TLDR InfoSec · MISCELLANEOUS
INSIDER CYBER EXTORTION PLOT AGAINST INDUSTRIAL FIRM LANDS ENGINEER IN PRISON
Summary from the TLDR InfoSec newsletter
Former core infrastructure engineer Daniel Rhyne scheduled tasks on his employer's domain controller to delete 13 admin accounts and reset passwords affecting 301 users, 254 servers, and 3,284 workstations. He demanded 20 bitcoin, about $750,000, and threatened to shut down 40 servers daily. The company did not pay. Internal forensics and FBI tracing tied the activity to Rhyne's home IP address. He received 32 months in prison.