"On This Date in Cryptologic History" Calendar
1994: Griffiss Air Force Base finds malware
![](https://cdn.firespring.com/images/66f6e800-4ce9-40b1-a77d-27d1f82ae69e.jpg)
28 March 1994: Griffiss Air Force Base found illegal wiretap malware in its Rome laboratory network.
System administrators at the United States Air Force (USAF), Rome Laboratory on Griffiss Air Force Base discovered "sniffer" malware on one of the lab's networks.
The malware enabled hackers to steal passwords to gain access to additional networks including NASA Goddard, Wright-Patterson Air Force Base, and NATO headquarters. An investigation, involving U.S. and U.K. law enforcement agencies, led to “Datastream Cowboy” and “Kuji”, the hacker handles of British citizens Richard Pryce and Matthew Bevan.
Bevan claimed they hacked Rome Labs and other systems to find evidence of alien anti-gravity technology, which he believed was being used by the U.S. military.
Pryce, only 16 at the time, alarmed investigators when he downloaded a Korean nuclear database to a USAF system. Air Force investigators feared the database belonged to North Korea and their discovery of the data theft and subsequent trace of the transfer to the USAF system would lead to an international confrontation. The data turned out to be from the South Korean Atomic Research Institute which, while still serious, was significantly less dangerous.
Learn about the incident via the Case Study linked below.