FC: FBI reportedly recruited "Equalizer" hacker as informant

From: Declan McCullagh (declanat_private)
Date: Wed May 09 2001 - 16:01:44 PDT

  • Next message: Declan McCullagh: "FC: Ohio journalist collective also hit with subpoena for logs"

    ********
    
    From: "Kevin L. Poulsen" <klpat_private>
    To: "Declan McCullagh" <declanat_private>
    Subject: Max Vision: FBI pawn?
    Date: Tue, 8 May 2001 23:01:24 -0400
    
    http://www.securityfocus.com/news/203
    
    Max Vision: FBI pawn?
    
    by Kevin Poulsen, SecurityFocus.com
    May 8, 2001 2:48 PM PT
    
    Federal officials used threats and a false promise of leniency to lure
    computer security researcher and admitted cyber intruder Max Butler into
    becoming an undercover FBI informant, according to a defense motion filed in
    the case Tuesday.
    
    It was only when Butler balked at covertly recording a friend and colleague,
    and instead sought advice from an attorney, that the government threw the
    book at him, the motion charges. "The government as much as promised him he
    would receive consideration," says defense attorney Jennifer Granick. "At
    least until he hired an attorney."
    
    [...]
    
    The agents gave Butler the nickname "Equalizer," and immediately put him to
    work. Phone hackers had infiltrated 3Com's PBX, and were using the company
    phone system for free teleconferencing. Butler's first mission was "to
    familiarize himself with new telephone system intrusion tools and techniques
    and to be able to pose as a 'phone phreak' (telephone hacker) in the
    investigation," the motion reads.
    
    "Mr. Butler, using his computer knowledge, and dropping the names of people
    the intruders knew from Internet Relay Chat (IRC), was able to lull the
    intruders into a sense of security. They then revealed, to Mr. Butler and
    through him to the FBI, the name of the hacking group that had committed the
    intrusion and the handle of the primary intruder," reads the motion. "During
    this monitored conversation, the suspects also discussed several instances
    of credit card fraud occurring over the network."
    
    Butler went on to hold IRC conversations with the hackers, and provide the
    FBI with transcripts.
    
    The agents were evidently pleased enough with Butler's work to give him
    another assignment, and near the end of July they summoned "Equalizer" to a
    meeting in the FBI offices high above San Francisco's Golden Gate Boulevard.
    
    Butler's new mission: Attend the DEFCON hacker convention at the Plaza Hotel
    and Casino in Las Vegas -- the largest annual gathering of security experts,
    hackers and cybercops in the world. "There, he was to collect PGP encryption
    keys from conference attendees and try to match people's real names with
    their hacker identities and with the keys," reads the motion.
    
    The motion doesn't reveal how much information Butler gathered at DEFCON 6.0
    on behalf of the FBI, and in an interview, Granick said Butler doesn't
    recall what he reported back to the Bureau. On Granick's advice, Butler
    refuses interviews about his case.
    
    After DEFCON, the FBI had another assignment for Butler. This time he was to
    wear a transmitting device - a 'wire' - and secretly record friend and
    colleague Matthew Harrigan, then CTO of San Francisco security services firm
    MCR, for which Butler had performed some consulting.
    
    <snip>
    
    
    
    
    -------------------------------------------------------------------------
    POLITECH -- Declan McCullagh's politics and technology mailing list
    You may redistribute this message freely if it remains intact.
    To subscribe, visit http://www.politechbot.com/info/subscribe.html
    This message is archived at http://www.politechbot.com/
    -------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Wed May 09 2001 - 17:25:15 PDT