or sends threats to people?09/20/2014 - 7:04pm
Technogeek"It also doesn't mean you're obligated to stop harassment from all gamers that are doing so." I'd say you're certainly obligated to call them out when you see it happening.09/20/2014 - 5:17pm
SleakerNow if you disagree with anything in my last 2 posts then we obviously have a difference in world view, and wont come to any sort of agreement. I'm fine with that, maybe some people aren't?09/20/2014 - 5:09pm
SleakerIt also doesn't mean that just because a news outlet says that Gamers are the problem and you self-identify as a Gamer, you're immediately the problem. It also doesn't mean you're obligated to stop harassment from all gamers that are doing so.09/20/2014 - 4:59pm
SleakerJust to re-iterate: People getting harassed is wrong. Just because someone is harassed by so called 'gamers' doesn't mean that all gamers are bad. nor does it mean that you need to pass laws or judgement on all gamers.09/20/2014 - 4:56pm
SleakerAnd furthermore just because someone doesn't 'crusade against the evil' that doesn't make them the problem. You can have discussion with those around you. There's a thing called sphere of influence.09/20/2014 - 4:54pm
Sleaker@Conster - one person getting harassed is a 'problem' only so far as the harassee's are doing it. Just because a select few people choose to act like this doesn't make it widespread. Nor does it immediately make everyone responsible to put an end to it.09/20/2014 - 4:54pm
james_fudgeno worries09/20/2014 - 4:15pm
TechnogeekI misread james' comment as "we can't have a debate without threatening" there at first. Actually wound up posting a shout about death threats and "kill yourself" not technically being the same thing before I realized.09/20/2014 - 3:59pm
james_fudgeDon't hit me *cowers behind Andrew*09/20/2014 - 3:20pm
ConsterYou take that back right now, james, or else. *shakes fist menacingly*09/20/2014 - 3:00pm
james_fudgeOur community is awesome. We can have a debate without threatening to kill each other.09/20/2014 - 2:50pm
 

Be Heard - Contact Your Politician