Thursday, June 29, 2006

Logic Bomb

This one is a real logic bomb created by an unhappy system admin of an investment bank, who expected a bonus of $50k but only got $32k, to take revenge deleting all the files in the host server in the central data centre and then every server in every branch of the company.

where "/usr/sbin/mrm -r" is a variant of the classic "rm -rf" command for mass deletion of files and folders.

Some 2,000 servers did go down and 400 branch offices were hit. Backup systems did not work and files were deleted.

This 'time bomb' was found by Keith Jones, director of computer forensics and incident response at Mandiant, while doing forensics on the United States v. Duronio case.

read more ...

No comments: