GhostExodus and the
control systems
incident at Carrell
Clinic
Wesley McGrew
wesley@mcgrewsecurity.com

Incursio Ex Subter
forums
Fun post on my site,
ensuing drama

http://i246.photobucket.com/albums/gg102/etaradio/3-2.png

Friends
Defacements
Social Networking
Pastebins
Alias
Video
Handle
Email Domain
Screen Name File Hosting
Forum Accounts

• Keep good, thorough notes
• Unique handles are your friend
• Branch out with your searches, breadth-
first
• Be careful with referrals (esp. search terms)
• Separate searches on forums that disallow
spidering
• Google Alerts
• SAVE EVERYTHING LOCALLY

http://www.youtube.com/watch?v=WN3xUrFUoNw

http://www.youtube.com/watch?v=qWevm9tDKVc

• Called FBI and Texas DA’s office on Monday
• FBI agent from Jackson drove up that
afternoon to get the evidence
• Briefed agents on findings and notified
them of new developments over the next
few days
• Arrested as he arrived to work that Friday
evening

http://cbs11tv.com/local/Hacking.Clinic.Computers.2.1066486.html

Questions