US lottery security head 'fixed results'

Eddie Raymond Tipton allegedly hacked into the draw's computer to ensure he won the jackpot

fraud

The US lottery's former head of security has been accused of hacking into the system to make sure his ticket won the draw, although he never actually claimed his winnings.

Eddie Raymond Tipton was the security director for the Multi-State Lottery Association in Iowa, but was arrested in March on two counts of fraud.

The court papers suggested he used a thumb drive loaded with a rootkit in the computer set up to randomly generate the winning numbers. The rootkit was designed to predetermine the numbers for the lottery and then erase itself, leaving no trace of the hack.

The computer was situated in glass room, is not connected to the internet to avoid hacks and the rules for access to the computer state that two people must be present in order for it to work. CCTV also covers it 24 hours a day, seven days a week.

However, Tipton also allegedly changed the CCTV camera settings to only record one second out of every minute so he wouldn't be caught.

Mike McLaughlin, senior analyst at computer security company First Base told the BBC: "It is entirely possible to code a rootkit on a USB drive which could interfere with software on a computer then delete itself.

"It would only take a second to run once plugged in. However, this can leave traces on the infected machine if you know where to look."

Lottery employees are not allowed to win the lottery, although a company based in Belize, the day it was due to expire, attempted a claim with the ticket. This triggered an investigation into the ticket, during which Tipton's actions were questioned.

Prosecutors wrote in the filing: "There is sufficient evidence for a jury to reasonably conclude from the evidence that Defendant tampered with lottery equipment."

Featured Resources

BCDR buyer's guide for MSPs

How to choose a business continuity and disaster recovery solution

Download now

The definitive guide to IT security

Protecting your MSP and your customers

Download now

Cost of a data breach report 2020

Find out what factors help mitigate breach costs

Download now

The complete guide to changing your phone system provider

Optimise your phone system for better business results

Download now

Recommended

Defense Dept. expands vulnerability disclosure program to all publicly accessible defense systems
ethical hacking

Defense Dept. expands vulnerability disclosure program to all publicly accessible defense systems

5 May 2021
Security researchers take control of a Tesla via drone
ethical hacking

Security researchers take control of a Tesla via drone

5 May 2021
Best free malware removal tools 2021
Security

Best free malware removal tools 2021

5 May 2021
Acuant acquires identity verification provider Hello Soda
mergers and acquisitions

Acuant acquires identity verification provider Hello Soda

4 May 2021

Most Popular

16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

29 Apr 2021
How to move Windows 10 from your old hard drive to SSD
operating systems

How to move Windows 10 from your old hard drive to SSD

30 Apr 2021
Dell patches vulnerability affecting hundreds of computer models worldwide
cyber security

Dell patches vulnerability affecting hundreds of computer models worldwide

5 May 2021