From: Donald Fitzsimmons (dcf69@erols.com)
	To: cult hero (jericho@forced.attrition.org)
	Date: Thu, 23 Dec 1999 20:14:48 -0500
	Subject: Re: Urgent! Security incident on your machine! www.virtualshack.com

	How do I know you didn't do it???




	I made a reply, which is quoted in his next piece.



From: Donald Fitzsimmons (dcf69@erols.com)
To: cult hero (jericho@attrition.org)
Date: Fri, 24 Dec 1999 01:40:55 -0500
Subject: Re: Urgent! Security incident on your machine! www.virtualshack.com

To try to get cash. protection money. lol


: : How do I know you didn't do it???
:
: Brian Martin
: [my contact info including address and phone number]
:
: Feel free to contact the FBI, DCIS or any other law enforcement agency.
: They know exactly where we stand. Since we cooperate them on a daily
: (sometimes hourly) basis, I am sure they might have a clue as to our real
: involvement.
:
: Or I know.. check your security logs. You will see our machine hit you
: AFTER the time stamp of the edited web page.
:
: Oooh! better, lets look at www.attrition.org/mirror/attrition/  Think we
: defaced 4000 pages under 1000 different names over the past 5 years?
:
: Think we would contact you from our own domain and warn you of the defaced
: page? Why would we hack you and then beg for your attention and the idea
: of being busted?
:
: : : One of the services attrition.org offers is mirroring defaced
: : : pages to aid in statistics on computer crime. The various archives
: : : of information we maintain is used by security professionals and
: : : law enforcement every day. We comply with all law enforcement
: : : subpoenas for information related to the intrusion as well
: : : as offer security advice or assistance to companies experiencing
; : : trouble.
:
: Think we go through over 300 hours of development time to generate these
: tools and statistics so they can be quoted by the govenrment as well as
: every major news outlet in existance?
:
: : : We'd also like to assure you that we had no advanced knowledge
: : : of the intrusion. Any reference to attrition.org in your logs
: : : is due to our mirroring utility. Any greeting or reference to
: : : Attrition on the actual web page is beyond our control.
:
: Did this not explain it?
:
: http://www.attrition.org/mirror/attrition/1999/12/22/www.virtualshack.com/
: Rooted by [Zanith] of the BLACK  LAVA  NETWORK  HTTP://BLN.CJB.NET
:
: Hrm. bln.cjb.net != www.attrition.org
:
: It is spelled out in gross detail right there for you.