Feeds

Jailed Facebook hack Brit targeted Justin Bieber's girlfriend

Selena Gomez 'told' fans her boyfriend 'sucks' in attack

SANS - Survey on application security programs

A British man jailed for a year after hacking into a private Facebook account targeted Justin Bieber's actress-turned-singer girlfriend, it has emerged.

Gareth Crosskey, 21, of Lancing in West Sussex, was sentenced to 12 months behind bars by London's Southwark Crown Court last week.

Crosskey had pleaded guilty to two computer crime offences relating to hacking into the private Facebook account of a then unnamed US victim. The breach was reported to the FBI who turned over the investigation to Scotland Yard's Police Central e-Crime Unit after tracing the hack to the UK.

The target was Selena Gomez, the teenaged girlfriend of gerbil-faced pop icon Justin Bieber, the PA confirmed. Crosskey threatened to publish personal Facebook messages sent between between the lovestruck pair after gaining control of the actress's profile.

The takeover of the account was carried out after Crosskey successfully posed as her step-father, tricking Facebook into granting him illicit access to Gomez's account in the process. Brian Teefey, Gomez's step-father and manager, was the administrator of her account.

Crosskey set up an email account "extremely similar to that of Selena Gomez's administrators account details" in order to pull off the hack, according to prosecutor Corrine Bramwell, before requesting a password reset.

Bramwell said Crosskey (known online as Pkinjor or prokill) posted a video on YouTube proving he had illicit access to the account before boasting about the breakin of an underground forum, hackersforum.net, where he sought advice on what to do with the compromised account.

After taking control of Gomez's account, Crosskey claimed to have downloaded copies of private emails. He subsequently touted these messages to celebrity magazines OK and Hollywood Life before approaching Teefey and threatening to release the juicy details.

"Her personal email shows what her fans might want to see. I've made a copy of every email between Justin Bieber and Selena Gomez and Selena Gomez and Demi Lovato. I think the paparazzi will have a field day," Crosskey told Teefey.

Justin Bieber sucks

In addition, a message saying "Justin Bieber Sucks" was posted on Gomez's Facebook fan page. Prosecutors allege that Crosskey was responsible for posting the message, which generated floods of hate mail from angry Bieber fans.

At the time of the hack in January 2011, the relationship between Gomez and Bieber was not publicly known.

Lawyers for Crosskey claimed he carried out the hack in order to expose Facebook's security shortcomings, rather than as a prelude to extortion. Crosskey, who was working at burger chain McDonalds at the time of the escapade before starting a college course designing computer games, launched the attack after his own Facebook account was hacked.

Gareth Morgan, defending, said: "He did this after his own account was manipulated and hacked and, in order to demonstrate to the Facebook authorities the ease with which he was able to access Facebook accounts, he accessed through Mr Teefey's email Selena Gomez's account."

Gomez was selected only because she was a celebrity, more or less at random, according to Morgan, who added that his client did not benefit financially from his wrongdoing.

These arguments failed to cut much ice when it came to sentencing. Judge John Price said: "You are clever with a computer and you hacked into the private part of somebody's Facebook account - that somebody was a singer, a celebrity called Selena Gomez."

"She had a Facebook account on which she has 6 million friends," he add.

"They have permission to get into part of the account and you hacked into a private part by getting the private email password. You did that by posing as Brian Teefey, her step-father and manager and you did that, you said, to show Mark Zuckerberg that his security was inadequate."

"People deserve privacy and should not their private correspondence by email made public. People are entitles to privacy even those who seek publicity," the judge concluded. ®

Combat fraud and increase customer satisfaction

More from The Register

next story
Parent gabfest Mumsnet hit by SSL bug: My heart bleeds, grins hacker
Natter-board tells middle-class Britain to purée its passwords
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed
Vendors and ISPs have work to do updating firmware - if it's possible to fix this
Samsung Galaxy S5 fingerprint scanner hacked in just 4 DAYS
Sammy's newbie cooked slower than iPhone, also costs more to build
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
prev story

Whitepapers

Designing a defence for mobile apps
In this whitepaper learn the various considerations for defending mobile applications; from the mobile application architecture itself to the myriad testing technologies needed to properly assess mobile applications risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.