Attacks/Breaches

6/19/2018
02:26 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Arizona Man Sentenced to Prison for Distributed Denial of Service Attacks Against Emergency Communications System and Other Municipal Websites

An Arizona man was sentenced yesterday in Phoenix, Arizona, for directing distributed denial of service (DDoS) attacks at the computer networks of the City of Madison, Wisconsin, announced Acting Assistant Attorney General John P. Cronan of the Justice Department’s Criminal Division and First Assistant U.S. Attorney Elizabeth A. Strange for the District of Arizona.

Randall Charles Tucker, aka “Bitcoin Baron,” 23, of Apache Junction, Arizona, was sentenced to serve 20 months in prison by U.S. District Judge Douglas L. Rayes of the District of Arizona.  He was also ordered to pay restitution in the amount of  $69,331.56 to the victims of his computer attacks. Tucker pleaded guilty on April 17, 2017 to one count of intentional damage to a protected computer.

According to admissions made in connection with his plea, between March 9 and March 14, 2015, Tucker executed a series of DDoS attacks against various city websites, including Madison, Wisconsin. A DDoS attack is a malicious attack where illegitimate network traffic is used to slow down or altogether crash a computer server, thereby denying service to legitimate users of the server.  In addition to disabling the City of Madison’s website, the attack crippled the city’s Internet-connected emergency communication system, causing delays and outages in the ability of emergency responders to connect to the 911 center and degrading the system used to automatically dispatch the closest unit to a medical, fire, or other emergency. Tucker, referring to himself as the “Bitcoin Baron,” boasted about his attacks via social media.

This case was investigated by FBI’s Milwaukee and Phoenix Field Offices and Arizona’s Department of Public Safety.  Assistant U.S. Attorney James R. Knapp of the District of Arizona and Trial Attorney Laura-Kate Bernstein of the Criminal Division’s Computer Crime and Intellectual Property Section are prosecuting the case.  The U.S. Attorney’s Office for the Western District of Wisconsin also provided substantial assistance in this manner.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
What We Talk About When We Talk About Risk
Jack Jones, Chairman, FAIR Institute,  7/11/2018
Major International Airport System Access Sold for $10 on Dark Web
Kelly Sheridan, Staff Editor, Dark Reading,  7/11/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-14373
PUBLISHED: 2018-07-17
An issue was discovered in LibTIFF 4.0.9. In TIFFFindField in tif_dirinfo.c, the structure tif is being dereferenced without first checking that the structure is not empty and has the requested fields (tif_foundfield). In the call sequences following from the affected library functions (TIFFVGetFiel...
CVE-2018-14374
PUBLISHED: 2018-07-17
An issue was discovered in LibTIFF 4.0.9. A buffer overflow can occur via an empty fmt argument to unixErrorHandler in tif_unix.c, and it can be exploited (at a minimum) via the following high-level library API functions: TIFFClientOpen, TIFFFdOpen, TIFFRawStripSize, TIFFCheckTile, TIFFComputeStrip,...
CVE-2018-14375
PUBLISHED: 2018-07-17
An issue was discovered in LibTIFF 4.0.9. A buffer overflow vulnerability can occur via an invalid or empty tif argument to TIFFRGBAImageOK in tif_getimage.c, and it can be exploited (at a minimum) via the following high-level library API functions: TIFFReadRGBAImage, TIFFRGBAImageOK, and TIFFRGBAIm...
CVE-2018-14378
PUBLISHED: 2018-07-17
An issue was discovered in LibTIFF 4.0.9. A buffer overflow can occur via an invalid or empty tif argument to TIFFWriteBufferSetup in tif_write.c, and it can be exploited (at a minimum) via the following high-level library API function: TIFFWriteTile.
CVE-2018-14363
PUBLISHED: 2018-07-17
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.