2023年2月3日

聯邦政府把認罪Ubiquiti敲詐勒索案件調查局在Ubiquiti認罪數據敲詐勒索案件科技公司的前雇員Ubiquiti周四在曼哈頓聯邦法庭認罪因犯下一個大膽的內幕攻擊他的雇主,他訪問機密數據,索要贖金的寶庫。Nickolas鋒利,37歲,是一個在紐約的公司高級軟件工程師,專門從事無線通信。在他的角色,他負責雲基礎設施的安全,以及軟件開發。根據聯邦起訴,在2020年底大幅開始濫用他的管理訪問和下載字節的機密數據從公司的Amazon Web服務和GitHub服務器。“犀利Nickolas公司委托他的機密信息,他利用、被索取贖金。”美國律師達米安·威廉姆斯說,周四在一份聲明中宣布認罪。夏普的計劃也有虛假信息的角度。Williams指出,“雪上加霜,當鋒利不給他贖金要求,他報複性的造成假新聞出版公司。“夏普承認一項發送受保護的計算機程序,故意造成損害;一項電信欺詐;和一項向聯邦調查局做偽證。在一起,罪名最高可判處35年,這將由法官決定。 After the company discovered the breach, Sharp was assigned to the team working to investigate and remediate the incident. It was at this point that he posed as an anonymous hacker and sent a ransom note, demanding about $1.9 million in bitcoin in exchange for the stolen files and information about a purported insecure “backdoor” in the system. Three minutes before the deadline to pay the ransom, the “hacker” sent a message via Keybase to an Ubiquiti employee: “No BTC. No talk. We done here.” Included was a link to a public folder containing leaked data. Ultimately, Sharp’s IP address led investigators to his door in Portland, Oregon. He had used the VPN provider Surfshark to hide his tracks, but was exposed one night when there was an Internet outage. As it came back on, the IP address linked to his house was logged as he ran commands to clone GitHub repositories. In March 2021, FBI investigators searched Sharp’s home. According to the indictment , a few days later he began speaking to the media as an anonymous whistleblower, alleging that the data breach at the company was much worse than had been disclosed and that it was handled poorly. Following the coverage, Ubiquiti’s stock plummeted, losing $4 billion in market capitalization over a two-day span. The journalist Brian Krebs, who quoted Sharp anonymously on his site Krebs on Security, was ultimately sued by Ubiquiti for his coverage. Sharp was arrested in December 2021. Tags