A Michigan man will spend the next seven years and three months behind bars as punishment for attempting to hack a county jail’s computer system and altering prison records to get his friend released early.
In addition to 87 months in jail, Konrads Voits—a 27-year-old from Ypsilanti, Michigan—was also hit with a fine of $235,488 that he is ordered to pay to Washtenaw County for the cost accrued in investigating the intrusion, Bleeping Computer reported.
Voits, who pleaded guilty to one count of damaging a protected computer last December, spent the better part of the spring of 2017 crafting and executing a social engineering scheme that allowed him to gain access to the Washtenaw County Jail computer system.
The Michigan resident began his campaign by crafting a website that looked identical to the county’s actual site. While the county’s real website has the domain name ewashtenaw.org, Voits’ mockup had the domain ewashtenavv.org, which looks indistinguishable at a glance. With the fake county website up and running, Voits began sending out emails to employees of the county jail in an attempt to lure them to the site and surrender their login credentials so he could hijack their account and access the jail’s computer system.
Unfortunately for the hacker, that plan failed and no one from the jail took the bait. After abandoning the phishing attack, Voits then began calling the jail to talk to employees. He posed as a member of the county’s IT staff over the phone and would pretend that he was trying to help install an update for X.Jail, the program used to manage jail records. Voits would direct the unwitting employee to type in a URL, which redirected to a site that hosted malware.
After a couple attempts, Voits succeeded in tricking an employee into installing the malicious software, which he used to gain access to just about everything stored on the county’s computers. He had the ability view to search warrant affidavits, internal discipline records from the jail, and the personal information of county employees. Voits stole the usernames, passwords, email addresses, and other information from more than 1,600 government workers.
https://gizmodo.com/man-gets-jail-time-for-trying-to-hack-a-prison-and-rele-1825636325