full-disclosure - Alleged IT security extortion plot against BestBuy.com

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <8B32EDC90D8F4E4AB40918883281874D273CE9@pivxwin2k1.secnet.pivx.com>
From: tlarholm at pivx.com (tlarholm@...x.com)
Subject: Alleged IT security extortion plot against BestBuy.com

This guy seems to have a history"

http://www.google.com/search?q=%22Jamie+Weathersby%22&filter=0

>From http://arbiter.wipo.int/domains/decisions/html/2002/d2002-1045.html

"On October 2, 2002, Jamie Weathersby (LIC's Domain Administrator) sent
an e-mail to Complainant offering it the Domain Name; the price turned
out to be $3 million. In an e-mail the next day, Jamie Weathersby
remarked: "Without RoyalPalmCrownePlazaResort.com, your Miami Beach
property cannot be found conveniently online, and will not be able to
offer convenient online bookings to consumers. Without
RoyalPalmCrownePlazaResort.com, the property will also not be able to
offer convenient contact email addresses ending in
RoyalPalmCrownePlazaResort.com to its consumers. As a result, this
property is unable to capitalize on Internet revenue, and does not
adequately accommodate the general public." "

Regards

Thor Larholm
Senior Security Researcher
PivX Solutions
24 Corporate Plaza #180
Newport Beach, CA 92660
http://www.pivx.com
thor@...x.com
949-231-8496

PivX defines "Proactive Threat Mitigation". Get a FREE Beta Version of
Qwik-Fix
<http://www.qwik-fix.net> 

-----Original Message-----
From: Richard M. Smith [mailto:rms@...puterbytesman.com] 
Sent: Wednesday, January 07, 2004 7:19 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Alleged IT security extortion plot against
BestBuy.com

http://www.startribune.com/stories/535/4304797.html

Feds thwart extortion plot against Best Buy
David Phelps, Star Tribune 

Published January 7, 2004 BEST07 

Federal authorities said Tuesday they thwarted an extortion plot against
Best Buy Co. Inc. by a man who sent the company an e-mail threatening to
expose what he claimed were weaknesses in the retailer's computer system
unless he was paid $2.5 million. 

Thomas E. Ray III, a 25-year-old Jackson, Miss., resident, made his
first Minnesota court appearance Tuesday before U.S. Magistrate Judge
Earl Cudd. He pleaded not guilty and was released on $10,000 bail.

Ray faces two felony charges of making extortion threats to damage
property or reputation and extortion threats to damage computers. He is
being represented by Minneapolis attorney Rick Petry.

He was indicted in federal court in Mississippi in mid-December and
accused of making a series of threats in October to Richfield-based Best
Buy about the security of its BestBuy.com site. No security breaches
were made into the system, Best Buy said.

Federal investigators became involved after security officials at Best
Buy contacted federal authorities about the demands. The Minnesota
CyberCrime Task Force also took part in the investigation, as did
America Online and Netscape, Internet service providers that Ray used.

According to the indictment, Ray made the e-mail demands to Best Buy
under the name and Internet address of "Jamie Weathersby, IPC Corp."

....

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html