Kevin Mitnick

American hacker (1963–2023) From Wikipedia, the free encyclopedia

Kevin David Mitnick (August 6, 1963 – July 16, 2023) was an American computer security consultant, author, and convicted hacker. In 1995, he was arrested for various computer and communications-related crimes, and spent five years in prison after being convicted of fraud and illegally intercepting communications.[6] Mitnick's pursuit, arrest, trial and sentence were all controversial, as were the associated media coverage, books, and films,[7][8] with his supporters arguing that his punishment was excessive and that many of the charges against him were fraudulent,[9] and not based on actual losses.[10] After his release from prison, he ran his own security firm, Mitnick Security Consulting, LLC, and was also involved with other computer security businesses.

Born
Kevin David Mitnick

(1963-08-06)August 6, 1963
Los Angeles, California, U.S.
DiedJuly 16, 2023(2023-07-16) (aged 59)
Pittsburgh, Pennsylvania, U.S.
OthernamesThe Condor, The Darkside Hacker
Occupations
Quick facts Born, Died ...
Kevin Mitnick
Mitnick in 2010
Born
Kevin David Mitnick

(1963-08-06)August 6, 1963
Los Angeles, California, U.S.
DiedJuly 16, 2023(2023-07-16) (aged 59)
Pittsburgh, Pennsylvania, U.S.
Other namesThe Condor, The Darkside Hacker
Occupations
Organizations
  • Mitnick Security Consulting
  • Chief Hacking Officer at KnowBe4, Inc
Board member of
KnowBe4
Criminal charges
1995: Wire fraud (14 counts), possession of unauthorized access devices (8 counts), interception of wire or electronic communications, unauthorized access to a federal computer, and causing damage to a computer[1][2]
Criminal penalty
  • 1988: One year prison[3]
  • 1999: 46 months prison plus 3 years probation
Spouse
Bonnie Vitello
​
(m. 1987⁠–⁠1989)​
[4]
Kimberley Mitnick
​
(m. 2022)​
Call signN6NHG[5]
Websitewww.mitnicksecurity.com
Close

Early life and education

Mitnick was born on August 6, 1963,[11] in Van Nuys, Los Angeles, California. His father was Alan Mitnick, his mother was Shelly Jaffe, and his maternal grandmother was Reba Vartanian.[12][13] Mitnick was Jewish,[14][15] and grew up in Los Angeles, California.[11] At age 12, Mitnick convinced a bus driver to tell him where he could buy his own ticket punch for "a school project", and was then able to ride any bus in the greater Los Angeles area using unused transfer slips he found in a dumpster next to the bus company garage.[16]

Mitnick attended James Monroe High School in North Hills,[17][18] during which time he became a licensed amateur radio operator with callsign WA6VPS[19][20] (his license was restored after imprisonment with callsign N6NHG[21]). He chose the nickname "Condor" after watching the movie Three Days of the Condor.[22] He was later enrolled at Los Angeles Pierce College and USC.[17]

Career

For a time, Mitnick worked as a receptionist for Stephen S. Wise Temple in Los Angeles.[17]

Computer hacking

Mitnick gained unauthorized access to a computer network in 1979, at 16, when a friend gave him the telephone number for the Ark, the computer system that Digital Equipment Corporation (DEC) used for developing its RSTS/E operating system software.[23] He broke into DEC's computer network and copied the company's software, a crime for which he was charged and convicted in 1988. He was sentenced to 12 months in prison followed by three years of supervised release. Near the end of his supervised release, Mitnick hacked into Pacific Bell voicemail computers. After a warrant was issued for his arrest, Mitnick fled, becoming a fugitive for two-and-a-half years.[24]

According to the United States Department of Justice, Mitnick gained unauthorized access to dozens of computer networks while he was a fugitive. He used cloned cellular phones to hide his location and, among other things, copied valuable proprietary software from some of the country's largest cellular telephone and computer companies.[25][26] Mitnick also intercepted and stole computer passwords, altered computer networks, and broke into and read private emails.[26][27]

Arrest, conviction, and incarceration

Black sans serif text "FREE KEVIN" on a yellow background
Supporters from 2600 Magazine distributed "Free Kevin" bumper stickers.[28]

After a well-publicized pursuit, the Federal Bureau of Investigation arrested Mitnick on February 15, 1995, at his apartment in Raleigh, North Carolina on federal offenses related to a two-and-a-half-year period of computer hacking that included computer and wire fraud.[3][29][30] He was found with cloned cell phones, more than 100 cloned cellular phone codes, and multiple pieces of false identification.[31]

In 1998, Mitnick was charged in the United States District Court for the Central District of California with 14 counts of wire fraud, eight counts of possession of unauthorized access devices, interception of wire or electronic communications, unauthorized access to a federal computer, and causing damage to a computer.[32] As part of a plea bargain, Mitnick pleaded guilty in 1999 to four counts of wire fraud, two counts of computer fraud, and one count of illegally intercepting a wire communication. U.S. district judge Mariana Pfaelzer sentenced Mitnick to 46 months in federal prison plus 22 months for violating the terms of his 1989 supervised release sentence for computer fraud. He admitted to violating the terms of supervised release by hacking into Pacific Bell voicemail and other systems and to associating with known computer hackers, in this case co-defendant Lewis DePayne.[1][33][6] He was diagnosed with Asperger syndrome, but it was not used as evidence because he pleaded guilty before going to trial.[34]

Mitnick served five years in prison—four-and-a-half years' pre-trial and eight months in solitary confinement, because, according to Mitnick, law enforcement officials convinced a judge that he had the ability to "start a nuclear war by whistling into a pay phone",[35] implying that law enforcement told the judge that he could somehow dial into the NORAD modem via a payphone from prison and communicate with the modem by whistling to launch nuclear missiles.[36] In addition, a number of media outlets reported on the unavailability of kosher meals at the prison where he was incarcerated.[37]

Mitnick was released from prison on January 21, 2000. During his supervised release period, which ended on January 21, 2003, he was initially forbidden to use any communications technology other than a landline telephone.[38] Under the plea deal, Mitnick was also prohibited from profiting from films or books based on his criminal activity for seven years, under a variation of the Son of Sam law.[39]

In December 2001, a Federal Communications Commission (FCC) judge ruled that Mitnick was sufficiently rehabilitated to possess a federally issued amateur radio license.[40]

Controversy

Mitnick's criminal activities, arrest, and trial, along with the associated journalism, were all controversial.[7] Though Mitnick was convicted of copying software unlawfully,[41] his supporters argue that his punishment was excessive and that many of the charges against him were fraudulent[9] and not based on actual losses.[10]

John Markoff and Tsutomu Shimomura, who had both been part of the pursuit of Mitnick, wrote the book Takedown about Mitnick's capture.[42]

The case against Mitnick tested the new laws that had been enacted for dealing with computer crime and it raised public awareness of security involving networked computers. The controversy remains and the Mitnick story is often cited today as an example of the influence of news media on law enforcement personnel.[43]

Consulting

After his release in 2000, Mitnick became a security consultant, public speaker, and author.[44][45]

In 2002, Mitnick co-founded Defensive Thinking Inc with Alex Kasperavičius.[46] Together they developed the Certified Social Engineering Prevention Specialist (CSEPS) program, a multi-module corporate security-awareness training course and professional certification focused on defending against social engineering attacks. The curriculum covered topics such as pretexting, elicitation, psychological manipulation, dumpster diving, and organizational vulnerabilities. It was offered as a two-day boot camp costing approximately US$1,500 per attendee and included clients such as branches of the United States Air Force and United States Marine Corps.[46][44]

Mitnick carried out security consulting, penetration testing services, and social engineering training for companies and government agencies.[46]

In 2003, Mitnick testified before the United States House Committee on Financial Services regarding computer security and identity theft.[47]

He ran Mitnick Security Consulting LLC, a computer security consultancy, and was part owner and Chief Hacking Officer at KnowBe4, the provider of an integrated platform for security awareness training and simulated phishing testing.[48][49] Elements of the original CSEPS material were incorporated into KnowBe4's training offerings. He also served on the advisory board of Zimperium, a mobile security company specializing in mobile intrusion prevention systems.[50][51]

He resided in Las Vegas, Nevada.[52]

Death

Mitnick died from pancreatic cancer on July 16, 2023, at the age of 59 at a Pittsburgh, Pennsylvania hospital.[12] At the time of his death, he was married and his wife, Kimberley Mitnick (age 36), was pregnant with their first child, a son.[11][12][53][54][55] Kimberley remains active in the cybersecurity and hacking communities.[56]

Media

Hacker Adrian Lamo (arrested 2003), Kevin Mitnick, and reformed hacker Kevin Poulsen (released from prison 1996) (photo c. 2001)

In 2000, Skeet Ulrich and Russell Wong portrayed Mitnick and Tsutomu Shimomura, respectively, in the movie Track Down (known as Takedown outside the US), which was based on the book Takedown by John Markoff and Shimomura. The DVD was released in September 2004.[57] From 2000 to 2002, Mitnick co-hosted DarkSide of the Internet, a two-hour weekly radio program on KFI in Los Angeles.[58] Mitnick also appeared in Werner Herzog's documentary Lo and Behold, Reveries of the Connected World (2016).[59]

Bibliography

Books

About Mitnick

Several books were written about Mitnick's hacking activities, prosecution, and later public career:

  • (1991) Cyberpunk: Outlaws and Hackers on the Computer Frontier, by Katie Hafner and John Markoff, ISBN 1-872180-94-9
  • (1996) The Cyberthief and the Samurai: The True Story of Kevin Mitnick-And the Man Who Hunted Him Down, by Jeff Goodell, ISBN 978-0-440-22205-7
  • (1996) Takedown: The Pursuit and Capture of Kevin Mitnick, America's Most Wanted Computer Outlaw—By the Man Who Did It, by Tsutomu Shimomura and John Markoff, ISBN 0-7868-8913-6
  • (1996) The Fugitive Game: Online with Kevin Mitnick, by Jonathan Littman, ISBN 0-316-52858-7[60]

Written by Mitnick

Mitnick was the co-author, with William L. Simon and Robert Vamosi, of four books, three on computer security and one autobiography:

Articles

Government documents

Film, television and radio

See also

References

External links

Related Articles

Wikiwand AI