Article
【U.S. Engineer Attacks Employer’s Network to Extort 20, Sentenced to 32 Months in Prison】
Daniel Rhyne, a former critical infrastructure engineer at an industrial company in New Jersey, was sentenced to 32 months in prison for attacking his employer’s computer network and demanding a Bitcoin ransom. Rhyne, now 59 years old, is from Kansas City, Missouri, and was sentenced September 28 by U.S. District Judge Michael A. Shipp in Trenton. He pleaded guilty this year on April to charges including extortion by threatening to damage a protected computer and intentional damage to a protected computer. Prosecutors did not disclose the company’s name. Its headquarters are in Somerset County, New Jersey, and its customers span industries ranging from biopharmaceuticals to oil and gas. According to the criminal complaint dated FBI, at approximately November 25, 2023 p.m., the company’s network administrators began receiving password-reset notifications for hundreds of accounts, then discovered that all other domain administrator accounts had been deleted. 4 minutes later, employees received an email titled “44 Has Been Penetrated,” claiming that the company’s Your Network administrators had been locked out and its backups had been deleted. The email warned that unless IT was paid by December 2 in 20(then worth approximately 750000 USD), another 40 servers would be shut down each day for 10 days. The email set the ransom at 700000 EUR, payable in Bitcoin. Investigators traced the attack to an unauthorized virtual machine created on the company’s network by November 9, 2023. Its password was “TheFr0zenCrew!”, and that password was subsequently assigned to administrator accounts, 301 user accounts, and the mailbox used to send the extortion email.