Please E-mail suggested additions, comments and/or corrections to Kent@MoreLaw.Com.
Help support the publication of case reports on MoreLaw
Date: 07-26-2019
Case Style:
United States of America v. Oriyomi Sadiq Aloba
Case Number: 2:18-cr-00083-RGK
Judge: R. Gary Klausner
Court: United States District Court for the Central District of California (Los Angeles County)
Plaintiff's Attorney: Robyn K. Bacon and Ryan White
Defendant's Attorney: Shaun Khojayan and Allen Rojica Khojayan
Description:
Los Angeles, CA - Texas Man Convicted of Multiple Federal Criminal Charges for Orchestrating Phishing Attack on Los Angeles County Superior Court
A suburban Houston resident has been found guilty by a jury of 27 federal criminal charges for hacking into the Los Angeles Superior Court computer system and then using it to send approximately 2 million malicious phishing emails.
Oriyomi Sadiq Aloba, 33, of Katy, Texas, was found guilty late Thursday afternoon after a three-day trial. The jury found Aloba guilty of one count of conspiracy to commit wire fraud, 15 counts of wire fraud, one count of attempted wire fraud, one count of unauthorized impairment of a protected computer, five counts of unauthorized access to a protected computer to obtain information, and four counts of aggravated identity theft. Aloba was taken into federal custody immediately after the verdict was read.
According to the evidence presented at trial, in July 2017, Aloba and his co-conspirators targeted the Los Angeles Superior Court for a phishing attack. During the attack, one court employee’s email account was compromised and sent an email – without her authorization – to co-workers purporting to be from the file hosting service Dropbox. In fact, it was a phishing email that contained a link to a phishing website that asked for the users’ Superior Court email addresses and passwords, court papers state. Thousands of court employees received the Dropbox email and hundreds disclosed their email credentials to the attacker. Multiple court employees’ emails then were used by the attacker to send out millions of phishing emails.
These additional phishing emails purported to be communications from American Express, Wells Fargo, and other companies, and led victims to a webpage that asked for their banking login credentials, personal identifying information, and credit card information. The link for the fake American Express website used source code that designated Aloba’s email account as the delivery address for the information that the victims input into the website, according to court documents.
Investigators executed a search warrant at Aloba’s residence in Texas, which revealed a thumb drive in a toilet, a damaged iPhone in a bathroom sink, and – in the closet of a spare bedroom – a laptop computer with a smashed screen that was smeared with fresh blood. Nearby, agents found a broken mug, which apparently was used to smash the laptop computer. At the time of his arrest, Aloba had blood on his hands and agents saw him picking something out of his hands.
During the search, agents retrieved from the thumb drive and bloody laptop dozens of phishing kits, which is software designed to facilitate a phishing attack, including the American Express phishing kit used in the court attack.
As a result of the phishing attack, the court suffered monetary losses, including more than $45,000 in employee time paid to respond to the attack that would have otherwise been spent on ordinary work activities. Additionally, there were more than $15,000 in combined actual and intended losses to credit card victims, according to court documents.
United States District Judge R. Gary Klausner has scheduled a sentencing hearing for October 21, where Aloba will face a statutory maximum sentence of more than 350 years in federal prison.
Aloba was initially charged by the Los Angeles County District Attorney, but the matter was referred to the United States Attorney’s Office for federal prosecution.
A co-defendant, Robert Charles Nicholson, 28, of Brooklyn, New York, pleaded guilty last month to one count of conspiracy to commit wire fraud. His sentencing hearing is scheduled for September 30. Aloba’s other three co-defendants remain at large outside the United States.
This matter was investigated by the Federal Bureau of Investigation and the Los Angeles County District Attorney’s Office.
Charges:
18:1030(a)(2)(C),(c)(2)(B)(i),(ii): Unauthorized Access to a Protected Computer to Obtain Information
(1)
18:1349 - CONSPIRACY TO COMMIT WIRE FRAUD AND ATTEMPTED WIRE FRAUD
(1s)
18:1349 CONSPIRACY TO COMMIT WIRE FRAUD AND ATTEMPTED WIRE FRAUD
(1ss)
18:1030(a)(5)(A),(c)(4)(B)(i),(c)(4)(A)(i)(I): Unauthorized Access to Impairment of a Protected Computer
(2)
18:1349, 1343; 2(a) - CONSPIRACY TO COMMIT WIRE FRAUD AND ATTEMPTED WIRE FRAUD; WIRE FRAUD; AIDING AND ABETTING
(2s-17s)
18:1343 WIRE FRAUD
(2ss-17ss)
18:1030(a)(2)(C),(c)(2)(B)(i),(ii): Unauthorized Access to a Protected Computer to Obtain Information
(3-6)
18:1028A(a)(1): Aggravated Identity Theft
(7-11)
18:1030(a)(5)(A), (c)(4)(B)(i), (c)(4)(A)(i)(I); 2(a) - UNAUTHORIZED IMPAIRMENT OF A PROTECTED COMPUTER; AIDING AND ABETTING
(18s)
18:1030(a)(5)(A),(c)(4)(B)(i),(c)(4)(A)(i)(I) UNAUTHORIZED IMPAIRMENT OF A PROTECTED COMPUTER
(18ss)
18:1030(a)(2)(C), (c)(2)(B)(i), (ii); 2(a) - UNAUTHORIZED ACCESS TO A PROTECTED COMPUTER TO OBTAIN INFORMATION
(19s)
10:1030(a)(2)(C),(c)(2)(B)(i),(ii) UNAUTHORIZED ACCESS TO A PROTECTED COMPUTER TO OBTAIN INFORMATION
(19ss-23ss)
18:1030(a)(2)(C), (c)(2)(B)(i), (ii); 2(a) - UNAUTHORIZED ACCESS TO A PROTECTED COMPUTER TO OBTAIN INFORMATION; AIDING AND ABETTING
(20s)
18:1030(a)(5)(A), (c)(4)(B)(i), (c)(4)(A)(i)(I); 2(a) - UNAUTHORIZED IMPAIRMENT OF A PROTECTED COMPUTER; AIDING AND ABETTING
(21s)
18:1030(a)(2)(C), (c)(2)(B)(i), (ii); 2(a) - UNAUTHORIZED ACCESS TO A PROTECTED COMPUTER TO OBTAIN INFORMATION; AIDING AND ABETTING
(22s-24s)
18:1028A AGGRAVATED IDENTITY THEFT
(24ss)
18:1028A(a)(1); 2(a) - AGGRAVATED IDENTITY THEFT; AIDING AND ABETTING
(25s-28s)
18:1028A AGGRAVATED IDENTITY THEFT; 18:2(a) AIDING AND ABETTING
(25ss-27ss)
Outcome: 07/25/2019 127 MINUTES OF Jury Trial - 3rd Day Completed by jury verdict/submitted to court before Judge R. Gary Klausner as to Defendant Oriyomi Saddiq Aloba. Witnesses called, sworn and testified. Exhibits identified and admitted. Government rests. Defendant(s) rest. Motion for judgment of acquittal 9FRCrP 29) is submitted. Closing arguments made. Court instructs jury. Bailiff sworn. Clerk reviewed admitted exhibits with counsel to be submitted to the Jury/Court for deliberations/findings. Jury retires to deliberate. Verdict reached. Jury finds: Oriyomi Saddiq Aloba (1) Guilty on Count 1ss, 2ss-17ss, 19ss-23ss, 24ss, 25ss-27ss. Jury polled. Filed Witness and Exhibit lists. Filed Jury notes. Filed jury instructions. Filed Jury Verdict. Defendant referred to Probation Office for Investigation and Report. Defendant remanded to custody. Bond exonerated as to Defendant #1. Sentencing set for 10/21/2019 at 1:30 PM before Judge R. Gary Klausner. All exhibits were returned to counsel. Post trial motions are due 4 weeks before sentencing. Court Reporter: Terri Hourigan. (jp) (Entered: 07/25/2019)
07/25/2019 128 Jury Instructions. (jp) (Entered: 07/26/2019)
07/25/2019 129 LIST OF EXHIBITS AND WITNESSES at trial as to Oriyomi Saddiq Aloba. (jp) (Entered: 07/26/2019)
07/25/2019 130 REDACTED - Jury Note (Number: 1) as to Oriyomi Saddiq Aloba. (jp) (Entered: 07/26/2019)
07/25/2019 131 SEALED - UNREDACTED Jury Note (Number: 1) re: Redacted Jury Note (Number: 1) 130 . (jp) (Entered: 07/26/2019)
07/25/2019 132 REDACTED - VERDICT FORM for Oriyomi Sadiq Aloba. (jp) (Entered: 07/26/2019)
07/25/2019 133 SEALED - UNREDACTED VERDICT FORM for Oriyomi Sadiq Aloba re: Redacted - Verdict Form 132 . (jp) (Entered: 07/26/2019)
Plaintiff's Experts:
Defendant's Experts:
Comments: