Feeds

Miley Cyrus hacker in MySpace spam ringtone scam

TrainReq invites surfers to vote on own punishment

Internet Security Threat Report 2014

A teenager already suspected of breaking into the Gmail account of actress Miley Cyrus and swiping candid pictures also hacked into MySpace profiles of other celebrities.

Suspected hacker Josh Holly, 19, also allegedly broke into the online accounts of music stars including Rihanna, Chris Brown, Linkin Park and Fall Out Boy, Wired reports.

According to an affidavit by FBI investigators obtained by NewsChannel 5, Holly (aka Trainreq) used access to the compromised accounts to spam fans with messages punting ringtones. The scam grossed an estimated $110,000 in advertising affiliate fees between November 2007 and July 2008. Holly claims he split the income with an Israeli accomplice.

The duo obtained access to MySpace's administrative panel using social engineering trickery on a MySpace worker before resetting account passwords for around 20 MySpace users including famous musicians.

Holly was arrested by the FBI in October following a raid on his home in Tennessee but is yet to be charged. Investigators are apparently awaiting the results of a computer forensics investigation. More details about the accusations against Holly can be found in a newly-released affidavit here (pdf).

While the investigation storm swirls about him, Holly is getting on with the business of running his Trainreq website, seemingly enjoying his new found notoriety. Demonstrating considerable chutzpah, Holly is running an online poll inviting visitors to the site to vote on what punishment they'd like him to receive.

Options include "Free TrainReq", "Lock him up and throw away the key" and "Give him probation, I am pissed he hacked miley. But don't be too harsh". ®

Internet Security Threat Report 2014

More from The Register

next story
George Clooney, WikiLeaks' lawyer wife hand out burner phones to wedding guests
Day 4: 'News'-papers STILL rammed with Clooney nuptials
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.