Comments on: GhostExodus, the ETA, and a Control Systems Incident at Carrell Clinic (part 3) http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/ Sat, 13 Mar 2010 16:07:37 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: An Information Security Place » An Information Security Place Podcast – Episode 25 http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-40299 An Information Security Place » An Information Security Place Podcast – Episode 25 Wed, 16 Sep 2009 02:00:36 +0000 http://www.mcgrewsecurity.com/?p=496#comment-40299 [...] http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carre... [...] [...] http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carre... [...]

]]> By: TrashBagTeddy http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-39160 TrashBagTeddy Fri, 21 Aug 2009 08:44:34 +0000 http://www.mcgrewsecurity.com/?p=496#comment-39160 Nigguh fo-shizzle, im free. Nigguh fo-shizzle, im free.

]]> By: kittehs http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-38343 kittehs Fri, 31 Jul 2009 01:51:41 +0000 http://www.mcgrewsecurity.com/?p=496#comment-38343 Hey, you linked the site to the forums that I got to. just lurking and noticed that. =] Hey, you linked the site to the forums that I got to.
just lurking and noticed that. =]

]]> By: Scott http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-37944 Scott Sat, 18 Jul 2009 15:28:19 +0000 http://www.mcgrewsecurity.com/?p=496#comment-37944 McGrew busts McGraw, I had to laugh when I read that! McGrew busts McGraw, I had to laugh when I read that!

]]> By: Regent http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-37718 Regent Fri, 10 Jul 2009 18:49:12 +0000 http://www.mcgrewsecurity.com/?p=496#comment-37718 I don't know who's the bigger attention whore, you or GhostExodus. Most of the so-called "Whitehat Hackers" can't do shit without metasploit anyways. I don’t know who’s the bigger attention whore, you or GhostExodus. Most of the so-called “Whitehat Hackers” can’t do shit without metasploit anyways.

]]> By: GhostExodus, the ETA, and a Control System Incident at Carrell Clinic (Part 4) « McGrew Security Blog http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-37714 GhostExodus, the ETA, and a Control System Incident at Carrell Clinic (Part 4) « McGrew Security Blog Fri, 10 Jul 2009 15:06:12 +0000 http://www.mcgrewsecurity.com/?p=496#comment-37714 [...] ‹ GhostExodus, the ETA, and a Control Systems Incident at Carrell Clinic (part 3) — Core Security Sends in the Schwag [...] [...] ‹ GhostExodus, the ETA, and a Control Systems Incident at Carrell Clinic (part 3) — Core Security Sends in the Schwag [...]

]]> By: Parker http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-37576 Parker Tue, 07 Jul 2009 13:17:24 +0000 http://www.mcgrewsecurity.com/?p=496#comment-37576 I just don't understand why this dork felt the need to tell you, of all people, about this little adventure of his. Isn't that like bragging to a Wendy's employee about about how you ripped off a McDonald's last week? I just don’t understand why this dork felt the need to tell you, of all people, about this little adventure of his. Isn’t that like bragging to a Wendy’s employee about about how you ripped off a McDonald’s last week?

]]> By: Wesley McGrew http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-37563 Wesley McGrew Tue, 07 Jul 2009 02:03:16 +0000 http://www.mcgrewsecurity.com/?p=496#comment-37563 Hi Hamburgler, I was told that I could meet Mayor McCheese in this line? Hi Hamburgler,

I was told that I could meet Mayor McCheese in this line?

]]> By: Wesley McGrew http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-37562 Wesley McGrew Tue, 07 Jul 2009 02:00:29 +0000 http://www.mcgrewsecurity.com/?p=496#comment-37562 Hi Art, The remote access software was installed onto the Hospital systems with physical access. Only forensic analysis of GhostExodus' computers that have (almost certainly) been seized can tell for certain if that software was accessed remotely. There really isn't any reason to install it unless you plan on accessing it remotely, however, and the videos I have posted clearly show him interacting with bots on an IRC channel. Thanks for the comment! Hi Art,

The remote access software was installed onto the Hospital systems with physical access. Only forensic analysis of GhostExodus’ computers that have (almost certainly) been seized can tell for certain if that software was accessed remotely. There really isn’t any reason to install it unless you plan on accessing it remotely, however, and the videos I have posted clearly show him interacting with bots on an IRC channel.

Thanks for the comment!

]]> By: Hamburglar http://www.mcgrewsecurity.com/2009/07/06/ghostexodus-the-eta-and-a-control-systems-incident-at-carrell-clinic-part-3/comment-page-1/#comment-37554 Hamburglar Mon, 06 Jul 2009 23:43:44 +0000 http://www.mcgrewsecurity.com/?p=496#comment-37554 You serve your masters well Mcgrew. Now fall in line for the concentration camp like a good citizen. You serve your masters well Mcgrew. Now fall in line for the concentration camp like a good citizen.

]]>