Going Postal



	From: Donald Fitzsimmons (dcf69@erols.com)
	To: cult hero (jericho@forced.attrition.org)
	Date: Thu, 23 Dec 1999 20:14:48 -0500
	Subject: Re: Urgent! Security incident on your machine! www.virtualshack.com

	How do I know you didn't do it???



I made a reply, which is quoted in his next piece.
From: Donald Fitzsimmons (dcf69@erols.com) To: cult hero (jericho@attrition.org) Date: Fri, 24 Dec 1999 01:40:55 -0500 Subject: Re: Urgent! Security incident on your machine! www.virtualshack.com To try to get cash. protection money. lol : : How do I know you didn't do it??? : : Brian Martin : [my contact info including address and phone number] : : Feel free to contact the FBI, DCIS or any other law enforcement agency. : They know exactly where we stand. Since we cooperate them on a daily : (sometimes hourly) basis, I am sure they might have a clue as to our real : involvement. : : Or I know.. check your security logs. You will see our machine hit you : AFTER the time stamp of the edited web page. : : Oooh! better, lets look at www.attrition.org/mirror/attrition/ Think we : defaced 4000 pages under 1000 different names over the past 5 years? : : Think we would contact you from our own domain and warn you of the defaced : page? Why would we hack you and then beg for your attention and the idea : of being busted? : : : : One of the services attrition.org offers is mirroring defaced : : : pages to aid in statistics on computer crime. The various archives : : : of information we maintain is used by security professionals and : : : law enforcement every day. We comply with all law enforcement : : : subpoenas for information related to the intrusion as well : : : as offer security advice or assistance to companies experiencing ; : : trouble. : : Think we go through over 300 hours of development time to generate these : tools and statistics so they can be quoted by the govenrment as well as : every major news outlet in existance? : : : : We'd also like to assure you that we had no advanced knowledge : : : of the intrusion. Any reference to attrition.org in your logs : : : is due to our mirroring utility. Any greeting or reference to : : : Attrition on the actual web page is beyond our control. : : Did this not explain it? : : http://www.attrition.org/mirror/attrition/1999/12/22/www.virtualshack.com/ : Rooted by [Zanith] of the BLACK LAVA NETWORK HTTP://BLN.CJB.NET : : Hrm. bln.cjb.net != www.attrition.org : : It is spelled out in gross detail right there for you.