Quick Answer: A Marriott job scam involved Hungarian hacker Attila Nemeth, who pleaded guilty to infiltrating Marriott’s computers and threatening to expose confidential financial documents unless the company hired him. Nemeth used malicious email attachments to create a “backdoor” into Marriott’s system over several months in 2010.
Did you hear the one about Hungarian who hacked Marriott’s computers and demanded employment? No? It’s a real doozy.
Hungarian citizen, Attila Nemeth, has plead guilty to transmitting a malicious code to Marriott International Corporation (Marriott) computers and threatened to reveal confidential information obtained within the company’s computers unless Marriott offered him a job.
I’m not sure how job interviews work in Hungary, but, um, ::whispers:: this is a bad approach.
Each weekday I send one short email: one money story that caught my attention, why it might matter to you, and one manageable thing you can do with it. A couple of minutes, and a dad joke.
In the latest issue (Oct 9): Does Financial Literacy Make Financial Sense?
Free. I sell nothing. Unsubscribe any time.
According to Nemeth’s plea agreement, on November 11, 2010, Nemeth sent an initial email to Marriott personnel, advising that he had been accessing Marriott’s computers for months and had obtained proprietary information.
The Daily Money Brief — Free, at 10 AM
Money you may be owed, scams to dodge, and the fine print decoded — the consumer money news that affects your wallet, every weekday.
Nemeth threatened to reveal this information if Marriott did not give him a job maintaining the company’s computers. On November 13, 2010, after receiving no response from Marriott, Nemeth sent another email containing eight attachments, seven of which were confirmed as documents stored on Marriott’s computer system.
These documents included financial documentation and other confidential and proprietary information. Nemeth admitted that through an infected email attachment sent to specific Marriott employees he was able to install malicious software on Marriott’s system that gave him a “backdoor” into the system. Using the “backdoor,” Nemeth was able to access proprietary email and other files belonging to Marriott.
According to the plea agreement, on November 18, 2010, Marriott created the identity of a fictitious Marriott employee for the use by the U.S. Secret Service in an undercover operation to communicate with Nemeth. Nemeth, believing he was communicating with Marriott human resources personnel, continued to call and email the undercover, and demanded a job with Marriott in order to prevent the public release of the Marriott documents. Nemeth emailed a copy of his Hungarian passport as identification and offered to travel to the United States.
On January 17, 2011, Nemeth arrived at Washington Dulles Airport on a ticket purchased by Marriott, for an “employment interview.” The “interview” was conducted by a Secret Service agent assuming the role of the Marriott employee with whom Nemeth believed he had been communicating.
During the course of the “interview,” Nemeth admitted that he accessed Marriott’s computer systems; stole Marriott’s confidential and proprietary information; and initiated the emails to Marriott threatening to publicly release Marriott’s data unless he was given a job on his terms by Marriott. To further prove his identity as the perpetrator, Nemeth demonstrated exactly how he accessed the Marriott network; his continued ability to access the Marriott network; and the location of the stolen Marriott proprietary data on a computer server located in Hungary.
IDIOT!
As a result of the compromise of its computer network, Marriott was compelled to engage more than 100 of its employees in a thorough search of its network to determine the scope of the compromise and to identify the data that may have been compromised. The loss to Marriott as a result of the intentional damage caused by Nemeth is between $400,000 and $1 million dollars in salaries, consultant expenses, and other costs associated with Nemeth’s intrusion.
Nemeth faces a maximum penalty of ten years in prison for the transmission of the malicious code and a maximum of five years in prison for threatening to expose confidential and proprietary information if Marriott did not give him a job. U.S. District Judge J. Frederick Motz, has scheduled sentencing for February 3, 2012 at 11:00 a.m
Nemeth remains detained.
And unemployed.
If you have been scammed and would like to file a scam report, please click here.
Know Your Rights: If a debt collector is contacting you, you have legal protections. See the complete list of FDCPA violations collectors commit most often. Use the free Debt Validation Letter Generator to demand proof of the debt, or check this collector’s complaint history with the Scam-O-Meter.
Dealing With Debt? Before you pay a collector, understand all your debt relief options — including ones the collector won’t tell you about. If the debt feels unmanageable, take the 2-minute bankruptcy quiz to see if the math favors a fresh start. Federal Reserve research shows filers recover faster than those who don’t file.
