Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

How NOT to get a job 101: Hack Marriott, extort execs for work

The Department of Justice today said a man who sent malicious code to Marriott International Corporation, threatening to reveal confidential information taken from the company's computers if Marriott did not offer him a job, has been sent to prison for his criminal endeavor.

Attila Nemeth, 26, a Hungarian citizen, was sentenced to 30 months in prison and three years of supervised release.

MORE NEWS: The weirdest, wackiest and coolest sci/tech stories of 2011

According to the DOJ, court documents show on Nov. 11, 2010, Nemeth emailed Marriott personnel, telling them he had been accessing Marriott's computers for months and had obtained proprietary information. Nemeth threatened to reveal this information if Marriott did not give him a job maintaining the company's computers.

On Nov. 13, 2010, after receiving no response from Marriott, Nemeth sent another email containing eight attachments, seven of which were confirmed as documents stored on Marriott's computer system. These documents included financial documentation and other confidential and proprietary information. Nemeth admitted that through an infected email attachment sent to specific Marriott employees, he was able to install malicious software on Marriott's system that gave him a backdoor into the system. Using the backdoor, Nemeth was able to access proprietary email and other files belonging to Marriott, the DOJ stated.

Without Nemeth's knowledge on Nov. 18, 2010, Marriott created a fictitious Marriott employee that it then let the U.S. Secret Service use in an undercover operation to communicate with Nemeth. Nemeth, believing he was communicating with Marriott human resources personnel, continued to call and email the undercover agent, and demanded a job with Marriott in order to prevent the public release of the Marriott documents. Nemeth emailed a copy of his Hungarian passport as identification and offered to travel to the United States, the DOJ stated.

MORE ON HIGH-TECH CRIME: From Anonymous to Hackerazzi: The year in security mischief-making

~~

The DOJ explained that on Jan. 17, 2011, Nemeth went to Washington Dulles Airport for an "employment interview." A Secret Service agent conducted the interview by assuming the role of the Marriott employee with whom Nemeth believed he had been communicating. During the course of the interview, the DOJ said Nemeth admitted that he accessed Marriott's computer systems; stole Marriott's confidential and proprietary information; and sent the emails to Marriott threatening to publicly release Marriott's data unless he was given a job on his terms by Marriott. To further prove his identity as the perpetrator, Nemeth demonstrated exactly how he accessed the Marriott network, his continued ability to access the Marriott network, and the location of the stolen Marriott proprietary data on a computer server located in Hungary, the DOJ stated.

As a result of Nemeth's activities, Marriott engaged more than 100 of its employees in a thorough search of its network to determine the scope of the compromise and to identify the data that may have been compromised. The loss to Marriott as a result of the intentional damage caused by Nemeth was approximately $1 million in salaries, consultant expenses and other costs associated with Nemeth's intrusion, the DOJ stated.

Follow Michael Cooney on Twitter: nwwlayer8 and on Facebook

Read more about wide area network in Network World's Wide Area Network section.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Department of Justice, DOJ, Facebook, LAN, Marriott International
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: cybercrime, data breach, legal, Marriott, Marriott hack, Marriott International, Secret Service, security, US Department of Justice
Latest Blog Posts
Whitepapers
  • Top 5 Threat Protection Best Practices
    Small businesses are especially vulnerable to computer viruses and lost or stolen data, since they typically lack the IT resources to deal with these threats. Inadequately protected computers open the door to annoying infections, or worse, serious business disruption. Below are five simple and effective strategies to help you protect your business against an ever-increasing number of threats.
    Learn more »
  • Traditional Backup is Dead - Are you prepared?
    Conventional backup and recovery approaches clearly can't keep up with ever-growing storage rates. It's time to take on a new strategy.
    Learn more »
  • HP Security Action Plan for Enterprise Printing and Imaging
    Security is a part of how we work. When you walk through the front door of your office every morning, you probably pass a level of security. At your desk, it’s likely you log in to your computer and access files over a secure server. From security badges and ID cards to network firewalls and software security, it may seem like your organisation has taken every measure to protect its property, people and data. This action plan outlines a step-by-step approach to help you develop a plan that improves the security of your printing and imaging environment and boosts your business.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments