Fannie Mae losses 23 billion in quarter Fannie Mae Computer Plot Thwarted

This is a very interesting story about a fired admin at Fannie Mae, who dropped a malicious script on their servers.  Bottom line- He was fired in October ‘08, they didn’t kill his access until later in the day, he was pissed off and left a Unix script which was supposed to zero out ALL Fannie Mae’s data on January 31st. Apparently the scripts were found by accident a couple months later.

Some important lessons to be learned here:

  • Always terminate employees access immediately upon termination. Double check remote access privileges.
  • Escort them to their workspace to gather their stuff, and escort them out of the building.
  • Don’t use shared logins/passwords.

Read more here at the Register…