A Nigerian man has been sentenced to 18 months in prison for wooing a NASA employee so he could sneak malware onto her work computer and steal passwords, banking information and 25,000 screen shots.

Akeem Adejumo, a 22-year-old Nigerian citizen, pleaded guilty and was sentenced to 18 months in prison by the Lagos State High Court in Nigeria late last month. He was initially charged with four counts but pleaded guilty to two counts of obtaining goods by false pretenses and forgery.

Jeff Taylor, U.S. Attorney for the District of Columbia, said Adejumo did not target the woman because she worked for the government. He tried to scam several hundred women and was successful with several. Taylor noted that this case focused on the NASA employee but two other victims were considered part of the same scheme so there most likely will be no further prosecution.

According to Taylor and an investigator with NASA's Office of the Inspector General, Adejumo first contacted the NASA employee in November of 2006 on the online dating site Singlesnet.com.

Posing as a Texan by using a phony picture and background information, Adejumo courted the woman for several weeks before he sent her an e-mail at her work address with an attachment that contained a phony photo of his phony persona. When she opened the attachment to see the picture, her system was automatically infected with a commercially available piece of spyware.

The spyware, which did not spread to other computers on the NASA network, was first downloaded onto her computer on Nov. 21, 2006. It harvested private e-mail, the woman's passwords, her Social Security number, driver's license information and her home address before it was detected on Dec. 7. During those few weeks, it also captured 25,000 screen shots of whatever she had up on her screen at the time, according to a DOJ official who worked on the investigation but asked not to be identified.

The investigator from the Inspector General's Office, who also asked not to be named, said some NASA information was harvested from the woman's computer but nothing critical was taken. "Fortunately, the victim did not have access to sensitive information," he added. "Some of her work product was taken, [but] it was mostly her personal information."

For more enterprise computing news, visit Computerworld. Story copyright Computerworld, Inc.

Whitepapers

• Gene Kim's Practical Steps to Mitigate Virtualization Security Risks
• Selecting Effective Virtual Directories
• A Modern Approach to On-Demand Email and Data Security
• Best Practices for HP Servers and HP Enterprise Virtual Array in a Microsoft Exchange
• Compliance, Protection, Recovery: A Layered Approach to Laptop Security
• Endpoint Security: Data Protection for IT, Freedom for Laptop Users

View more SECURITY whitepapers

Webcasts

• Key Considerations for a Successful 802.11n Deployment
• Solutions to the Toughest IT Challenges in Remote Offices
• Lowering the Cost of Email Archives
• High Availability for SQL Server 2005 Using Array-Based Replication and Host-Based Mirroring Technologies
• Technical Overview of Exchange Server 2007 with HP Servers and Storage
• Bringing Order and Security to your Mobile Workforce: Corporate Mobility Policy and Device Management On-Demand

View more SECURITY webcasts

Special Reports

• The Evolution of Network Security
• Taking Virtualization Up a Notch
• Learn how to Keep your Mobile Workforce Connected
• The self-managed network

View more SECURITY special reports