full-disclosure - Authorities eye MSBlaster suspect

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <001301c36e7d$f3154290$550ffea9@rms>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: Authorities eye MSBlaster suspect

The FBI followed the same steps that you outlined to locate Jeffrey
Parson according to his indictment papers.  The FBI also got an IP
address for Jeffrey which traced back to his house from the hosting
service for t33kid.com.  

Moral of the story:  If you want to be a successful cybercriminal,
remember to always hide behind proxy servers and don't use your real
name and address when registering a domain name.

If found guilty, I think an appropriate sentence is to make him clean up
virus infected computers in public schools for a year.

Richard

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Jerry
Heidtke
Sent: Friday, August 29, 2003 4:47 PM
To: the lumpalaya
Cc: full-disclosure@...ts.netsys.com
Subject: RE: [Full-Disclosure] Authorities eye MSBlaster suspect

It looks like it took the FBI 6 days to find what took 10 minutes on
Google. Let's see, executable name is teekids.exe, here's a
script-kiddie that goes by teekid, he's got a web site called
t33kid.com, the whois for the domain gives his real name and address.
Enough probable cause to get a warrant right there.

Jerry