[41781] in Hotline Meeting
Athena Account Hacked
daemon@ATHENA.MIT.EDU (Stead Kiger)
Sat Feb 7 12:25:48 1998
Date: Sat, 07 Feb 1998 12:30:38 -0700
To: stopit@MIT.EDU, hotline@MIT.EDU
From: Stead Kiger <wskiger@MIT.EDU>
Cc: Stead Kiger <wskiger@MIT.EDU>
Dear Sir or Madam,
I believe that my Athena account was accessed by an unauthorized user early
this morning. When I logged into the express dialup server today, I noticed
that the server reported that I had last logged in from java.harvard.edu. I
don't have access to this or any other computers on the Harvard main campus
and was asleep at the time that the unauthorized access occurred. The
attacker may have sent email from my account - I noticed that the time
stamps on the drafts and inbox directories of my mail folder show 1:25 AM,
several hours after I logged out last night. Although I haven't checked
carefully for any missing files, nothing appears to have been harmed at
first glance.
I have attached below the transcript of my most recent athena login that
shows the remote access. I have (obviously) changed my kerberos password to
hopefully prevent further attacks.
Thank you for your attention.
Stead Kiger
UNIX(r) System V Release 4.0 (mass-toolpike) (pts/18)
Warning: this session is NOT encrypted!
login: wskiger
Password for wskiger:
Last login: Sat Feb 7 03:00:46 from java.harvard.edu
xhost: unable to open display ""
mass-toolpike
Running standard startup activities ...
zwgc: Unable to open X display -- disabling X driver.
zwgc: To receive Zephyrgrams, (type `/usr/athena/bin/zwgc -ttymode').
~>
~>lastlog wskiger
wskiger: -examining AFS volume... processing...
Last updated on: Sat Feb 7 03:02:39 1998
~>
================================================================================
Stead Kiger
Graduate Research Assistant
MIT Nuclear Engineering Department
MIT Nuclear Reactor Laboratory Beth Israel Deaconess Medical Center
138 Albany St. West Campus
Bldg. NW13-252 Dept. of Radiology
Cambridge, MA 02139 1 Deaconess Rd.
Boston, MA 02115
Tel. (617) 253-5720 Tel (617) 667-0178
FAX (617) 253-7300 FAX (617) 975-5233
Email: wskiger@mit.edu
================================================================================
