Two former members of the hacker gang Kryogeniks were hit with 18-month prison sentences Friday for a 2008 stunt that replaced Comcast’s homepage with a shout-out to other hackers.

Twenty-year-old Christopher Allen Lewis, aka EBK, of Newark, Delaware, and 28-year-old Michael Paul Nebel, aka Slacker, 28, of Kalamazoo, Michigan, were also ordered to pay restitution in the amount of $89,578.13, and to serve three years under court supervision following their release, in a hearing before U.S. District Court Judge Robert F. Kelly in Philadelphia.

A third hacker, James Robert Black Jr., 21, aka Defiant, was sentenced in August to four months for his role in the prank, receiving consideration for helping the FBI build cases against his co-defendants and other computer intruders.

The three men hijacked Comcast’s domain name in May of 2008 — a prank that took down the cable giant’s homepage and webmail service for more than five hours, and allegedly cost the company more than $128,000. Visitors to Comcast.net had been redirected to a simple page reading, “KRYOGENIKS EBK and DEFIANT RoXed COMCAST sHouTz To VIRUS Warlock elul21 coll1er seven.”

A screenshot taken during the Comcast.net hijacking shows Defiant in control of the company’s domain names. Courtesy

As described in the indictment (.pdf) in the case, the pranksters got control of the Comcast.net domain with two phone calls and an e-mail sent to the company’s domain registrar, Network Solutions, from a hacked Comcast e-mail account.

That gave them entry to the Network Solutions control panel for Comcast’s 200 domains.

In an interview the day after the attack, Black and Lewis, who then identified themselves as Defiant and EBK, told Threat Level that they didn’t initially set out to redirect the site’s traffic. Instead, they merely changed the contact information for the Comcast.net domain to Black’s e-mail address. For the street address, they used the “Dildo Room” at “69 Dick Tard Lane.”

Then, the hackers said, they contacted Comcast’s original technical contact at his home number to tell him what they’d done. It was only when the Comcast manager scoffed at their claim and hung up on them, that Lewis decided to take the more drastic measure of redirecting the site’s traffic to servers under the hackers’ control.

“I was trying to say we shouldn’t do this the whole damn time,” said Black at the time.

“But once we were in,” added Lewis, “it was, like, fuck it.”

In the 2008 interview , the hackers expressed some shock over the attention the attack garnered.

“The situation has kind of blown up here, a lot bigger than I thought it would,” said Black at the time. “I wish I was a minor right now, because this is going to be really bad.”

The two men were ordered to surrender to the Bureau of Prisons on Oct. 25.

They could have done worse. The probation office had recommended 41 to 51 months in prison for Lewis and 37 to 46 months for Nebel, based on federal sentencing guidelines and Comcast’s assessment of its costs in recovering its domain name.

See Also:



