1 TI l' I I ALL FBI LI-lemumen i UN CLASSIFIED z W af PP RUCNFB #2105 0440110 ZVY 55353 1301102 FEB 98 FM USCINCPAC HONOLULU TO STAFF WASHINGTON INFO WASHINGTON MACUILL AFB CAT SCOTT AFB NORFOLK OFFUTT AFB PETERSON AFB VAIHINGEN MACDILL AFB MIAMI PEARL HARBOR PACAF HICKAM AFB i FT SHAFTER INTEL FT SHAFTER gglf SEOUL YOKDTA AB by HQ USPACOM J06 Date Declassi ed 24 Oct 2014 ELMENDURF AFB Authority E O 13526 1 x PAGE 02 HONOLULU FT GEORGE MEADE WASHINGTON WASHINGTON WASHINGTON AASHINGTON HONOLULU HONOLULU I PAC NHEELEK AAF KELLY AFB FT BELVOIR NORFOLK FT GEORGE MEADE SAN ANTONIO FT GEORGE HEADE PAC HONOLULU HI lNd Nb l' HONOLULU BT 961 UNCLASSIFIED UNCLASSIFTED PAGE 03 SOBJIUSCINCPAZ SITQEP 02 FOR UNJSUAL COMPUTER INTRUSIUN ACTIVITY INFORMATION OPERATIONS 1 U1 USCINCPAC SITREP 02 IS A USPACOM RESPONSE- 2 CURRENT SITUATION HE HAVE DETECTED NU COW-PUT tR INTRUSIONS IN USPACOM OVER T-H PAST 24 HOURS UPDATE TO UISA-PAC INTRUSIONS MEVTIONED IN USCINCPAC SITREP DISA-PAC HAS COMP LETEL A TOTAL REBUILD OF ONE OF THEIR AFFECTED DNS SERVERS TWO OTHER UN SEQVEKS REMAIV DOWN HAS ESTABLISHED EFFECTIVE WORK-AROON TU MINIHIZE OPERATIONAL IMPACT 3 16M THE FOLLOWING ARE FORWARDED FOR A SHOULD 3 10 USC 130e 18 USC 798 8 3 B WAT WHAT THRESHOLD SHOULD NE CONSIDER DISCONNECTING THE SIPRNET FROM THE C WAT WHAT THRESHOLD 5HOULD NE CONSIDER THE NIPRNET AS D AT THRESHOLD SHOULD HE BEGIN PHYSICALLY ISOLATING CRITICAL DISA PUBLISH A WORLDWIDE IP HOT LIST FLR l1 UNCLASSIFLED i PAGE 04 IP BLUCKING ACTION F - nhuaaduGLGAu RECOMMEND DISA ORCHESTKATE A NATIONAL RESPONSE TC TAE INTRUSION ACTIVITY PERCEPTION IS THAT USAF THROUGH AFINC HAS THE LEAD AEINC RECOMMENDATIONS ARE UNFURTUNATELY ONLY GOING TC USAF MAKING IT DIFFICULT FUR us TO URCHESTRATE A QESPONSE G UNDERSTAND USAF THROUGH OSI HAS LEAD INVESTIGATIVE RESPONSIBILITIES RECOMMEND PENETRATIONS BE GIVEN EOUAL ATTENTION POINTS OE CONTACT NORMAL DUTY HOURS PUC 15 6 SN 477-2993 CUHM 808 477-4593 AFTER DUTY HOURS CONTACT THE COO AT CLBY RADN MDSLEY REASON DECLON 8 FEB 08 BT 42105 UNCLASSIFIED 1 - 0 350 00084 044 P1 55555555 UNCLASSIFIED