Feeds

Cisco source code swipe suspect charged

Swede also indicted over NASA hack

Secure remote control for conventional and virtual desktops

A Swedish man faces computer hacking and trade secret theft charges in the US over allegations he broke into the systems of Cisco and swiped the networking giant's source code.

Philip Gabriel Pettersson (aka Stakkato), 21, also faces two charges of hacking into the network of NASA, including systems at the Ames Research Center and the NASA Advanced Supercomputing Division, Moffett Field, California.

The attacks against NASA took place on two dates in May 2004 and a separate date in October 2004. The alleged attack against Cisco took place in May 2004, at a time when the prime suspect was just 16.

Each of the five computer hacking and theft of trade secret charges Pettersson faces is punishable on conviction by up to ten years in prison and a maximum fine of $250,000. The prosecution against Pettersson follows an investigation by the FBI, the US Secret Service, investigators at NASA and other additional federal agencies. The US Department of Justice worked with the Swedish authorities on the case, an official statement explains.

The theft of Cisco's secret code back in 2004 caused ripples in the security community at the time, with fears that access to the normally proprietary information would make it easier to craft exploits against networking kit. News of the hack emerged after a hacker posted a 2.5MB extract from the source code onto an IRC channel as proof of the attack. Around 800MB of code involving Cisco IOS 12.3 and 12.3t was reportedly swiped.

As far back as 2005, FBI investigators began working on the theory that the Cisco break-in was part of a much larger assault against systems maintained by the American military, NASA and university research labs.

The attack against Cisco was traced back to Uppsala University, Sweden. A Swedish 16-year-old, identified for the first time as Pettersson this week, was charged in March 2005 with breaking into computers at Uppsala University, putting him in the frame for the much larger attack. Charges over the attacks on three Swedish universities were resolved in 2007, when Pettersson was convicted and ordered to pay $25,000 in damages, Wired reports.

Reports dating back to 2005 suggest corrupt versions of the SSH remote administration utility were used to steal computer log-ins and passwords and carry out the attack, which relied on exploiting trusted relationships between lower security University and nominally higher security research institute systems.

Pettersson's current whereabouts remain unclear. Wired reports that Sweden does not extradite its own citizens, so unless separate related charges are filed locally the case may proceed no further.

The five count US indictment against Pettersson can be found here (pdf). ®

Internet Security Threat Report 2014

More from The Register

next story
Azure TITSUP caused by INFINITE LOOP
Fat fingered geo-block kept Aussies in the dark
NASA launches new climate model at SC14
75 days of supercomputing later ...
Yahoo! blames! MONSTER! email! OUTAGE! on! CUT! CABLE! bungle!
Weekend woe for BT as telco struggles to restore service
You think the CLOUD's insecure? It's BETTER than UK.GOV's DATA CENTRES
We don't even know where some of them ARE – Maude
Cloud unicorns are extinct so DiData cloud mess was YOUR fault
Applications need to be built to handle TITSUP incidents
BOFH: WHERE did this 'fax-enabled' printer UPGRADE come from?
Don't worry about that cable, it's part of the config
Stop the IoT revolution! We need to figure out packet sizes first
Researchers test 802.15.4 and find we know nuh-think! about large scale sensor network ops
DEATH by COMMENTS: WordPress XSS vuln is BIGGEST for YEARS
Trio of XSS turns attackers into admins
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Driving business with continuous operational intelligence
Introducing an innovative approach offered by ExtraHop for producing continuous operational intelligence.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?