Risk
11/16/2011
02:28 PM
Connect Directly
Twitter
RSS
E-Mail
50%
50%

Romanian Accused Of NASA Hacks

A 26-year-old Romanian man stands accused of hacking into NASA servers, modifying data, and restricting access to them last December.

NASA, Microsoft Reveal Mars In Pictures
(click image for larger view)
Slideshow: NASA, Microsoft Reveal Mars In Pictures
Romanian police have ordered the detention of a 26-year-old man accused of hacking into NASA servers last December and causing $500,000 worth of damage in the process, according to a statement by a Romanian law enforcement agency.

According to Romania's Directorate for Investigating Organized Crime and Terrorism (DIICOT), the man, Robert Butyka, hacked into several NASA servers on Dec. 12, 2010, modified and damage data on the servers and restricted access to them.

The authorities are detaining Butyka, a resident of Cluj-Napoca, Romania's fourth-largest city, on charges of circumvention of computer security measures and unauthorized disruption of the functioning of a computer, damage to computer data, and restriction of access to computer systems. Several computers were seized as evidence during a local police raid of Butyka's home.

[ The feds are moving to bust cyber criminals here and abroad. Read FBI Busts $14 Million Botnet Fraud Gang. ]

The Facebook page of Butyka, who reportedly goes by the online handle Iceman, is littered with notifications from Facebook apps, and links to a no longer working Website affiliated with his nom de guerre. A number of other websites associate the domain with malware.

Romania has been the source of a number of attacks, including a major international cybercrime ring that the Department of Justice helped bust up in 2008. In another major case, a Romanian hacker was convicted and imprisoned after repeatedly hacking into eBay in a series of actions that the auction website said resulted in millions of dollars of losses.

NASA has also been subject to Romanian hackers before. Victor Faur was charged in 2006 with 10 criminal counts for hacking into more than 150 government computers, including computers used for deep space research, and causing them to display messages indicating that they'd been hacked. He's now appealing the verdict against him. Earlier this year, a hacker with the online pseudonym TinKode exposed a security flaw in NASA Goddard Space Center's FTP site.

NASA did not respond to a request for comment in time for this article.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
RBOOS000
50%
50%
RBOOS000,
User Rank: Apprentice
11/19/2011 | 4:56:14 PM
re: Romanian Accused Of NASA Hacks
If large organizations hadn't been so cheap in setting up the earliest computer systems, a lot of this crap would not be happening now. Banks, government agencies, stockbrokerage firms, etc. refused to incorporate effective encryption protection into their systems because they figured that the cost of doing that was greater than the costs they might incur if sued over breaches.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8891
Published: 2015-03-06
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors...

CVE-2014-8892
Published: 2015-03-06
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to bypass intended access permissions and obtain sensitive information via un...

CVE-2015-1170
Published: 2015-03-06
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API call...

CVE-2015-1637
Published: 2015-03-06
Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict TLS state transitions, which makes it easier for r...

CVE-2014-2130
Published: 2015-03-05
Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka B...

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.