Miscreant admits he stole, traded victims' nude vids after guessing their passwords, security answers
(2021/02/11)
- Reference: 1613005212
- News link: https://www.theregister.co.uk/2021/02/11/hacker_suny_pictures/
- Source link:
A college graduate has admitted hacking into the email and online accounts of female students, stealing their nude photos and videos, and trading them with others.
Nicholas Faber, 25, on Tuesday [1]pleaded guilty to one count of computer intrusion causing damage, and one count of aggravated identity theft. He is scheduled to be sentenced June 9, and faces up to 12 years behind bars, prosecution documents filed in a US federal court
[3]
Faber graduated SUNY Plattsburgh, in New York, in 2017. He and accomplice Michael Fish, also a former graduate, worked together for two years afterwards to break into dozens of students' accounts in the university's MyPlattsburgh portal and steal their data. Fish pleaded guilty [4]last year to computer hacking and aggravated identity theft offenses as well as the possession of sexually explicit material of children, and is scheduled to be sentenced on March 19.
The compromised MyPlattsburgh accounts contained full access to the student’s SUNY-PB email, a cloud storage account, college billing and financial aid information, coursework, grades, and other personal information. The two broke in either by guessing passwords or answering a security question correctly, then used the portal's information to try again for external email, cloud, and social media accounts.
[5]
Ex from Hell gets six years for online stalking, revenge pics campaign against two women [6]READ MORE
After finding intimate photos and videos, they downloaded and traded the files with others, with Faber also identifying the students by name, some of whom he admitted to prosecutors that he knew personally. Fish also posted some pictures online, later finding graduation photos of the same students and creating edited versions of them alongside the nude photo, naming the 100 students whose photos he had stolen.
Faber also admitted asking others to break into another 50 or so accounts, providing them with specific names and sometimes email addresses. He tried to break into over 24 accounts himself and was successful with around 10 of them, using a VPN to try and cover his tracks. Investigators tracked Faber and Fish down, however, and uncovered group chats in which the duo discussed breaking into accounts and resetting passwords.
The university said it spent $35,000 checking computer logs, resetting passwords, and notifying students that their accounts had been compromised. Faber has agreed to pay $35,430 in restitution to SUNY-Plattsburgh.
Fish is in deeper hot water. Last month he was also charged with a fresh offense, falsification of documents, after it was revealed that six letters he sent to the judge in his case stressing his good character and attributed to his mother, grandparents, a woman he dated, his priest, and a top aide to Congresswoman Elise Stefanik (R-NY) had all been faked.
[7]
Fish, who was free awaiting sentencing at the time, was arrested and also charged with violating his conditions of release because he had used a computer without seeking permission beforehand. ®
Get our [8]Tech Resources
[1] https://www.justice.gov/opa/pr/man-pleads-guilty-stealing-nude-photos-dozens-victims
[2] https://regmedia.co.uk/2021/02/10/faber.pdf
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YCS57rTGXGrz-0Jd9JWVzQAAAIU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://cbs6albany.com/news/local/man-to-plead-guilty-to-stealing-private-photos-from-female-college-students
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YCS57rTGXGrz-0Jd9JWVzQAAAIU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2019/11/08/six_years_cyberstalking_sentence/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YCS57rTGXGrz-0Jd9JWVzQAAAIU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://whitepapers.theregister.com/
Nicholas Faber, 25, on Tuesday [1]pleaded guilty to one count of computer intrusion causing damage, and one count of aggravated identity theft. He is scheduled to be sentenced June 9, and faces up to 12 years behind bars, prosecution documents filed in a US federal court
[2]PDF
reveal.[3]
Faber graduated SUNY Plattsburgh, in New York, in 2017. He and accomplice Michael Fish, also a former graduate, worked together for two years afterwards to break into dozens of students' accounts in the university's MyPlattsburgh portal and steal their data. Fish pleaded guilty [4]last year to computer hacking and aggravated identity theft offenses as well as the possession of sexually explicit material of children, and is scheduled to be sentenced on March 19.
The compromised MyPlattsburgh accounts contained full access to the student’s SUNY-PB email, a cloud storage account, college billing and financial aid information, coursework, grades, and other personal information. The two broke in either by guessing passwords or answering a security question correctly, then used the portal's information to try again for external email, cloud, and social media accounts.
[5]
Ex from Hell gets six years for online stalking, revenge pics campaign against two women [6]READ MORE
After finding intimate photos and videos, they downloaded and traded the files with others, with Faber also identifying the students by name, some of whom he admitted to prosecutors that he knew personally. Fish also posted some pictures online, later finding graduation photos of the same students and creating edited versions of them alongside the nude photo, naming the 100 students whose photos he had stolen.
Faber also admitted asking others to break into another 50 or so accounts, providing them with specific names and sometimes email addresses. He tried to break into over 24 accounts himself and was successful with around 10 of them, using a VPN to try and cover his tracks. Investigators tracked Faber and Fish down, however, and uncovered group chats in which the duo discussed breaking into accounts and resetting passwords.
The university said it spent $35,000 checking computer logs, resetting passwords, and notifying students that their accounts had been compromised. Faber has agreed to pay $35,430 in restitution to SUNY-Plattsburgh.
Fish is in deeper hot water. Last month he was also charged with a fresh offense, falsification of documents, after it was revealed that six letters he sent to the judge in his case stressing his good character and attributed to his mother, grandparents, a woman he dated, his priest, and a top aide to Congresswoman Elise Stefanik (R-NY) had all been faked.
[7]
Fish, who was free awaiting sentencing at the time, was arrested and also charged with violating his conditions of release because he had used a computer without seeking permission beforehand. ®
Get our [8]Tech Resources
[1] https://www.justice.gov/opa/pr/man-pleads-guilty-stealing-nude-photos-dozens-victims
[2] https://regmedia.co.uk/2021/02/10/faber.pdf
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YCS57rTGXGrz-0Jd9JWVzQAAAIU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://cbs6albany.com/news/local/man-to-plead-guilty-to-stealing-private-photos-from-female-college-students
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YCS57rTGXGrz-0Jd9JWVzQAAAIU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2019/11/08/six_years_cyberstalking_sentence/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YCS57rTGXGrz-0Jd9JWVzQAAAIU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://whitepapers.theregister.com/
Bring to the boil and simmer for 20 years
Falmari
"Fish is in deeper hot water" Looks like that fish is boiled.
Computer++ sentence
Falmari
The computer intrusion offence carries a maximum sentence of 10 years.
Not saying the maximum sentence is too high also I really don’t know much about sentencing in the US. But is that comparable to old fashion burglary and stealing nude photos and films? I maybe wrong but it seems put computer in the mix and up the penalty goes.
He'll get off for the pics but get the chair for the deception.
sreynolds
No male judge would put a grad in prison, knowing full well the stuff that he got up to at that age. Being a devious little prick is a totally different matter.
He faked letters to the judge, using a computer in violation of the terms of his bail? O-kay, he’s an idiot. The judge will throw the book at him. Kiss bye-bye to sunlight, boyo, you ain’t gonna be seeing it for a while.