RE: [Full-Disclosure] Alleged IT security extortion plot against BestBuy.com

• Previous message: Gregh: "Re: [Full-Disclosure] Is the FBI using email Web bugs?"
• Maybe in reply to: Richard M. Smith: "[Full-Disclosure] Alleged IT security extortion plot against BestBuy.com"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: <rms@computerbytesman.com>, <full-disclosure@lists.netsys.com>
Date: Wed, 7 Jan 2004 13:00:59 -0800

This guy seems to have a history"

http://www.google.com/search?q=%22Jamie+Weathersby%22&filter=0

From http://arbiter.wipo.int/domains/decisions/html/2002/d2002-1045.html

"On October 2, 2002, Jamie Weathersby (LIC's Domain Administrator) sent
an e-mail to Complainant offering it the Domain Name; the price turned
out to be $3 million. In an e-mail the next day, Jamie Weathersby
remarked: "Without RoyalPalmCrownePlazaResort.com, your Miami Beach
property cannot be found conveniently online, and will not be able to
offer convenient online bookings to consumers. Without
RoyalPalmCrownePlazaResort.com, the property will also not be able to
offer convenient contact email addresses ending in
RoyalPalmCrownePlazaResort.com to its consumers. As a result, this
property is unable to capitalize on Internet revenue, and does not
adequately accommodate the general public." "

Regards

Thor Larholm
Senior Security Researcher
PivX Solutions
24 Corporate Plaza #180
Newport Beach, CA 92660
http://www.pivx.com
thor@pivx.com
949-231-8496

PivX defines "Proactive Threat Mitigation". Get a FREE Beta Version of
Qwik-Fix
<http://www.qwik-fix.net>

-----Original Message-----
From: Richard M. Smith [mailto:rms@computerbytesman.com]
Sent: Wednesday, January 07, 2004 7:19 AM
To: full-disclosure@lists.netsys.com
Subject: [Full-Disclosure] Alleged IT security extortion plot against
BestBuy.com

http://www.startribune.com/stories/535/4304797.html
 
Feds thwart extortion plot against Best Buy
David Phelps, Star Tribune
 
Published January 7, 2004 BEST07

Federal authorities said Tuesday they thwarted an extortion plot against
Best Buy Co. Inc. by a man who sent the company an e-mail threatening to
expose what he claimed were weaknesses in the retailer's computer system
unless he was paid $2.5 million.

Thomas E. Ray III, a 25-year-old Jackson, Miss., resident, made his
first Minnesota court appearance Tuesday before U.S. Magistrate Judge
Earl Cudd. He pleaded not guilty and was released on $10,000 bail.

Ray faces two felony charges of making extortion threats to damage
property or reputation and extortion threats to damage computers. He is
being represented by Minneapolis attorney Rick Petry.

He was indicted in federal court in Mississippi in mid-December and
accused of making a series of threats in October to Richfield-based Best
Buy about the security of its BestBuy.com site. No security breaches
were made into the system, Best Buy said.

Federal investigators became involved after security officials at Best
Buy contacted federal authorities about the demands. The Minnesota
CyberCrime Task Force also took part in the investigation, as did
America Online and Netscape, Internet service providers that Ray used.

According to the indictment, Ray made the e-mail demands to Best Buy
under the name and Internet address of "Jamie Weathersby, IPC Corp."

....

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

• Previous message: Gregh: "Re: [Full-Disclosure] Is the FBI using email Web bugs?"
• Maybe in reply to: Richard M. Smith: "[Full-Disclosure] Alleged IT security extortion plot against BestBuy.com"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]