Dennis Moran (computer criminal)

Dennis Moran
Born	1982 (age 28–29) Massachusetts
Alias(es)	Coolio
Conviction(s)	7 counts of Class A felony unauthorized access of a computer[1]
Penalty	12 months in jail with 3 months suspended as well as ordered to pay $15,000 USD in restitution.[2]

Dennis M. Moran (born 1982 in Massachusetts, United States), also known as Coolio, is an American computer hacker from Wolfeboro, New Hampshire, who was accused in February 2000 of a series of denial-of-service attacks that shut down some of the most popular websites on the Internet. He was later arrested and pled guilty to defacing the websites of DARE and RSA Security, as well as unauthorized access of US Army and Air Force computer systems at four military bases.

The attacks

On February 7, 2000 a smurf attack generating over 1 gigabit per second of ICMP traffic was launched against Yahoo!'s routers, causing their websites to be inaccessible to the world for hours. In a message sent to the CERT, Yahoo! network engineer Jan B. Koum stated that the attackers were "above your average script kiddie" and "knew about our topology and planned this large scale attack in advance."^[3]

Shortly thereafter, Stanford University's computer security administrator David Brumley began monitoring Internet Relay Chat (IRC) traffic on irc.stanford.edu, which was then a public server on the EFnet IRC network. He discovered discussions about the attack on Yahoo! taking place which led him to believe members of an IRC channel had information about the source of the attacks, and he contacted the FBI to give them transcripts of the IRC chat.^[4]

Over the following week a series of equally crippling denial-of-service attacks affected many other major internet sites including eBay, Amazon.com, E*TRADE, and Buy.com. A security consultant named Joel de la Garza also began investigating the IRC channel and while he was in the channel, RSA Security's website was redirected to a hacked web server in Colombia with a defaced copy of their home page. The defacement included a reference to David Brumley's nickname on IRC, as he had joined the channel by then in an attempt to gather more information from Moran. De la Garza witnessed this live show of criminal activity and later reported about it to the media.^[5] On March 5, 2000 the FBI raided Moran's house and seized his computers. Despite the incriminating chat transcripts and possession of the contents of his computers, Moran was not charged with any crime by federal prosecutors.^{[citation needed]}

After having so much attention drawn to him, and de la Garza's account of Moran being responsible for defacing RSA's website, the FBI investigated Moran's connections to other website defacements. Eventually they passed this evidence on to the New Hampshire Attorney General's office and Moran was charged as an adult with 7 counts of Class A felony unauthorized access of a computer.^[1] One year later, on March 9, 2001, he pled guilty to 4 counts of misdemeanor unauthorized access of a computer and was sentenced to 12 months in jail with 3 months suspended as well as ordered to pay $15,000 USD in restitution.^[2] His arrest took place in Wolfeboro, New Hampshire.

See also

• List of convicted computer criminals

References

1. ^ ^{a b} Bob Sullivan (March 9, 2000). "'Coolio' arrested for defacing site". News.com. http://news.zdnet.com/2100-9595_22-96070.html. Retrieved 2008-08-23. 
2. ^ ^{a b} "Hacker sentenced, must program jail computers". usatoday. 2002-02-06 - Updated 05:22 PM ET. http://www.usatoday.com/tech/news/2001-03-09-coolio.htm. Retrieved 2008-08-23. 
3. ^ Brian McWilliams (February 11, 2000). "Yahoo!: Attackers Knew Our Weaknesses". internetnews. http://www.internetnews.com/bus-news/article.php/3_303191. Retrieved 2008-09-01. "New information released by Yahoo! suggests some of the denial of service attacks on Web sites over the past week may have come from sophisticated attackers with knowledge of each site's network." 
4. ^ "FBI investigation swamped with tips, continue to seek Midwest 'Coolio'". CNN News. February 16, 2000 Web posted at: 12:34 p.m. EST (1734 GMT). http://archives.cnn.com/2000/TECH/computing/02/16/dos.attacks.coolio/index.html. Retrieved 2008-09-01. 
5. ^ "Tracking Web site attacker requires persistence, technology and luck". CNN News. 2000-02-25. http://archives.cnn.com/2000/TECH/computing/02/25/dos.hunt/index.html. Retrieved 2008-09-01. 

External links

• Dennis Moran's website
• Statement for the Record of Louis J. Freeh, Director on Cybercrime
• Mirror of Defaced D.A.R.E. Web Site taken November 14, 1999
• Mirrors of the four defacements

Persondata
Name	Moran, Dennis
Alternative names	Coolio
Short description
Date of birth	1982
Place of birth	Massachusetts
Date of death
Place of death