Feeds

Romanian police arrest Pentagon hack suspect

'Wolfenstein' cuffed

SANS - Survey on application security programs

Romanian police have arrested a hacker suspected of breaking into Pentagon systems and planting malware.

Eduard Lucian Mandru, 23, a business studies student from Iasi, Romania, is suspected of breaking into US Department of Defense systems in 2006. A criminal hacker nicknamed "Wolfenstein" accessed sensitive systems at that time, using compromised servers located in Japan in a bid to cover his tracks.

The cracker infected an unspecified number of systems with an unidentified information-stealing trojan before deleting access logs, Softpedia reports. US authorities say that damages in sorting out the resulting mess came to over $35,000.

One of the few leads investigators had to go on was a Yahoo email address - wolfenstein_ingrid@yahoo.com - linked to the attack. Mandru recently posted his CV on job-seeking websites giving this Yahoo address as his email contact, a blunder that reportedly put investigators on his trail. Police raided Mandru's home, seized computer equipment and took him into custody on Wednesday.

If found guilty of computer hacking offences, Mandru faces a prison term of between three and 12 years.

Victor Faur, AKA SirVic, another Romanian hacker alleged to have broken into US military systems, received a suspended prison sentence of 16 months. At the time of his arrest, the US-Romania extradition agreement then in force omitted hacking offences. A revamped extradition treaty does include hacking offences, making Mandru a possible candidate for extradition.

It's unclear if US authorities will take this option.

Although the apparent blunder that put investigators onto Mandru trail appears dumb, cybercrooks often make such mistakes.

"Hackers who deface police and military websites often leave email addresses," explained Graham Cluley, senior technology consultant at Sophos. Jeffrey Lee Parson, convicted author of a variant of the infamous Blaster worm, coded the malware to phone home for updates from a website he owned. He also wrote his online nickname (teekid) into the fabric of Blaster-B, Cluley added. ®

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Arts and crafts store Michaels says 3 million credit cards exposed in breach
Meanwhile, Target investigators prepare for long process in nabbing hackers
prev story

Whitepapers

SANS - Survey on application security programs
In this whitepaper learn about the state of application security programs and practices of 488 surveyed respondents, and discover how mature and effective these programs are.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.