From: guy lemke (firstname.lastname@example.org) To: punkis (punkis[at]forced.attrition.org) Cc: email@example.com Date: Wed, 22 Dec 1999 16:57:16 -0800 Subject: Re: Urgent! Security incident on your machine! www.contrast-clothing.com OK you have made a claim that we have been hacked... I am forwarding this email to our attorney and local police... I see no evidence of our site being hacked other then your addresses in our log's. I have to assume that you (your company) has done this to try and scare us into using your service. I would suggest that you prove other wise very quick... guy lemke Mgr. Networking Div.
From: cult hero (jericho[at]attrition.org) To: firstname.lastname@example.org Cc: email@example.com, Staff (staff[at]attrition.org) Date: Wed, 22 Dec 1999 17:52:58 -0700 (MST) Subject: Re: Urgent! Security incident on your machine! www.contrast-clothing.com (fwd) http://www.attrition.org/mirror/attrition/1999/12/22/www.contrast-clothing.com/ Bottom of the main frame. Text: m3rr1 x-m4z. (tPG). p10n33r1ng ./h4ck s1nc3 1337. [Preston Chang]. Did you really mean to up that up there? If not, then you were indeed hacked. Seems to me that you have an unprofessional message on your site, or you are flat out wrong about the security incident. http://www.attrition.org/mirror/attrition/1999/12/22/www.contrast-clothing.com/wget-log There is the log showing exactly what we did. Our address in your logs is not a sign of you being hacked. READ what it says. It is very interesting that you threaten to go to the police AFTER you claim your domain wasn't hacked. What, going to report us for being a good net citizen? Or report us for not hacking your domain? What will your lawyer do? Threaten to sue us for being nice? For trying to help you when we had the chance? I'm sure a judge would go for that in a heart beat. Your misguided notion that we are 'scaring' you in some way is absurd. If you would bother to check our web page, you will see that we offer no service. Any and all security contracting that is offered as a result of this mirror is pushed onto a third company to avoid conflict of interests like this. We have turned down over 25,000 dollars worth of consulting so far because of ignorant misguided souls like you. Rather than cry about our mail, why don't you take responsibility for your site and quit threatening us? Makes more sense that way. If you have any questions, you can KINDLY direct them (without threats) to me and I will try to assist you. Brian Martin ATTRITION Staff