16hackers indict

8/4/2019 16hackers Indict

1/11

, ' 't ....

1 MELINDA HAAG (CABN 132612)United States Attorney2:3 SEALED BY ORDER4 OF THE COURT5G18 UNITED STATES DISTRICT COURT9 NORTHERN DISTRICr OF CALIFORNIA10 SAN JOSE DIVISION i/' JF1 I .CRll 00'47112 UNITED STAlES OF AMERlCA.13 Plaintiff:n v.151617

ttaka "Anthro hobic,"JOSHUA JOmJ'COVELLI, ".

aka "Absolem, and, "Toxic,"i l r KEITH 'WILSON DOWNEY.-

_2{)

2122. JAMES C. MURPHY, I232425262728

lOO'd

MERCEDES RENEE HAEFER.aka ' ~ N o . " and 4'MMM'M:'DONALD HUSBAND,aka "Ananon.,"VINCENT CHARLES KERSHA W,aka ' ~ r i v e t t e , n "Triv,and "Reaper,.. ETHAN MILES, I,

I,IIIIIfILED

zoul' JUL 13 P. 2:3O,'L! r;.., " fa r ; ~ V / , ~ / ! ' ' ' J 1 ! / I E 1 @ ~Cf':' I ...... I.'. :'1,'" "'G- l ~ .:,j. Jf.! :."T""'t., JI

'...... ". ' "I 7('1)1 '7T; I .' , ,"'; ,,0>,.. ;), 'I ."I ".I:Iti

Il No. CR- i: ) pSV[OLATION$:18 U.S.C.1030(b).) (c)(4)(A)(i)(I)- C o ~ i r a e y , ; 18 Us.C. ) l030(a)(5)(A). ( c X 4 X A ) ( ~ ( I 1 (c)(4)(B)(i)) Intentional Damage to a ~ r o t e c t e d ) Computer; 18 U.S.C. 2 Aiding and) Abetting. il) I(SAN lOSE VENUE)I'I) Filed Under Seall) II

DREW ALAN PHlLLIPS. ) I,aka "DrewOl 0/' ). iJEFFREY PUGLISI, ) I,aka "Jeffer," "Jeffery," and "Jit ) IDANIEL SULLIVAN,TRACY ANN VALENZUELA,CHRiSTOPHER QUANG YO,Defendants. 1

INDICTMENT

llfQS '}'3NHO.L.Llf sn 99:11 TIOZ-GT-lnr

Case 1:11-mj-00172-C Document 1 Filed 07/19/11 Page 1 of 11


2/11

II

No. Jrll.OR0.23 1:3 JF"UNITED STATES D COFT PSG

NORTHERN DISTRICT OF CALIFORNIAI FILEDSan Jose Division ri_ I ,Ill! 132011THE UNITED STATES OF AMERIC:A,' C I J ~ ' @ . UI N O ~ D W C A O R 1 R N l A vs. :.CHRISTOPHER WAYNE COOPER, akaCOVELLI, aka "Absolem, and, Trrudc,"KEffI.I WILSON DOWNEY. MERCEDES RENEE HAEFER,aka "No,"lland "mmmm."

DONALD HUSBAND, aka "Ananon," VINCBNf CHARLES KERSHAW, aka "'Trlvctte," "Triv," and "Reaper,''ETHAN MlLES, JAMES C. MURPHY, DREW PHILLIPS, aka "DrewOlO," JEFFREY PUGLISl,aka "Jeffer," "Jefferp," and "Ji," D SULLIVAN. TRACY ANN VALENZUELA, CHRISTOPHER Q U A N O ~ V O . I,

L INDICTMENT ICQPlfU.i 18 U.S.C. 1030(b). (oX4)(A)(i)OO' Conspixa


3/11

INDICTMENI 1 The Grand Jmy charges: 2 Introductotv Allegations: 3 At all times relevant to this Indictment: I4 1. PayPal, Inc. ("PayPalj was an e


4/11

I I I

1 wayS: Manual mode or HIVE mode. In Manual mode, an individual attacker ~ to enter a Ispecific target, Slleh as the IP address or the http address of the target TheHIVE mode enabled2 " I3 an attacker to connect their LOIC to an Internet Relay Chat Server, which allowed a third party tor

4 control at which specific target alJ HIVE-mode LOle attackers would be aimed.; I'I5 Anogymous DDoS Attacks Ph PayPa1: I

6. In late November 2010, WikiLeaks released a large &momt of ~ l a s s i f i e d United . . r7 States State Department cables on its website. Citing violations of the PayPal of service,I8 and in response to WildLeaks' release of the classified cables, PayPaI suspen4d WildLea1cs' I 9 accounm such that Wikileaks could DO longer receive donations via PayPal. Vfikil..eaks' website10 declared that PayPal's action "tried to economically stnmgle WikiLeaks." i:11 7. In retribution for PayPa)'s tennin8tion ofWikiLeaks' donation account,

I,12 Anonymous co-ordinated and executed ODoS attacks against PayPars computer servers usingI13 LOIC. A n ~ n y m o u s referred to these co-ordinated attacks on PayPal as "OPenfion Avenge14 Assange." [lS COUNT ONE; (18 U.S.C. l030(b) - Conspiracy to Commit IntentiJu Damage to a hotected Computer) I 16 I I 17 8. The factual allegations contained in Paragraphs t through 7 areirealleged18 and incorporated herein by reference as if forth in full. !,19 9. On or about a date unknown but at least by December 6, 2010, imd continuing toI20 on or about December 10, 2010, in the Northern District of California and elsewhere, the I 21 d e f e n d a n ~ , I2223 aka " ' A n ~ p h o b i c : , to24 JOSHUA JOHN COVELLI, aka uAbsolem. and, "Toxic," 25 KEITH wn.SON DOWNEY,MERCEDES RENEE HAEFER, 26 aka "No," and "MMMM," DONALD HUSBAND, 2'7 aka "Ananon,n VINCENT CHARLES KERSHAW, 28 aka '"Trivette," "Trivt and "Reaper."

INDICTMENT 3vOO"d 1vas ' A ~ N H O l l V SD

1IIII,I,



5/11

I 1 ETHAN MILES,DREW ALAN PHILLIPS,2 aka "DrewOIO,"JEFFREY PUGLISI,3 aka "Jeffer,'" "JeffelJ)," and "J;i,'"DANIEL SULLfVAN,4 TR.A,CYANN VALENZUELA,CHRISTOPHER QUANG YO, I15 I:5 did knowingly conspire and agree with each other and other persons known unknown to the7 Grand Jury to commit Intentional Damage to a Protected Computer,.inviolattn of 18 U.S.C.

1030(a)(5)(A), (c)(4)(A)(i)(I), & (c)(4)(B)(I), that is to commit aDDoS a on PayPaI's9 p r o t e c t e d c o ~ p u t e r s . Ii'. I10 Allin violation ofTitle 18, United States Code, Sections l030(b) & (c)(4)(A)(i)(I),

i,11 COUNT TWO: (18 U.S.C., l030(a)(S)(A),(c)(4)(A)(i)(I), (c)(4)(B)(i) &(2)Intentional Damage toa Protected Computer, Ajdlng and Abetting)1213 10. The factual allegations contained in Paragraphs 1through 7 arl realleged14 and incorporated herein by reference as if set forth in full.

On or about between December 6, 2010 and December 10. > in the Northern1617

19 knowingly caUsed the transmission of aprogram, information, code,and com6and, that is.I,20 LOlC. and., as a result of such conduct, intentionally caused damage without iuthorizationto22 protected computers at PayPal, and caused loss to l'orrnorepersons during ali1~ y e a r period from22 the defendant's course of conduct affecting protected computers aggregating at least $5,000 in, r23 value. t24 All in violation ofTitle IS. United States Code, Sections 1030(a)(5)(A), ~ ) ( 4 ) ( A ) ( i ) ( I ) , 25 (C)(4)(B)(i), & 2. f .2627

COUNT THREE.; (18 U.S.C. l030(a)(5)(A), (c)(4)(A)(i)(I). (C)(4)(B)J) & (2)Intentional Oamage to a Protected Computer, AidIng and Abetting)28 11. The factual allegations contained in Paragraphs 1 through 7 ari rc::alleged

IiINDICTMENT 4

900'd lvas 'A3NHOJJV sn L9:11 1IOZ-SI-lnr

http:///reader/full/Computer,.inhttp:///reader/full/Computer,.in


6/11

..IIIII1 COUNT EIVE: (18 U.S.C. l030(a)(S)(A), (c)(4)(A)(i)(I). (c){4)(B)(i) & (2) Intentional Damage to a Protected Computer. AIdIng ar Abetting)2 I'3 13. The factual allegations contained in Paragraphs 1 through 7 are!,realleged

I'4 and incorpomted herein by reference as i f set forth in full. i:i5 On or about between December 6. 2010 and December 10, 20 , in theNorthernI6 District ofCalifornia and elsewhere, the defendant, II7 KEITIi WILSON DOWNEY, i:8 lawwiDgIy..",oo !he_ s s i o n of. infOrmalioa, code, and+ dud is,9 LOIC, as a result of such conduct, intentionally caused damage without 8uthorization to10 pro1ecIed eomputers at PayPal, and caused loss to 1or JDOJe persons durins ~ . , . . , . petiocl from11 the defendant's course of conduct affecting protected computers aggregating at least $5,000 in12 value. I:" , i13 All in violation ofTitle 18, United States Code, Sections l030(a)(S)(A), ( ~ ) ( 4 X A ) ( i ) ( I ) . .II14 (e)(4)(B)(i), 1t. 2. I15 COUNT SIX; (18 U.S.C. 1030(a)(S)(A). (cX4)(A)(i)ro, (c)(4)(B)(i) &. (2) Intentional Damage to a Protecteo Computer, Aiding and Abdting)16 I"I17 14. The f8ctual allegations contained in Paragraphs 1 throllgb 7 mi rea11eged19 and incorpomted herein by reference as if set forth in full. i

I19 On or about between December 6, 2010 and December 10, 2010 t20 District of California and elsewhere, the defendant, !tI21 MERCEDES RENEE HAEFER,aka "No," and "MMMM," I22 II

in the Northern

23 knowingly caused the transmission of a program, infonnation. code, and conimand, that is,24 WIC, and, as a result of such conduct, intentionally caused damage without ~ u t h o r i z a t i ( ) n tor2S protected computers at PayPal, and caused loss to 1 or more persons during ~ ' l - y e a r period fiomI:: ~ d e f e a d m J t " "'"""" at conduct affectipg protected comput= aggregatingI Sj,OOO in28 All in violation ofntle 18, United States Code, Sections l030(a)(S)(A), (c)(4)(A)(i)(I),

I; I, INDICTMENT 6 II

900"d 1vas 'A3NHOJJV sn L9:TT TTOZ-5T-1nr



7/11

!iIII!I1 (cX4)(B)(i). & 2. tr2 COUNT SEVEN: (18 U:S.C. l030(a)(S)(A), (c)(4){A)(i)(I). ( ~ ~ X ~ ) & (2):Intentional Damage to aProteCted Computer, aDd AbettiDg)3 I II 4 IS. The factual allegations contained in Paragraphs J through 7 at+. rea1leged

i5 and incoIpol'8ted herein by reference as if set forth in full. I I 6 On orabout between December 6. 2010 and December 10, 2010 , in the Nortbem. t1 District ofCalifomiaand elsewhere, the d e f ~ !,8 DONALD HUSBAND, f aka "AnanOft," I :0 ~ COI1SOd the 1raDSmi......ofa JIl'IIII8D1, ~ c o d o , ODdcol-.Ibat is,U LOIC, and, as a result of such conduct, intenticmaJly caused damap without ~ o r i z a 1 i O D to I 12 protected computers at PayPal, and caused loss to 1or more persons during a I-year period from13 the defendant's course ofconduct affecting protected computers a g r e g a t i D g ~ least SStOOO in

f14 value. rI15 . All in violation ofTitle 18, United States Code., Sections J030(a)(5)(A), (c)(4)(A)(i)(l),16 (c)(4)(B)(i), & 2. ..11 COtJNt.mGIIT: (18 U:S.C. I I030(aX5)(A). (c)(4)(A)(i)(l), (c),4)(Bii) & (2):Intentional Damage to a Protected Computer, AfdiIig and Abetting)18 II

.'19 16. The mctuaI allegations contained in Paragraphs 1 through 7 are reallegedr. 20 and incorporated berein by reference as ifset forth. in full. Ir

21 IOft orabout between December 6, 2010 and Deeember 10, 2010 , in the Northern!22 District ofCalifornia and elsewhere, the defendant,23 VINCENT CHAR.LES KERSHAW,

aka "Trivette," *Triv," and "Reaper,"24 i 25 knowiD.gly caused transmission of a program, infonnation, code. and ~ that is. 26 LOle, and, as a result of such conduct, intentionally caused damage without authorization to I 27 protected computers at Paypai, and caused loss to I or more persons during !a lyeaz period from . I 28 the defendant's COUlSe of conduct affecting protected computers aggregatmB 81 least $5,000 in i I ..,INDICTMENT

WOd 1vas 'A3NHOllV sn 89: i i l i02-6l-1nr



8/11

5

10

15

20

25

I1 :I2 All in violation ofTitle 18. United States Code, Sections l030(a)(S)(A). (c)(4)(A)(i)(l).3 (c)(4){B)(i), & 2. '

I4 COUNIN1NE: (18 U:S.C. l 0 3 0 ( a ) ( S ) ( A ) ~ ) ( A X i ) ( I ) , (c){4)(B)(,) & (2)-:Intentional Damage to a Prot ~ m p u t e r . Aiding ~ Abetting) I

17. The factual allegations contained in Paragraphs 1 through 1 a4 realleged,lI7 and inCOIpOmted herein by reference as i f set forth in full. II8 On or about between December 6, 2010 and December 10, 2010 in the NorthernI

9 DistrictofCalifornia and elsewhere, the defendant, !E1HAN MILES. I

11 knowingly caused the transmission of a program, information, code, and coJnand, that is,. [ 12 L O I ~ and, as a result of such eonduct, intentionally caused damage without authorization to I13 p r o ~ t e d computers at PayPal. and caused loss to 1or more pe1'sons duriDg at I-year period from . I $ .14 the defendants course ofconduct affecting protected computers aggn;gatmgr.t least 5,000 m

value. . 'I16 All in violation ofTit1e 18. United States Code, Sections l030(a)(S)(A), (c)(4)(A)(i)(l),I

I'17 (c)(4)(B)(i), & 2, I . I18 COUNTTEN: (18 U.S.C. 1030(a)(SXA), (c)(4)(A)(i)(I), (c)!4)(B)(i) & ( 2 ) Intentional Damage to aProtected Computer, AidlDg and Abetting):I18. The factual allegations contained in Paragraphs 1 through 7 are reallegcd

21 and incorporated herein by reference as ifset forth in full. I! 22 On or about between December 6, 2010 and December 10,2010, in the Northern

I.

23 District ofCalifornia and elsewhere, the defendant.24 JAMES C. MURPHY.

knowingly caused the transmission ofa program. infcmnation. c o d ~ and ~ a n d . that is,26 LOIC, and. as 8 result of such conduct, intentionally caused damage withouJauthorization to I 27 protected computers at PayPal. and caused loss to 1or more persons dn"';t'\O' aI-year period from-- f 28 the defendant's oowse of conduct affecting protected computers aggregatmg at least $5,000 in

III'iINDICTMENT 8 I

800'd 1vas 'A3NHOJJV sn 89:11 IIOZ-61-1nr



9/11

iII1I1 value. I'r I 2 All in violation ofTItJe 18, United States Code. Sections l030(a)(S)(A), ( ~ ) ( 4 ) ( A ) ( i ) ( l ) ,

13 (cX4)(B)(i). "2.4: COUNJELEVEN: (18 U.S.C. l030(a)(S)(A)t (c)(4)(A)(i)(l). ( c ) ~ 4 ) { B ) ( i ; ) i &; (2) :Intentional t)amage to a Protected. C!omputer, Aiding and Abetting)56 19. The iaetual alleplioas eont8ined in Pmagraphs 1 tbrougb 7Jrcallegodi and incorporated herein by refcm;nce as ifset forth in WI. , I 8 On or about between December 6. 2010 and December 10,2010 ; m. the Northern .9 District ofCalifornia and elsewhere, the defendant, r

!0 DREW ALAN PHILLIPS, aka "DrewOlO," I 11 III 12 knowingly caused the transmission of a program, information, code, and comhumd, that is, , l . 13 LOle, and, as a resultof such I;londuct, intentionally caused damage without authorization to 1I14 protected computers at PayPal, and caused loss to 1 ormore persons dwing att ~ y e a r period fromlS the defendanes course ofconduct affecting protected computers aggregating at least $S,OOO in

I.16 value.

/:17 AU in violation ofTitle 18. United States Code, Sections l030(a)(S)(A), (c)(4)(A)(i)(l),r 18 (c)(4)(BXi), & 2. ! I:19 CQlJNT TWELVE! (18 U.S.C. l030(a)(S)(A), (c)(4)(A)(i)(l). (c)(4)(B)(i) & (2) intentional Damage to a Protected eomputer. Aidirig and Abetting}20 lI: 21 20. The factual allegations contained in Paragraphs I through 7 are realleged

22 and incoIpOIated herein by reference as ifset forth.in full. I'I'

(

;:23 On or about between December 6, 2010 and December 10, 2010 , in the NorthernI, 24 District of California and elsewhere. the de f e ndan t . I 25 JEFFREY PUGLISI.aka "Jeffer.''''Jefferp," and "Ji:; ir6 I27 knowingly caused the transmission of a program, infonnation, code, and coJunand, that is,28 tOle, and, as a result of such conduct, intentionally caused damagewithoJ authorization to

I' D-lDlCTMENT 9 !

GOO"d 1VQS 'A3NHOllV SD 89:11 TT02-GT-1nr



10/11

f:I

1 proteCted computers at P a y P a l ~ and caused loss to 1or more persons during a -yearperiod fi'om:2 the defendant's course ofconduct affecting protected computers aagregating least S5,000 inI3 value. I, t 4 All in violation ofTitIe 18, United States Code, Sections l030(a)(S)(A), (c)(4XA)(i)(l),I5 (c)(4)(B)(i1 & 2. I6 COUNT THIRTEEN; (18 U:S.c. l030(a)(S)(A). (c)(4)(A)(i)(I), ( ~ ) ( i ) & (2) Intentional Damage to a Proteetea ComPUtCr, arid Abetting)7 21. The factual allegations contained in Paragraphs I thIOugh 7 realleged8 and incoIPomtc:d herein by reference as ifset forth in full. r

On or about between December 6, 2oio and December 10, 2010 in the Nortbe:m10 District ofCalifornia and elsewhere, the defendazat, f'U' , DANIEL SULLlVAN. f 12 knowingly caused the tranll!lI1ission ofa program, information, code, and that is,13 LOI


11/11

no d 1VJ.O.L

II1 the defendant's coune ofconduct affecting protected computers aggregating at least $5,000 in, I2 vU=. I3 All in violation ofTitle 18, United statesCode, Sections 1030(aXS)(A), ( ~ X 4 X A ) ( i ) ( I ) ,I,4 (c)(4)(B)(i)," 2. I5 COUNT fIF 1;eeN: ~ . S . C . I030(a)(SlCA), (cX4)(A)(i}{I), (c)(4)(8)(0 & (2) bOnal Damage to a-Protected Computer, Aidiri81d Abctdng)7 23. The factual allegations contained in Paragraphs 1 through 7 aJ reaUegedr8 and incorporatedherein by reference as i fset forth in full. !, iOn or about between December 6. 2010 and December 10. 2010 t in the Nortbem10 District ofCalifomia and e1sewheze, the defeadaDt l.11 CHRISTOPHER QUANG YO,12 knowingly caused the transmission ofa program. information.code, and c o m m a n ~ that is.I13 LOIC, and, as a result ofsuch conduct. intentio118l1ycaused damage without authorization to14 protected computers at PayPal, and caused loss to 1or more persons during 4..year'period tiom. f 3.5 the defenc:Jm1ts COUlSe ofconduct affecting protected computm aggregating least 55,000 in16 value.17 All in \liolation ofTitle 18, United States18 (cX4)(B)(i), & 2.1920 DATED:21

26 Chief, CHIP Unit27 (Approved as to form:28

INDICTMENT 11

ISections l030(aXSXA), (cX4XA)(i)(l),!Iij

I

rIfIfII:

rIII

nOd 1vas 'A3NHO.L.LV sn 69:ll l102-6l-1nr

http:///reader/full/A3NHO.L.LVhttp:///reader/full/A3NHO.L.LV

16hackers indict

Documents