Ex-engineer pleads innocent to server bomb charge

By Gregg Keizer, Computerworld |  Security, fannie mae Add a new comment

The engineer accused of trying to destroy data on 4,000 servers operated by Fannie Mae has pleaded innocent, court documents show.

Rajendrasinh B. Makwana, 35, entered his plea during an arraignment hearing on Friday before a federal magistrate judge in Maryland.

Makwana, who worked under contract at the Federal National Mortgage Association, better known as Fannie Mae, was terminated Oct. 24, 2008, after he was accused of creating a settings-changing script without his supervisor's permission. Within 90 minutes of being fired, Makwana allegedly added another, malicious script to a Fannie Mae server. The second script, hidden within a legitimate script that ran each morning on Fannie Mae's network, was designed to disable monitoring alerts and all log-ins, delete the root passwords to the 4,000 Fannie Mae servers, erase all data and backup data, power off all the servers and then disable the ability to remotely switch on the machines.

The malicious script, which was set to trigger on Saturday, Jan. 31, was found by another Fannie Mae engineer within days of Makwana's firing.

The script would have "caused millions of dollars in damage and reduced if not shutdown [sic] operations at [Fannie Mae] for at least one week," the government's complaint read.

Makwana's employment record was a matter of some confusion last week. Although an affidavit submitted by the FBI in early January said Makwana was employed by OmniTech Systems Inc., the company disputed that, saying Makwana had not been in their employ at any time, but was instead a "pass-through" contractor paid by another company.

"I've never seen this guy," said Suresh Kalyanaraman, CEO of OmniTech, in a telephone interview last week. Kalyanaraman claimed that the FBI had its details wrong, and that he had, in fact, been instrumental in helping identify Makwana to FBI Special Agent Jessica Nye. "I helped catch the guy," he said.

Kalyanaraman said that Makwana had actually been employed by another IT contractor with an office in the Washington, D.C. area, IonIdea Inc. "He was representing IonIdea at Fannie Mae from his start date til his termination date," said Kalyanaraman.

Narendra KV, a vice president with IonIdea, confirmed some of what Kalyanaraman claimed, but disputed that Makwana was an actual employee of his company, saying that it, like OmniTech, was acting as a pass-through vendor -- essentially, as a general contractor that in turn hired one or more subcontractors.

"Makhwana [sic] was not an IonIdea employee he is an employee of N.J.-based Marlabs Inc.," said Narendra. However, he acknowledged that IonIdea billed Fannie Mae for Makwana's work. "IonIdea strongly discourages such deviant behavior," Narendra said when asked to comment on Makwana's alleged activity. Marlabs has not responded to requests to confirm that Makwana was in its employ.

Last Friday, FBI spokesman Rich Wolf confirmed that the agency now believed IonIdea, not OmniTech, to have been Makwana's employer at the time of his termination. "[OmniTech] were an innocent party here," said Wolf.

Makwana, an Indian national, faces a maximum sentence of 10 years in prison if convicted. He is currently free on a US$100,000 bond, and has also surrendered his passport.

    Add a comment

    Post a comment using one of these accounts
    Or join now
    At least 6 characters

    Note: Comment will appear soon after you have activated your account.
    Obscene/spam comments will be removed and accounts suspended.
    The information you submit is subject to our Privacy Policy and Terms of Service.

    ITworld LIVE

    SecurityWhite Papers & Webcasts

    White Paper

    Overcome Top 7 Admin Challenges of Active Directory

    As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

    White Paper

    Insiders Can Ruin Your Company. Take Action.

    Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

    White Paper

    Top Solutions and Tools to Prevent Devastating Malware

    Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

    White Paper

    Streamline Compliance and Increase ROI

    Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

    White Paper

    X-Ray of the PCI Process-4 Proactive Steps

    This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

    See more White Papers | Webcasts

    Answers - Powered by ITworld

    Ask a question

    Ask a Question