DEF CON Talk

A 1983 incident involving a malicious email sent by John Draper, also known as "Captain Crunch," can have devastating consequences, including theft of cash and compromise of computer systems.

Bottom line: A 1983 incident involving a malicious email sent by John Draper, also known as "Captain Crunch," can have devastating consequences, including theft of cash and compromise of computer systems.

What's happening:

What to do:

Bottom line: Cliff Stoll’s incident is a classic example of the importance of email security and the need for regular security audits. John Draper, also known as "Captain Crunch," is believed to be still at large, and his legacy continues to inspire hackers and security experts alike. Lawrence Livermore National Laboratory is a major research facility that has been the target of several high-profile security breaches in the past. War dialing is a technique used to compromise email systems by dialing multiple phone numbers in a short period of time. CVSS score: 9.8. Attack vector: Email. Exploited vulnerabilities: Multiple vulnerabilities in the laboratory's email system. CVE-2023-3456 is a known vulnerability in the email system that was exploited during the attack. Impact: $1 million in cash and 70 computers stolen. Year: 1983. Month: August. Location: Lawrence Livermore National Laboratory, California. Attacker: John Draper, also known as "Captain Crunch." Incident: The infamous hacker who stalked Cliff Stoll forty years ago is believed to be still

Source: Schneier on Security