Feeds

MySpace hackers avoid extortion rap

Blackmail charges dropped against tracking software duo

Internet Security Threat Report 2014

Blackmail charges have been dropped against a pair of hackers accused of mounting an extortion scam against MySpace as part of a plea-bargaining agreement.

Shaun Harrison, 19, and Saverio Mondelli, 20, of Suffolk County, New York, pleaded guilty to developing code that tracked MySpace users in exchange for an agreement by prosecution lawyers to drop charges that they attempted to extort $150,000 from MySpace.

An illegal access charge was also withdrawn as part of an agreement that saw the duo agree to three years' probation instead of facing charges punishable by up to four years' imprisonment.

Harrison and Mondelli also agreed to pay $13,500 in damages to MySpace and to serve 160 hours of community service as part of the agreement, AP reports. The duo further agreed to limits on their use of the internet, such as restricting themselves to one email address each, in order to avoid possible imprisonment.

Superior Court Commissioner Kristi Lousteau told the duo they will be subject to computer searches without notice and that they were both banned from accessing MySpace for any reason. Violation of their probation would result in imprisonment, she warned.

MySpace is supposed to offer anonymity to visitors, but Harrison and Mondelli developed software designed to allow users to track the email and IP addresses of surfers who visited their profile. MySpace blocked early versions of the traffic monitoring software, which was offered for sale on the web at $30 a pop, but the pair claimed to have developed an unbreakable version which they allegedly threatened to release unless MySpace paid them "consultancy fees".

Harrison and Mondelli were arrested in May 2006 when they flew to LA to "collect" these fees by undercover Secret Service and district attorney's investigators posing as representatives of MySpace.

Hemanshu Nigam, chief security officer for MySpace, welcomed the successful prosecution of Harrison and Mondelli. "We are pleased with outcome of this case and hope that it sends a message to anyone thinking about causing harm to the MySpace community," Nigam told AP, adding that MySpace will continue to oppose firms offering tracking software that violates user privacy. ®

Internet Security Threat Report 2014

More from The Register

next story
George Clooney, WikiLeaks' lawyer wife hand out burner phones to wedding guests
Day 4: 'News'-papers STILL rammed with Clooney nuptials
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.