ALL FBI CDHTAEHED In I HEREIN If @58155 naTE 09-28 2813 BI EBBZQ HCEhamfsebfas FEDERAL BUREAU OF INVESTIGATION j iirir t 37 1 t nr I Precedence ROUTINE Date 2 18 1998 To Director FBI Attn Acting Unit Chief From WFO 1 Contact SSA $36 A b7C Approved By Drafted By I Irar CZ File NUmber s 288 HQ 1242560 5Lending Title SOLAR CITAC 00 HQ Synopsis Following is the status of involvement in this investigation Reference EC dated 2 17 98 to Houston Division Details 1 11 8 NAVY oo SAI lis coordinating all investigative activity with Agents of the Naval Criminal Investigative Service NCIS based in both Washington D C and Jacksonville Florida Evidence obtained from subject s University of Northern Florida UNF account has disclosed continuing access to that account from an IBM NET connection A request was submitted today to DOJ b3 for a pen register to requirel kol I bf I Results of the en are b c anticipated to'support a subsequent 2703 order to for I The subject s current whereabouts and employment are known Coordination with the NCIS Agents will continue The installation of the monitoring software at was initiatedl Ibyl I SUNRISE CITAC MATTERS 00 1 i 03 31 95 0 FEDERAL BUREAU OF INVESTIGATION To WMFO From WMFO Re 66 12 01 1995 Optical disks received from Houston and copies will be made ASAP for AF Navy DISA Contact has been made with IBM network management and IBM is trace routing Israeli network leg Should know by tomorrow monitoring ability from within US of overseas leased nets Re mxal Qmmult Analysis performed for three compromised systems 1 Univ California Berkeley 2 Andrews AFB 3 US Naval Academy To date nothing significant has been identified in the most recent JID data collected for the past day or so Observed two suspicious sites netgate saes com and netdex com WFO has not confirmed the nexus on these sites Gospelcom net not contacted due to NCIC checks be revealingl Thegospel com does 57c not answer phone nor do they call back when message left Will continue to try to contact Slip stream net SYSOP did not see anything unusual They have been hacked before and do not consider this out of the norm ReferralfConsult On 02 13 98 Court Order served onI I WFO CART tasked to make copies for Navy AF and DISA Limited data analysis has been conducted due to time constraints I cannot look through these files and is awaiting DOJ advice WFO obtaining from UM copies of their computer policy that the students are informed of when their receive their computer accounts WFO does not believe that the student I should be contacted to give consent due to the nature of the case and the fact that the student is a Referral Consult 288-WF-NEW LI OO 2 b3 b6 b7C OTHER Sealed pursuant to court order A myE-Mym v 21-0 1-9 - 44 run-s trittmv z' I 5' lemIn 03 31 95 FEDERAL BUREAU OF INVESTIGATION To WMFO From WMFO - Re 66 12 01 1995 SAI Iis addressing this matter with the assistance of thel and WFO CART Subject s home was consensually searched for computer and computer media the evening of 2 17 98 Newark Division CART Copy will be provided to ASAP Subject provided detailed interview to both FBI and Agents Gave no indication he was part of ongoing investigation A review of his system is under waY- i136 b7c b7E ReferralXConsult - L v 5 2191u-msts- mm' nut 31 my mm