New face of hacking: Irate workers
By Thanassis Cambanis
Date: May 23, 2003
Furious that he'd been fired from the travel agency where he worked, James O'Brien waited months before allegedly springing his carefully plotted revenge. Just before Christmas 2000, according to federal prosecutors, O'Brien hacked into his former employer's computer system and canceled 60 customers' airline tickets.
The move cost the agency $96,000 and left dozens of would-be holiday vacationers stranded at airports.
O'Brien's alleged crime, according to federal law enforcement officials who brought charges against him last month, is the new face of hacking: Irate workers who in the old, low-tech days might have simmered or spread slander about their ex-bosses now instead are wreaking havoc on their former workplaces by infiltrating their computer systems.
"Ten years ago, almost all computer crime tended to be kids, seeing what they could do," said Assistant US Attorney Allison D. Burroughs, who heads the Computer Hacking and Intellectual Property unit in the US attorney's office in Boston. "Now, it's disgruntled employees."
Burroughs's unit is currently working on 10 other cases in the federal district of Massachusetts involving fired employees who allegedly struck back at their former bosses by hacking into company computers. About three-quarters of all federal hacking cases in Massachusetts, she said, involve disaffected employees, compared with a decade ago when that proportion of hacking cases stemmed from juveniles vandalizing computer systems.
The phenomenon not only marks a sea change in the criminal use of computer systems, but poses a costly threat to corporations, which can lose millions of dollars to hacker attacks by former insiders who know their systems' vulnerabilities.
"You don't have to be that sophisticated to cause a lot of harm," said US Attorney Michael Sullivan. A hacker with a grudge can bring a company to its knees, he said, causing as much damage with a few computer keystrokes as might be inflicted with a torch in a warehouse.
Three cases were brought in Boston in the last month alone that underscore the threat. In addition to O'Brien, who pleaded not guilty May 1 in US District Court in Worcester, federal prosecutors indicted a Sutton man who allegedly broke into his Worcester employer's computer system, and a man who is accused of cooking up fake e-mail in a lawsuit against an Andover company.
The potential for mischief is great. Robert Boule, a 29-year-old Framingham man, pleaded guilty in federal court in Boston in February to breaking into his former company's computer system to monitor its product lines so he could undercut its bids.
Original article: http://www.saljournal.com/stories/052203/tec_hack.html
^macro[showdigestcomments;^uri;New face of hacking: Irate workers ]