Australian Federal Police claim the Cowra man charged with hacking into a National Broadband Network provider told a fellow online user he once used the moniker of “Evil”.
A person using the online moniker of Evil claims to be responsible for cyber attacks internationally.
According to Australian Federal Police facts, David Noel Cecil identified himself as “Evil” to a person who went by the moniker of “slimebox” in a chat room.
The moniker “Evil”, according to AFP facts tendered to the court when Cecil made an application for bail in the Cowra Local Court on Wednesday, “has claimed responsibility for several cyber attacks both within Australia and internationally”.
During investigations into Cecil’s alleged activities, the AFP were “lawfully intercepting the defendant’s telecommunications service to capture his online action.
“In support of this, optical and audio surveillance devises were utilised to show the person accessing the defendant’s home computer while cyber attacks were occurring from his home internet connection,” the police said.
Cecil allegedly made the claim he was “Evil” on July 17.
He made a similar claim on July 21 and was recorded stating “I don’t use it anymore because the Australian Federal Police are after the person Evil and I didn’t want anything to do with it anymore, so I dumped it”.
At the time of the alleged 49 offences Cecil has been charged with he was using the online moniker of “dnc”, his initials.
Cecil’s alleged offences took place between July 6 and July 18 this year.
AFP say the investigation into Cecil commenced on Monday, January 24, this year.
The defendant, police facts stated, regularly communicated with associates in internet chat rooms.
Whilst this was occurring, AFP were monitoring Cecil via lawful intercept of his home internet connection.
On June 26, AFP facts said Cecil told a fellow chat room user: “I’m just reconfiguring ssh backdoor”.
He also said: “updating it so I don’t lose plat”.
Police say he then “posted logs that show the process he went through to reconfigure the backdoor”.
According to the AFP the “ssh” Cecil referred to was a reference to a secure shell.
On July 10 AFP say Cecil was in a chat room when he said “hell even got my own IP, LOL.”
When another user asked “what you on?” Cecil allegedly said “Platform, even got my own IP, self allocated.”
AFP said that when another user asked if he was reading the company’s emails he allegedly replied: “not yet man but I can access everything as if I was at your house on your local network”.
Federal police facts stated: “On Monday, July 12 technicians at Platform ascertained their server had allocated a number of IP addresses to a computer with the system name of david-pc. Platform was not familiar with this computer and had not given it permission to be on the corporate network.”
When AFP officers raided Cecil’s home in Kibbler Street Cowra on July 26 he was found outside the home working on a motor vehicle, but according to the police facts his computer was logged on to service provider Platform Networks.
Police say his computer was, at the time, “conducting a denial of service attack against two IP addresses”.
After his arrest Cecil was taken to Cowra Police Station were he was offered an opportunity to participate in a taped record of interview which was declined.
According to AFP Cecil’s criminal record includes matters for dishonestly obtaining property, using a restricted computer without consent and dishonestly gaining benefit or advantage and stealing of a motor vehicle.
Cecil was refused bail and will re-appear via video link in Orange Local Court on September 20.
During his remand Magistrate Peter Dare made an order that he not have access to a computer or the internet.