RE: PaineWebber SysAdmin Faces Trial For Computer Sabota ge

[Blanchard_Michael () emc com]

 this sounds much more than just an admin mistake....  He basically put a
script on a ton of systems that would start deleting stuff on a certain
date.

  The biggest threats and the most damage can always be caused by an
insider....  That's why we have to "trust no-one"


Michael P. Blanchard 
Antivirus / Security Engineer, CISSP, GCIH, CCSA-NGX, MCSE
Office of Information Security & Risk Management 
EMC ² Corporation 
4400 Computer Dr. 
Westboro, MA 01580 


-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] On
Behalf Of David Alanis
Sent: Friday, June 02, 2006 4:26 PM
To: Fergie; funsec () linuxbox org
Subject: re: [funsec] PaineWebber SysAdmin Faces Trial For Computer Sabotage

So what happens next, was he an ordinary citizen? I love technology, but I
dislike to think that my position as a Network Engineer or sysadmin may
provoc my employer to take me to court to cover financial losses due to
administrative wrong doings!

David  
On Friday, June 02, 2006  3:11 PM, Fergie wrote:
> Date: Fri, 2 Jun 2006 20:11:48 GMT
> From: Fergie
> To: funsec () linuxbox org
> Subject: [funsec] PaineWebber SysAdmin Faces Trial For Computer Sabotage
>
> Via InformationWeek.
>
> [snip]
>
> A former systems administrator for financial giant UBS PaineWebber goes on
trial Tuesday for allegedly sabotaging two-thirds of the company's computer
network in what prosecutors say was a vengeful attempt to profit from a
crashing stock price.
> Roger Duronio, 63, of Bogota, N.J., is facing federal charges in front of a
U.S. District Court in Newark, in connection to the creation and planting of
malicious code on more than 1,000 computers in the company's central office,
as well as in approximately 370 branch offices. When the malicious code, or
"logic bomb," was triggered on March 4, 2002, it began deleting files and
data, taking down many PaineWebber computers across the United States and
hindering trading for days in some branch offices and for several weeks in
others, according to Assistant U.S. Attorney Mauro Wolfe, lead prosecutor on
the case.
> The attack, according to the indictment, cost UBS PaineWebber, which was
renamed UBS Wealth Management USA in 2003, $3 million just to assess and
repair the damage. The company didn't submit a list of losses to the
government based on business downtime or lost trading opportunities.
> Chris Adams, Duronio's defense attorney and a partner at Walder Hayden &
Brogan in Roseland, N.J., says the government has the wrong man. Duronio has
pleaded not guilty to all charges. He has been free on bail awaiting trial
for the past four years. Adams says he's not working in an IT position at
this time.
> [snip]
>
> More:
> http://informationweek.com/news/showArticle.jhtml?articleID=188700855
>
> - ferg
>
>
> --
> "Fergie", a.k.a. Paul Ferguson
> Engineering Architecture for the Internet
> fergdawg () netzero net or fergdawg () sbcglobal net
> ferg's tech blog: http://fergdawg.blogspot.com/
>
>
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.



"Great Spirits Have Always Encountered Violent Opposition From Mediocre
Minds" - Einstein

"Cuanta estupidez en tan poco cerebro!"


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.