in a I 03 31 95 - ALI FBI INFERMATIUH HEREIN BECLASSIFIEIJ DATE FEDERAL BUREAU OF INVESTIGATION Precedence ROUTINE Date 2 20 1998 To Director FBI Attn Acting Unit Chief From WFO r Contact SSAI b6 A b7C Approved By d Drafted By I hrar File NumberIs Pending Title SOLAR CITAC 00 HQ Synopsis Following is the status of involvement in this investigation as of 2 19 98 Reference EC dated 2 17 98 to Houston Division Details I IU S NAVY - OO SAI Iis coordinating all investigative activity with Agents of the Naval Criminal Investigative Service NCIS based in both Washington D C and Jacksonville Florida Trap Trace pen register order is to be signedI I Results are anticipated to support a subsequent 2703 order to b6 forI I The subject's current whereabouts and employment are known Coordination with the NCIS b7E Agents will continue Remote monitoring at WFO has contacted Georgetown University University of Virginia and Georgia State Universit and the original ISP victim complainant inI I On 2 19 98 NCIS froml Icontaininql I SUNRISE CITAC MATTERSVII y 03 31 95 FEDERAL BUREAU OF INVESTIGATION To WMFO From WMFO Re 66 12 01 1995 Referral Consult Optical disks received from Houston Copies will be made ASAP for AF Navy DISA and I Contact has been made with IBM network management and IBM is trace routing Israeli network leg Should know soon of monitoring ability from within US of overseas leased nets Analysis performed for three compromised systems 1 Univ California Berkeley 2 Andrews AFB 3 US Naval Academy To date nothing significant has been identified in the most recent JID data collected for the past day or so Observed two suspicious sites netgate saes com and netdex com WFO has not confirmed the nexus on these sites 77 51n-r Gospelcom net not contacted due to NCIC checks revealingl Thegospel com does not answer phone nor do they call back when message left Will continue to try to contact Slip-stream net SYSOP did not see anything unusual They have been hacked before and do not consider this out of the norm On 02 13 98 Court Order served on I I Legal issue with has been addressed Second 2703 order provided to I Second order will provide additional information Monitoring atI Ishowed FERMI Labs and Oakridge National Labs report no intrusions at their sites All traffic to from labs is legitimate and explainable No known connection to this case No further information from DISA I oo SAI Iis addressing this matter with the assistance of thel and WFO CART Subject's home was consensually searched for computer and computer media the evening of 2 17 98 Newark Division CART I I Copy will be provided to ASAP Subject provided detailed interview to both FBI and Agents Gave no indication he was part of ongoing b3 b6 2 b7C b7E Sealed pursuant to court order Referral Consult 4 63 31 95 FEDERAL BUREAU OF INVESTIGATION WMFO 12 01 1995 WMFO From 66- To Re A review of his system is under 288-HQ-1242560 igation inves way man- 5 In it 5 II him-II -l i l a in considered connected to the luded 111C 18 no it will no be Since this matter above intruSions to CITAC A Mkrn ML nF vIanhuI I II n mu I I 56n lu I h mn muh l EI