The Register® — Biting the hand that feeds IT

FBI roots own systems to find spy's backdoor

Did Hanssen compromise the whole shebang?

Free whitepaper – Securing your Microsoft Internet Information Services (MS IIS) web server

The FBI is systematically searching for evidence that suspected double agent Robert Hanssen, who has computer programming skills, compromised systems at the Bureau and/or the State Department with some manner of malicious backdoor, according to an unnamed source quoted in Monday's Washington Post.

"The jury is still out as to what he was able to do," the official is quoted as saying. But "because of the possibilities, we’ve got to take a look."

Hanssen had the highest security clearance, which gave him access to extremely sensitive data. The FBI fears that he might have enabled Russian spies to access secure systems used by the FBI, State and other agencies.

According to the Post report, the FBI has determined that Hanssen did not implant anything malicious into its secure, internal network which is not connected to the Internet.

It is not known whether he had access to the Intelink system, by which means intelligence data is shared among US agencies, and the Feds aren't talking about it.

Another possibility is that Hanssen might have compromised some sensitive systems, but erased evidence of it a year or two ago in anticipation of detailed audits required by the Y2K rollover bug.

If that should be the case, then the Feds will have to assess the damage to intelligence networks from indirect evidence alone, unless the suspect decides to sing. ®

Related Story

FBI traitor suspect had mad C skillz

Free whitepaper – Securing your Microsoft Internet Information Services (MS IIS) web server

Don’t Miss

HandcuffsFeds: Hospital hacker's 'massive' DDoS averted

Arrest foils 'Devil's Day' scheme

thumbs down teaser 75Buggy 'smart meters' open door to power-grid botnet

Grid-burrowing worm only the beginning

MicrosoftMicrosoft knew of nasty IE bug a year before attacks

Security delayed or security denied?

BlockMaster SafeStickBlockMaster SafeStick hardware-encrypted USB drive

Review Tough enough?