Former IT Director of The Corp was convicted for computer fraud
Justice Suh for hacking email system of The Corp's was pleaded guilty on one count of computer fraud. The federal government has charged Suh in the D.C. federal court on Apr. 2019, and the United States government representative for this case has recommended a 6 months' probation sentence.
Suh was a member of Corp since he has been hired in 2015, and served as the Information Technology Director of The Corp from Mar. 2017 till his resignation in Dec. 2017. As per a letter to court, Maddie Oswald, Vice President and COO of The Corp, stated that its computer system was hacked by the defendant three times (i.e. in May 2017, Sep. 2017, and Mar. 2018).
To commit initial hack of May 2017, Suh compromised the G Suite system of The Corp. He collected personal employee details from access system, the program that was used for registering the work hours, of The Corp. Later on, Suh published this personal information containing names, emails as well as passwords of the 297 Corp workers on the Pastebin, a text storage website that was publicly accessible.
In the most recent hack of Mar. 2018, Suh has created a fake email account of the Corp and granted domain the "super administrator status", by removing this privilege of "super administrator status" from another account of the Corp system. Suh also added another employee of the Corp as secondary email address for this fake account. Moreover, Suh has even changed the account login information of Chief Financial Officer (CFO). Within a few hours, the CFO as well as the other board members has realized that this fake email account was now the only account having super administrator status, which meant that they no longer have the authority over Corp's data. In spite of communicating and involving Google, The Corp has not been able to regain the access without having correct passwords that Suh had changed.
A third-party company was hired by The Corp to manage this situation, after which they came to know that this attack had happened from within The Corp. So, The Corp reported this incident to Metropolitan Police Department. As per the sentencing memo, Suh initially denied any kind of involvement in these hacks to the police. However, when FBI has obtained the search warrant, then Suh confessed to the crime.
» SPAMfighter News - 6/27/2019
We are happy to see you are reading our IT Security News.
We do believe, that the foundation for a good work environment starts with fast, secure and high performing computers. If you agree, then you should take a look at our Business Solutions to Spam Filter & Antivirus for even the latest version of Exchange Servers - your colleagues will appreciate it!