2007 Prg "Glamour" Infection at Dept. of Transportation

To Whom It May Concern:

Pursuant to the Freedom of Information Act, I hereby request the following records:

All records you may hold on the ransomware, computer virus, trojan horse, malware, or malicious software named "NTOS", "Prg" or "Wsnpoem". It is also known as "Glamorous", "GLAMOUR", "Zeus", or "Zbot". I am seeking records from the years 2006-2008.

Reuters reported on an infection/hack/theft in an August 9, 2007 piece titled "Hackers steal U.S. govt, corporate data from PCs". This article is available at:

https://www.reuters.com/article/us-internet-attack/hackers-steal-u-s-government-corporate-data-from-pcs-idUSN1638118020070717/

Reuters was referencing a company called Prevx which wrote a blog article on July 16, 2007 titled "Ransomware... Holding Corporate America Ransom!". This post is archived at:

https://web.archive.org/web/20071022014355/http://www.prevx.com/blog/31/Ransomware-Holding-Corporate-America-Ransom.html

The article says that the U.S. Dept. of Transportation was a victim:

"Translating the logfiles on the server to meaningful data was quite easy, ...

152.120.156.x, US, Maryland, Bladensburg, U.S. Dept. of Transportation"

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 20 business days, as the statute requires.

Sincerely,

Dennis Schwarz