Junior indicted in hacking scheme
FBI alleges Ryan Goldstein helped hacker attack U. server last year
· November 30, 2007, 5:00 am
The Federal Bureau of Investigation announced the indictment of Engineering junior Ryan Goldstein yesterday for his alleged involvement in a global computer-hacking conspiracy.
Goldstein was arrested Nov. 1 and charged with computer-fraud conspiracy, to which he pled not guilty. He was released on a $10,000 bond and is still attending classes.
The Bioengineering major allegedly helped a New Zealand hacker nicknamed "AKILL" carry out computer attacks by using a fellow student's username and password to gain access to a University server.
The investigation of Goldstein was triggered by a suspicious crash of the School of Engineering's server in February 2006 that denied service to 4,000 students, faculty and staff members.
"I believe the charges are exaggerated, and beyond that, I have no further comment," said Ronald Levine, Goldstein's lawyer.
New Zealand detectives are currently investigating an 18-year-old they believe to be AKILL - the ring leader of a "small but elite" group that installed malware on 1.3 million computers worldwide, according to a press release from the New Zealand Police.
Malware can gain control of unsuspecting computers and be used for sending spam, identity theft or denial of service attacks.
An investigation is ongoing, and FBI agents have already indicted two other people with links to AKILL.
The case is part of the FBI's recent nationwide crackdown on computer crime, called Operation Bot Roast II, which has uncovered more than $20 million in economic loss with more than one million victimized computers, FBI special agent J.J. Klaver said.
Following the 2006 Engineering school server crash, University technicians discovered that current Engineering junior Amanda Dyson's school account had been logged into 57,958 times in four days, with 13,289 failed attempts from computers in North America, Europe, Africa, Asia and Latin America, according to an affidavit filed by FBI agent and computer-crimes specialist Jason Stroud.
"It's been likened to trying to drink from a fire hose," Klaver said. "You can shut down entire computer network by flooding it with input."
The user then downloaded unusual files onto the Penn server.
Log-in records showed that the same account had been accessed from Goldstein's King's Court-English College House dorm room, as well as his home in Ambler, Pa.
The affidavit also reported that Goldstein told AKILL, "I have access to a lot of stuff you might want. I have a legit login/pass, guaranteed to work through 2007 at least."
The two are suspected to have met in an online chat group.
University spokeswoman Lori Doyle said no disciplinary action has yet been taken against Goldstein.
Dyson, whose username was used in the attack, said she worked with Goldstein as an Information Technology Assistant at the time in King's Court but never gave him her username or password.
She did not know he was allegedly responsible for hacking into her computer or that charges had been filed against him until yesterday.
"I got the impression he was really good with computers. We would talk about cases and how to solve them," Dyson said. "I didn't think of him as somebody who would do something like that."
Engineering junior Kevin Rakszawski, who worked with Goldstein this semester on two group presentations for a class entitled "Ethics, Social and Professional Responsibility for Engineers," said he was also surprised to hear of the indictment.
"He's pretty low-key. He's very nice," Rakszawski said. "I would have never guessed it."
Goldstein's trial is scheduled for March. If he is convicted, he faces a maximum sentence of five years in prison or a $250,000 fine.




Comments (5)
data miner
December 31, 1969, 7:00 pm
Flag this comment
One addition to this article would be: AKILL was arrested yesterday in New Zealand by a joint task force which included the FBI. Thus, this hacking scheme is much, much bigger than just Ryan. AKILL is accused of causing over 20 million dollars worldwide in economic loss. AKILL is only 18 yrs old and the leader of a major international hacking network. http://www.guardian.co.uk/international/story/0,,2219706,00.html It would be great if the DP could get a little more research done before writing articles like this. It puts the whole case and even the importance of Ryan's case in perspective when you read about AKILL's arrest in New Zealand.
Jay Magoo
December 31, 1969, 7:00 pm
Flag this comment
Five years in the slam and a quarter of a mil fine may seem harsh, but brother Goldstein wasn't playing mumble-de-peg. He was flirting with some real damage to his neighbors in cyberspace, potentially amounting to many millions. Cute, huh?
Why so many attempts without a login suspension?
December 31, 1969, 7:00 pm
Flag this comment
Why was there no alert and shutdown of that girl's login before 4 days? One would think that significant multi-location/high frequency login attempts would prompt an automated alert and/or suspense of the user account until that user could be contacted.
Oz
December 31, 1969, 7:00 pm
Flag this comment
He'll make someone a good wifey in prison.
Absolution
December 31, 1969, 7:00 pm
Flag this comment
This individual is guilty of far more than just computer crimes, his taste for underage boys has provoked a lot of hate from his peers. proof: [link deleted] Editor's Note: The author of this comment provided a link to a file containing offensive content. That link has been removed.
Comments are closed for this item.