Sunday, December 29, 2024
HomeCyber AttackEx-Employee Sentenced 10 Months Jail for Hacking JET2 Flights Network

Ex-Employee Sentenced 10 Months Jail for Hacking JET2 Flights Network

Published on

SIEM as a Service

A Former Jet2 employee sentenced a 10 month in Prison for carrying the cyber attack on the company network and take down their system for 12 hours.

A former Jet2 employee sentenced a 10 month in Prison for carrying the cyber attack on the company network, and take down their system for 12 hours.

Scott Burns, 27-year-old was employed by ICT provider, Blue Chip, and worked on their Jet2 account until December 2017 and he moved to another company.

- Advertisement - SIEM as a Service

On 18 January 2019, He was gained access to the Jet2 networks computer account and removed a folder that stored all user account details which cause more than 2000 employees to account in unaccessible.

He also deletes the program used by the company to log the user’s activities and changes on the network.

Scott got arrested on 8 February 2018 and seized several electronic devices and the forensic evidence proves that he was also responsible for another network intrusion against Jet2 on 3 January.

According to National Crime Agency report, On a number of occasions – once on the 3rd of January, during his preparation – and then several times after the attack, Burns also hacked the email inbox of Jet2’s CEO.

“During the interview, Burns admitted that he had illegally accessed the CEO’s inbox “once or twice” to see if anything was being said about the incident – or to see if the company had any evidence of his involvement in the attacks.”

 Last Week, Burns pleaded guilty to eight offenses under the Computer Misuse Act in November and he was sentenced to 10 months in prison at Leeds Crown court.

According to Jamie Horncastle from the NCA said: “Network intrusion is not a victimless crime. Not only did Burns’s actions have a potential financial impact on Jet2, but it also caused huge disruption to their staff and technical operations.”

Also Read: 5 Steps How To Protect Your Company Infrastructure From Insider Threats

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Lumma Stealer Attacking Users To Steal Login Credentials From Browsers

Researchers observed Lumma Stealer activity across multiple online samples, including PowerShell scripts and a...

New ‘OtterCookie’ Malware Attacking Software Developers Via Fake Job Offers

Palo Alto Networks reported the Contagious Interview campaign in November 2023, a financially motivated...

NjRat 2.3D Pro Edition Shared on GitHub: A Growing Cybersecurity Concern

The recent discovery of the NjRat 2.3D Professional Edition on GitHub has raised alarms...

Palo Alto Networks Vulnerability Puts Firewalls at Risk of DoS Attacks

A critical vulnerability, CVE-2024-3393, has been identified in the DNS Security feature of Palo...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

Lumma Stealer Attacking Users To Steal Login Credentials From Browsers

Researchers observed Lumma Stealer activity across multiple online samples, including PowerShell scripts and a...

New ‘OtterCookie’ Malware Attacking Software Developers Via Fake Job Offers

Palo Alto Networks reported the Contagious Interview campaign in November 2023, a financially motivated...

A Dark Web Operation Acquiring KYC Details TO Bypass Identity Verification Systems

A major dark web operation dedicated to circumventing KYC (Know Your Customer) procedures, which...