Wikipedia

Kevin Mitnick

(Redirected from Mitnick Security Consulting)
This is the latest accepted revision, reviewed on 3 November 2024.

Kevin David Mitnick (August 6, 1963 – July 16, 2023) was an American computer security consultant, author, and convicted hacker. He is best known for his high-profile 1995 arrest and five years in prison for various computer and communications-related crimes.[5] Mitnick's pursuit, arrest, trial and sentence were all controversial, as were the associated media coverage, books and films.[6][7] After his release from prison, he ran his own security firm, Mitnick Security Consulting, LLC, and was also involved with other computer security businesses.

Kevin Mitnick
Mitnick in 2010
Born
Kevin David Mitnick

(1963-08-06)August 6, 1963
Los Angeles, California, U.S.
DiedJuly 16, 2023(2023-07-16) (aged 59)
Pittsburgh, Pennsylvania, U.S.
Other namesThe Condor, The Darkside Hacker
Occupations
Organizations
  • Mitnick Security Consulting
  • Chief Hacking Officer at KnowBe4, Inc
Board member ofKnowBe4
Criminal charge(s)1995: Wire fraud (14 counts), possession of unauthorized access devices (8 counts), interception of wire or electronic communications, unauthorized access to a federal computer, and causing damage to a computer[1][2]
Criminal penalty
  • 1998: One year prison[3]
  • 1999: 46 months prison plus 3 years probation
Spouse
Kimberley Mitnick
​
(m. 2022)​
Call signN6NHG[4]
Websitewww.mitnicksecurity.com

Early life and education

edit

Mitnick was born on August 6, 1963,[8] in Van Nuys, Los Angeles, California.[9] His father was Alan Mitnick, his mother was Shelly Jaffe, and his maternal grandmother was Reba Vartanian.[10][11] Mitnick was Jewish,[12][13] and grew up in Los Angeles, California.[8] At age 12, Mitnick convinced a bus driver to tell him where he could buy his own ticket punch for "a school project", and was then able to ride any bus in the greater Los Angeles area using unused transfer slips he found in a dumpster next to the bus company garage.[14]

Mitnick attended James Monroe High School in North Hills,[15][16] during which time he became a licensed amateur radio operator with callsign WA6VPS[17] (his license was restored after imprisonment with callsign N6NHG[18]). He chose the nickname "Condor" after watching the movie Three Days of the Condor.[19] He was later enrolled at Los Angeles Pierce College and USC.[15]

Career

edit

For a time, Mitnick worked as a receptionist for Stephen S. Wise Temple in Los Angeles.[15]

Computer hacking

edit

Mitnick gained unauthorized access to a computer network in 1979, at 16, when a friend gave him the telephone number for the Ark, the computer system that Digital Equipment Corporation (DEC) used for developing its RSTS/E operating system software.[20] He broke into DEC's computer network and copied the company's software, a crime for which he was charged and convicted in 1988. He was sentenced to 12 months in prison followed by three years of supervised release. Near the end of his supervised release, Mitnick hacked into Pacific Bell voicemail computers. After a warrant was issued for his arrest, Mitnick fled, becoming a fugitive for two-and-a-half years.[21]

According to the United States Department of Justice, Mitnick gained unauthorized access to dozens of computer networks while he was a fugitive. He used cloned cellular phones to hide his location and, among other things, copied valuable proprietary software from some of the country's largest cellular telephone and computer companies.[22][23] Mitnick also intercepted and stole computer passwords, altered computer networks, and broke into and read private emails.[23][24]

Arrest, conviction, and incarceration

edit
 
Supporters from 2600 Magazine distributed "Free Kevin" bumper stickers.[25]

After a well-publicized pursuit, the Federal Bureau of Investigation arrested Mitnick on February 15, 1995 at his apartment in Raleigh, North Carolina, on federal offenses related to a two-and-a-half-year period of computer hacking that included computer and wire fraud.[26][27] He was found with cloned cell phones, more than 100 cloned cellular phone codes, and multiple pieces of false identification.[28]

In December 1997, the Yahoo! Web site was hacked, displaying a message calling for Mitnick's release. According to the message, all recent visitors of Yahoo!'s site had been infected with a computer worm that would wreak havoc on Christmas Day unless Mitnick was released. Yahoo! dismissed the claims as a hoax and said that the worm was nonexistent.[29][30]

In 1998, Mitnick was charged in the United States District Court for the Central District of California with 14 counts of wire fraud, eight counts of possession of unauthorized access devices, interception of wire or electronic communications, unauthorized access to a federal computer, and causing damage to a computer.[31] As part of a plea bargain, Mitnick pleaded guilty in 1999 to four counts of wire fraud, two counts of computer fraud, and one count of illegally intercepting a wire communication. U.S. district judge Mariana Pfaelzer sentenced Mitnick to 46 months in federal prison plus 22 months for violating the terms of his 1989 supervised release sentence for computer fraud. He admitted to violating the terms of supervised release by hacking into Pacific Bell voicemail and other systems and to associating with known computer hackers, in this case co-defendant Lewis De Payne.[1][32][33] He was diagnosed with Asperger syndrome, but it was not used as evidence because he pleaded guilty before going to trial.[34]

Mitnick served five years in prison—four-and-a-half years' pre-trial and eight months in solitary confinement, because, according to Mitnick, law enforcement officials convinced a judge that he had the ability to "start a nuclear war by whistling into a pay phone",[35] implying that law enforcement told the judge that he could somehow dial into the NORAD modem via a payphone from prison and communicate with the modem by whistling to launch nuclear missiles.[36] In addition, a number of media outlets reported on the unavailability of kosher meals at the prison where he was incarcerated.[37]

Mitnick was released from prison on January 21, 2000. During his supervised release period, which ended on January 21, 2003, he was initially forbidden to use any communications technology other than a landline telephone.[38] Under the plea deal, Mitnick was also prohibited from profiting from films or books based on his criminal activity for seven years, under a variation of the Son of Sam law.[39]

In December 2001, a Federal Communications Commission (FCC) judge ruled that Mitnick was sufficiently rehabilitated to possess a federally issued amateur radio license.[40]

Controversy

edit

Mitnick's criminal activities, arrest, and trial, along with the associated journalism, were all controversial.[6] Though Mitnick was convicted of copying software unlawfully,[41] his supporters argue that his punishment was excessive and that many of the charges against him were fraudulent[42] and not based on actual losses.[43]

John Markoff and Tsutomu Shimomura, who had both been part of the pursuit of Mitnick, wrote the book Takedown about Mitnick's capture.[44]

The case against Mitnick tested the new laws that had been enacted for dealing with computer crime and it raised public awareness of security involving networked computers. The controversy remains and the Mitnick story is often cited today as an example of the influence of news media on law enforcement personnel.[45]

Consulting

edit

After his release in 2000, Mitnick became a paid security consultant, public speaker, and author. He carried out security consulting for, performed penetration testing services, and taught social engineering classes to companies and government agencies. He ran Mitnick Security Consulting LLC, a computer security consultancy and was part owner of KnowBe4, provider of an integrated platform for security awareness training and simulated phishing testing,[46][47] as well as an active advisory board member at Zimperium,[48] a firm that develops a mobile intrusion prevention system.[49] He resided in Las Vegas, Nevada.[50]

Death

edit

Kevin Mitnick died from pancreatic cancer on July 16, 2023, at the age of 59 at a Pittsburgh, Pennsylvania hospital.[10] At the time of his death, he was married and his wife was pregnant with their first child.[8][10][51][52]

Media

edit
 
Hacker Adrian Lamo (arrested 2003), Kevin Mitnick, and reformed hacker Kevin Poulsen (released from prison 1996) (photo c. 2001)

In 2000, Skeet Ulrich and Russell Wong portrayed Mitnick and Tsutomu Shimomura, respectively, in the movie Track Down (known as Takedown outside the US), which was based on the book Takedown by John Markoff and Shimomura. The DVD was released in September 2004.[53]

Mitnick also appeared in Werner Herzog's documentary Lo and Behold, Reveries of the Connected World (2016).[54]

Books

edit

Written by Mitnick

edit

Mitnick is the co-author, with William L. Simon and Robert Vamosi, of four books, three on computer security and an autobiography:

  • (2002) The Art of Deception: Controlling the Human Element of Security[55]
  • (2005) The Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intruders & Deceivers[56]
  • (2011) Ghost in the Wires: My Adventures as the World's Most Wanted Hacker[15]
  • (2017) The Art of Invisibility[57]

Authorized by Mitnick

edit

See also

edit

References

edit
  1. ^ a b Gengler, Barbara (1999). "Super-hacker Kevin Mitnick takes a plea". Computer Fraud & Security. 1999 (5): 6. doi:10.1016/S1361-3723(99)90141-0.
  2. ^ "Kevin Mitnick's Federal Indictment". sourcedns.com. Archived from the original on May 18, 2014. Retrieved September 13, 2014.
  3. ^ "#089 Fugitive Computer Hacker Arrested in North Carolina". justice.gov. Archived from the original on June 13, 2013.
  4. ^ "HEARING DESIGNATION ORDER (FCC 01-359)" (PDF). Federal Communications Commission. December 21, 2001. Archived (PDF) from the original on August 3, 2015. Retrieved December 3, 2015.
  5. ^ "Kevin Mitnick sentenced to nearly four years in prison; computer hacker ordered to pay restitution to victim companies whose systems were compromised". justice.gov (Press release). United States Attorney's Office, Central District of California. August 9, 1999. Archived from the original on June 13, 2013.
  6. ^ a b Kroll, Jason (January 21, 2000). "Free Kevin, Kevin Freed". Linux Journal. Archived from the original on December 7, 2017.
  7. ^ "Ex-hacker reveals tricks of the trade". AsiaOne Digital. Archived from the original on July 23, 2015.
  8. ^ a b c Cho, Kelly Kasulis (July 20, 2023). "Kevin Mitnick, hacker and fugitive turned security consultant, dies at 59". The Washington Post. Archived from the original on July 20, 2023. Retrieved July 20, 2023.
  9. ^ Hackers League (May 31, 2019). "Kevin Mitnick". Medium. Archived from the original on July 20, 2023. Retrieved July 20, 2023.
  10. ^ a b c Albeck-Ripka, Livia; Mayorquin, Orlando (July 20, 2023). "Kevin Mitnick, Hacker Who Once Eluded Authorities, Is Dead at 59". The New York Times. Archived from the original on July 21, 2023. Retrieved July 21, 2023.
  11. ^ "Freedom Downtime - The Story of Kevin Mitnick (2001)". CosmoLearning. August 20, 2009. Archived from the original on September 6, 2023. Retrieved September 6, 2023.
  12. ^ Percival, Richard (July 21, 2023). "Famed US hacker Kevin Mitnick, once dubbed 'America's most wanted', dies aged 59". The Jewish Chronicle. Retrieved July 14, 2024. The Jewish cybercriminal...
  13. ^ Bresky, Ben (July 24, 2012). ""Hacker" Kevin Mitnick's Dramatic Turnaround". Arutz Sheva. Retrieved July 14, 2024. In the book, released in 2011, Mitnick briefly describes his bar mitzvah and secular Jewish upbringing in California.
  14. ^ Greene, Thomas C. (January 13, 2003). "Chapter One: Kevin Mitnick's story". The Register. Archived from the original on September 12, 2012.
  15. ^ a b c d Mitnick, Kevin; Simon, William L. (2011). Ghost in the Wires: My Adventures as the World's Most Wanted Hacker. Little, Brown and Company. ISBN 978-0-316-03770-9. Archived from the original on November 4, 2011. Retrieved August 27, 2019.
  16. ^ "Hacker Arraigned in Computer Fraud Case". Los Angeles Times. October 1, 1996. Archived from the original on July 20, 2023. Retrieved July 20, 2023. ... as a student at James Monroe High School in North Hills, he broke into the Los Angeles Unified School District's computers.
  17. ^ Mills, Elinor (June 22, 2009). "Q&A: Kevin Mitnick, from ham operator to fugitive to consultant". cnet.com. CNET. Archived from the original on December 28, 2017. Retrieved December 18, 2017.
  18. ^ "Mitnick Granted Ham License". Wired. Associated Press. December 27, 2002. Archived from the original on July 20, 2023. Retrieved August 3, 2023.
  19. ^ Poole, Hilary W.; Lambert, Laura; Woodford, Chris; Moschovitis, Christos J. P. (2005). The Internet : a historical encyclopedia. Santa Barbara, California: ABC-Clio. ISBN 1-85109-664-7. OCLC 62211803. Archived from the original on July 20, 2023. Retrieved June 21, 2022.
  20. ^ "The Missing Chapter from The Art of Deception by Kevin Mitnick". thememoryhole.org. Archived from the original on March 17, 2009. Retrieved February 16, 2020.
  21. ^ Johnson, John; Ostrow, Ronald J.; Meyer, Josh (February 16, 1995). "Fugitive North Hills Hacker Arrested in N. Carolina : Crime: Kevin Mitnick eluded authorities for two years. He is alleged to have cost victims millions". Los Angeles Times. Archived from the original on June 27, 2023. Retrieved July 20, 2023.
  22. ^ Tamaki, Julie (September 27, 1996). "Famed Hacker Is Indicted by U.S. Grand Jury". Los Angeles Times. Archived from the original on July 22, 2023. Retrieved July 22, 2023.
  23. ^ a b Rose, E. Brian (December 1, 2015). Millionaire Within: Untold Stories from the Internet Underworld. Morgan James Publishing. p. 22. ISBN 978-1-63047-346-4. Archived from the original on July 22, 2023. Retrieved July 22, 2023.
  24. ^ Byrne, Michael (September 27, 2014). "Kevin Mitnick Offers a Peek Inside the Cryptic Zero-Day Marketplace". Vice. Archived from the original on July 22, 2023. Retrieved July 22, 2023.
  25. ^ "Freedom Downtime - The Story of Kevin Mitnick". archive.org. October 23, 2016. Retrieved May 14, 2019.
  26. ^ "Fugitive computer hacker arrested in North Carolina". usdoj.gov (Press release). United States Department of Justice. February 15, 1995. Archived from the original on June 29, 2012.
  27. ^ The Colbert Report[not specific enough to verify]
  28. ^ Painter, Christopher M. E. (March 2001). "Supervised Release and Probation Restrictions in Hacker Cases" (PDF). United States Attorneys' USA Bulletin. 49 (2). Executive Office for United States Attorneys. Archived (PDF) from the original on July 21, 2015. Retrieved April 19, 2015.
  29. ^ "Yahoo Hack: Heck of a Hoax". Wired. December 9, 1997. Archived from the original on June 28, 2024. Retrieved February 6, 2019.
  30. ^ Original text posted to Yahoo's website at archive.org
  31. ^ Hesseldahl, Arik (September 4, 1998). "Hacker Can't Get Access". Wired. Archived from the original on July 20, 2023. Retrieved July 20, 2023 – via wired.com.
  32. ^ "Computer Hacker Kevin Mitnick Sentenced to Prison". fas.org. Federation of American Scientists. June 27, 1997. Archived from the original on April 15, 2019. Retrieved February 16, 2020.
  33. ^ "Kevin Mitnick sentenced to nearly four years in prison; computer hacker ordered to pay restitution to victim companies whose systems were compromised". usdoj.gov. United States Attorney's Office, Central District of California, U.S. Department of Justice. August 9, 1999. Archived from the original on September 26, 2009.
  34. ^ Hess, Ken (September 12, 2011). "Ghost in the Wires: The Kevin Mitnick Interview". ZDNET. Archived from the original on November 5, 2022. Retrieved November 5, 2022.
  35. ^ Mills, Elinor (July 20, 2008). "Social Engineering 101: Mitnick and other hackers show how it's done". CNET. Archived from the original on July 13, 2012.
  36. ^ "Famed hacker to Snowden: Watch out". CNN. Archived from the original on March 30, 2022. Retrieved May 8, 2020.
  37. ^ "Life Not Kosher for Mitnick". Wired. August 18, 1999. Archived from the original on September 18, 2012.
  38. ^ Bowker, Art. "Hackers, Sex Offenders, and All the Rest". corrections.com. Archived from the original on September 14, 2018. Retrieved September 14, 2018.
  39. ^ "World's most famous hacker Kevin Mitnick to speak at ULM Business Symposium". ulm.edu. Archived from the original on December 8, 2022. Retrieved July 20, 2023.
  40. ^ "F.C.C. Lets Convicted Hacker Go Back on Net". The New York Times. December 27, 2002. Archived from the original on March 6, 2016. Retrieved February 19, 2017.
  41. ^ Miller, Greg (March 27, 1999). "Judge Accepts Mitnick's Guilty Plea on 7 Counts". Los Angeles Times. Archived from the original on April 15, 2019. Retrieved February 16, 2020.
  42. ^ Randolph, Donald C. "About Kevin's Case". Free Kevin Mitnick. Archived from the original on April 24, 2006.
  43. ^ "Defense consolidated motion for sanctions and for reconsideration of motion for discovery and application for expert fees based upon new facts". Free Kevin Mitnick. June 7, 1999. Archived from the original on December 22, 2005.
  44. ^ Shimomura, Tsutomo; Markoff, John (1996). Takedown: The Pursuit and Capture of Kevin Mitnick, America's Most Wanted Computer Outlaw - By the Man Who Did It. Hyperion. ISBN 978-0786862108.
  45. ^ Christensen, John (March 18, 1999). "The trials of Kevin Mitnick". Archived from the original on December 8, 2018. Retrieved December 11, 2018.
  46. ^ Noory, George (January 7, 2019). "Cybercrime & Security". Coast to Coast AM. Archived from the original on January 8, 2019. Retrieved January 8, 2019.
  47. ^ KnowBe4. "Kevin Mitnick Partners With KnowBe4". prnewswire.com (Press release). Archived from the original on May 10, 2021. Retrieved April 18, 2020.{{cite press release}}: CS1 maint: numeric names: authors list (link)
  48. ^ Darlene Storm (July 19, 2012). "Interview: World's most famous hacker, Kevin Mitnick, on mobile security & Zimperium". Computerworld. Archived from the original on December 26, 2013.
  49. ^ Alex Williams (December 20, 2013). "Zimperium Raises $8M For Mobile Security That Turns The Tables On Attackers". TechCrunch. AOL. Archived from the original on August 13, 2017. Retrieved June 25, 2017.
  50. ^ "Kevin Mitnick's Security Advice". Wired. November 15, 2006. Archived from the original on July 20, 2020. Retrieved July 20, 2020.
  51. ^ "Kevin David Mitnick". Dignity Memorial. Archived from the original on July 20, 2023. Retrieved July 20, 2023.
  52. ^ "Famed Hacker Kevin Mitnick Dead at 59". SecurityWeek News. July 20, 2023. Archived from the original on July 20, 2023. Retrieved July 20, 2023.
  53. ^ "Takedown". tcm.com. Archived from the original on March 7, 2023. Retrieved July 20, 2023.
  54. ^ Security, Mitnick. "Lo and Behold". mitnicksecurity.com. Archived from the original on July 20, 2023. Retrieved July 20, 2023.
  55. ^ Mitnick, Kevin; Simon, William L. (October 2003). The Art of Deception: Controlling the Human Element of Security. Wiley Books. ISBN 978-0-7645-4280-0. Archived from the original on April 25, 2011. Retrieved January 14, 2009.
  56. ^ Mitnick, Kevin; Simon, William L. (December 27, 2005). The Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intruders & Deceivers. Wiley Books. ISBN 978-0-7645-6959-3. Archived from the original on May 14, 2011. Retrieved January 14, 2009.
  57. ^ Mitnick, Kevin; Vamosi, Robert (February 2017). The Art of Invisibility. Little, Brown and Company. ISBN 978-0-3163-8049-2. Archived from the original on July 2, 2019. Retrieved July 2, 2019.
  58. ^ Cohn, Scott (July 26, 2016). "Greed Report: These White-Collar Manhunts Will Make Your Head Spin". CNBC. Archived from the original on February 24, 2023. Retrieved July 20, 2023.

Bibliography

edit

Movies

edit

Books

edit

Articles

edit
edit
 
Wikimedia Commons has media related to Kevin Mitnick.
Retrieved from "https://en.wikipedia.org/w/index.php?title=Kevin_Mitnick&oldid=1255174519"