Within Indictments
Why Remote Control Tools Mattered So Much
Prosecutors treated RemotelyAnywhere, administrator access, copied passwords, and deleted logs as signs of control and concealment.
On this page
- Administrator access allegations
- Remotely Anywhere and return access
- Password files and deleted logs
Page outline Jump by section
Introduction
In the US case against Gary McKinnon, one of the most important allegations was not simply that he viewed files on military and NASA computers. Prosecutors claimed that he obtained administrator-level control over systems, installed remote-access software, copied password data and removed records of his activities. Those actions were presented as evidence that he had moved beyond casual browsing into sustained control of compromised machines. According to the indictments and later court summaries, the alleged use of remote-administration tools was central because it enabled repeated access, network exploration and concealment over an extended period. [Department of Justice+2UK Parliament]justice.govDepartment of Justice IndictmentDepartment of JusticeIndictmentJanuary 24, 2012 — Defendant GARY MCKINNON was an unemployed computer system administrator… computers a…
The distinction mattered legally. A person who briefly accesses a computer without authorisation presents one kind of case. A person who allegedly acquires administrative privileges, installs software that allows future access and removes evidence of their presence presents a very different picture to investigators and prosecutors. [U.S. Department of War]media.defense.govMc Kinnon comphackerDepartment of WarU.S. Department of Justice United States Attorney Eastern…November 13, 2002 — 12 Nov 2002 — According to the indictme…
Why Administrator Privileges Changed the Character of the Allegations
The indictments repeatedly alleged that McKinnon obtained administrator privileges on targeted systems. In Windows environments, administrator rights are the highest level of control available to ordinary system managers. Such privileges allow a user to install software, alter system settings, create or delete accounts, access protected files and change logging configurations. [Wikisource]en.wikisource.orgUS v Gary Mc Kinnon IndictmentUS v Gary McKinnon Indictment27 Feb 2021 — Then, the defendant obtained administrator privileges on these computers and install…
US prosecutors argued that McKinnon did not merely discover vulnerable machines but extracted administrative account information and passwords from them. A House of Lords summary of the extradition case stated that he identified systems with open Microsoft Windows connections, extracted administrative account identities and associated passwords, and then used that access to move deeper into government networks. [UK Parliament]publications.parliament.ukmckinn 1UK ParliamentMckinnon V Government of The United States of America…30 Jul 2008 — The appellant is a 42 year old British citizen, an un…
This allegation helped support the government’s broader theory of the case. Prosecutors were not portraying a one-time intrusion. They described a process in which administrator credentials became a stepping stone to wider network access, additional compromises and greater control over systems spread across multiple agencies. [vLex]vlex.co.ukMcKinnon v United States of AmericaHaving gained access to those administrative accounts, he installed unauthorised remote access and…
Why RemotelyAnywhere Became a Key Piece of Evidence
What the software was
RemotelyAnywhere was a legitimate commercial remote-administration product. System administrators could install it on a computer and then control that machine remotely through a network connection. The software itself was not inherently malicious; many organisations used similar tools for legitimate maintenance and support. [Academia]academia.eduThe politics of cyberconflictJanuary 1, 2006 — Remarkably, Gary McKinnon, a British hacker indicted for hacking into scores…
What made it significant in the McKinnon case was the allegation that it was installed without authorisation on government systems that had already been compromised. Prosecutors claimed that after obtaining administrator access, McKinnon installed RemotelyAnywhere on numerous computers. The indictments specifically mention its installation across Army, Navy, NASA, Department of Defense and Air Force systems. [Wikisource]en.wikisource.orgUS v Gary Mc Kinnon IndictmentUS v Gary McKinnon Indictment27 Feb 2021 — Then, the defendant obtained administrator privileges on these computers and install…
The prosecution’s theory of return access
According to court summaries, the software allegedly allowed McKinnon to access and alter data on the affected computers whenever he wished. Prosecutors argued that it functioned as a persistent method of entry, allowing him to return to machines without repeatedly exploiting the same vulnerability. They further alleged that the program could blend into the operating environment, making its presence less obvious to system operators. [vLex]vlex.co.ukMcKinnon v United States of AmericaHaving gained access to those administrative accounts, he installed unauthorised remote access and…
This claim was important because it transformed the alleged conduct from isolated intrusions into a continuing capability. The government argued that once the software was installed, compromised machines could be revisited and used as platforms for further activity. According to both court summaries and contemporary reporting, investigators alleged that hacked systems were subsequently used to locate additional vulnerable military and NASA computers. [vLex+2U.S. Department of War]vlex.co.ukMcKinnon v United States of AmericaHaving gained access to those administrative accounts, he installed unauthorised remote access and…
Alleged expansion through government networks
The House of Lords judgment summarising the US allegations stated that, after installing RemotelyAnywhere and other tools, McKinnon allegedly scanned more than 73,000 government computers in search of additional vulnerable targets. Prosecutors characterised this as a mechanism for moving from one compromised system to another and expanding access across multiple government networks. [UK Parliament]publications.parliament.ukmckinn 1UK ParliamentMckinnon V Government of The United States of America…30 Jul 2008 — The appellant is a 42 year old British citizen, an un…
From the prosecution’s perspective, the software therefore served two purposes:
- It preserved access to already compromised machines.
- It provided a launching point for identifying and reaching additional systems.
Those claims helped explain why the remote-access software received repeated attention in legal filings and public statements. [vLex]vlex.co.ukMcKinnon v United States of AmericaHaving gained access to those administrative accounts, he installed unauthorised remote access and…
Password Files and the Claim of Persistent Control
Another recurring allegation concerned password data. Prosecutors stated that McKinnon copied files containing account information and passwords from compromised computers. Some descriptions referred to files containing usernames and encrypted passwords rather than plain-text credentials. [Wikisource]en.wikisource.orgUS v Gary Mc Kinnon IndictmentUS v Gary McKinnon Indictment27 Feb 2021 — Then, the defendant obtained administrator privileges on these computers and install…
The significance of those files was not merely informational. Investigators treated password files as a practical mechanism for maintaining or expanding access. Possession of account credentials could allow a user to reconnect later, authenticate to additional systems or elevate privileges on other machines within a network. [UK Parliament]publications.parliament.ukmckinn 1UK ParliamentMckinnon V Government of The United States of America…30 Jul 2008 — The appellant is a 42 year old British citizen, an un…
The indictments linked password-file copying directly to the broader allegations of administrator control. Rather than presenting credential collection as an isolated act, prosecutors described it as part of a pattern involving administrator access, remote-control software and continued movement through government networks. [U.S. Department of War]media.defense.govMc Kinnon comphackerDepartment of WarU.S. Department of Justice United States Attorney Eastern…November 13, 2002 — 12 Nov 2002 — According to the indictme…
Why Deleted Logs Were Treated as Evidence of Concealment
The role of system logs
Computer systems routinely record activity in log files. These records can show who logged in, what software was installed, which accounts were used and what actions occurred on a machine. For investigators, logs are often among the most important sources of evidence after an intrusion. [Wikisource]en.wikisource.orgUS v Gary Mc Kinnon IndictmentUS v Gary McKinnon Indictment27 Feb 2021 — Then, the defendant obtained administrator privileges on these computers and install…
The allegations against McKinnon
Several counts in the indictment alleged that system logs or log files were deleted. Navy-related allegations referred to deleted system logs, while NASA-related allegations referred to deleted system log files alongside copied username and password information. [Wikisource]en.wikisource.orgUS v Gary Mc Kinnon IndictmentUS v Gary McKinnon Indictment27 Feb 2021 — Then, the defendant obtained administrator privileges on these computers and install…
Prosecutors interpreted those actions as evidence of concealment. Their argument was straightforward: if a person removes records showing how access occurred, investigators may infer an effort to avoid detection or hinder later investigation. Contemporary reporting on the extradition proceedings similarly described allegations that McKinnon used software to delete system logs after obtaining access. [Pinsent Masons]pinsentmasons.compentagon hacker mckinnon fights extraditionPinsent Masons'Pentagon hacker' McKinnon fights extradition28 Jul 2005 — McKinnon is accused of scanning networks for vulnerabilities and…
Why concealment mattered legally
The deletion of logs strengthened the prosecution’s narrative that the alleged conduct involved deliberate control rather than accidental or exploratory access. Combined with administrator privileges and remote-access software, log deletion was presented as one element of a broader pattern designed to preserve access while reducing the likelihood of discovery. [Wikisource]en.wikisource.orgUS v Gary Mc Kinnon IndictmentUS v Gary McKinnon Indictment27 Feb 2021 — Then, the defendant obtained administrator privileges on these computers and install…
The Broader Significance of the Remote-Control Allegations
The remote-access component of the McKinnon case became important because it addressed a key question: what did prosecutors believe he was doing after entering the systems? Their answer was that he allegedly established ongoing administrative control. The combination of administrator privileges, RemotelyAnywhere installations, copied password files and deleted logs was used to argue that the intrusions were persistent and managed rather than momentary. Department of Justice+2U.S. Department of War [justice.gov]justice.govDepartment of Justice IndictmentDepartment of JusticeIndictmentJanuary 24, 2012 — Defendant GARY MCKINNON was an unemployed computer system administrator… computers a…
Whether viewed through the indictments, the extradition litigation or later summaries of the case, these allegations formed a distinct mechanism within the broader prosecution. The government did not simply claim that McKinnon looked for information. It claimed that he acquired the tools and privileges needed to return to compromised machines, maintain access and conceal his presence once inside them. [UK Parliament+2Wikisource]publications.parliament.ukmckinn 1UK ParliamentMckinnon V Government of The United States of America…30 Jul 2008 — The appellant is a 42 year old British citizen, an un…
Amazon book picks
Further Reading
Books and field guides related to Why Remote Control Tools Mattered So Much. Use these as the next step if you want deeper reading beyond the article.
The Cuckoo's Egg
Rating: 4.5/5 from 8 Google Books ratings
Shows tracking of persistent unauthorised access.
Practical Malware Analysis
Helps readers understand software installed on compromised systems.
eBay marketplace picks
Marketplace Samples
Example marketplace items related to this page. Use the search link to explore similar finds on eBay.
Endnotes
-
Source: justice.gov
Title: Department of Justice Indictment
Link: https://www.justice.gov/archive/usao/nj/Press/files/pdffiles/Older/edva_mckinnon_indictment.pdfSource snippet
Department of JusticeIndictmentJanuary 24, 2012 — Defendant GARY MCKINNON was an unemployed computer system administrator... computers a...
Published: January 24, 2012
-
Source: publications.parliament.uk
Title: mckinn 1
Link: https://publications.parliament.uk/pa/ld200708/ldjudgmt/jd080730/mckinn-1.htmSource snippet
UK ParliamentMckinnon V Government of The United States of America...30 Jul 2008 — The appellant is a 42 year old British citizen, an un...
-
Source: media.defense.gov
Title: [Mc Kinnon]({{ ‘mc-kinnon/’ | relative_url }}) comphacker
Link: https://media.defense.gov/2002/Nov/12/2001711901/-1/-1/1/McKinnon_comphacker.pdfSource snippet
Department of WarU.S. Department of Justice United States Attorney Eastern...November 13, 2002 — 12 Nov 2002 — According to the indictme...
Published: November 13, 2002
-
Source: en.wikisource.org
Title: US v Gary Mc Kinnon Indictment
Link: https://en.wikisource.org/wiki/US_v_Gary_McKinnon_IndictmentSource snippet
US v Gary McKinnon Indictment27 Feb 2021 — Then, the defendant obtained administrator privileges on these computers and install...
-
Source: academia.edu
Link: https://www.academia.edu/61304781/The_politics_of_cyberconflictSource snippet
The politics of cyberconflictJanuary 1, 2006 — Remarkably, Gary McKinnon, a British hacker indicted for hacking into scores...
Published: January 1, 2006
-
Source: vlex.co.uk
Link: https://vlex.co.uk/vid/mckinnon-v-united-states-793612009Source snippet
McKinnon v United States of AmericaHaving gained access to those administrative accounts, he installed unauthorised remote access and...
-
Source: pinsentmasons.com
Title: pentagon hacker mckinnon fights extradition
Link: https://www.pinsentmasons.com/out-law/news/pentagon-hacker-mckinnon-fights-extraditionSource snippet
Pinsent Masons'Pentagon hacker' McKinnon fights extradition28 Jul 2005 — McKinnon is accused of scanning networks for vulnerabilities and...
-
Source: media.techtarget.com
Link: https://media.techtarget.com/rms/computerweekly/DowntimePDF/pdf/mckinnon.pdfSource snippet
re GARY MCKINNON23 Sept 2001 — McKinnon asserts that his sole reason for seeking access was to obtain information and that he had no mali...
Additional References
-
Source: gagadget.com
Link: https://gagadget.com/en/637971-how-conspiracy-theories-led-to-the-hacking-of-nasa-servers-and-ruined-a-sysadmins-life-gary-mckinnons-story/Source snippet
Gary McKinnon: A hacker in search of the truth about UFOs14 May 2025 — After 9/11, McKinnon, according to the investigation, deleted impo...
Published: May 2025
-
Source: scispace.com
Link: https://scispace.com/pdf/hackers-beware-the-cautionary-story-of-gary-mckinnon-4hb95wzdss.pdfSource snippet
Hackers beware: the cautionary story of Gary McKinnonGary McKinnon stands to be imminently extradited from the United Kingdom to the Unit...
-
Source: cybereason.com
Link: https://www.cybereason.com/blog/malicious-life-podcast-the-u.s-vs.-gary-mckinnonSource snippet
Malicious Life Podcast: The U.S. vs. Gary McKinnonGary McKinnon, a British hacker with Asperger's, broke into NASA and US Army networks t...
-
Source: instagram.com
Link: https://www.instagram.com/reel/DVWI2tIjsV-/Source snippet
🚨 He hacked NASA looking for UFO...Gary McKinnon, often called the “NASA hacker,” carried out one of the biggest military computer breac...
-
Source: theguardian.com
Link: https://www.theguardian.com/world/2005/jun/08/usa.ukSource snippet
'Military computer hacker' faces extradition to US8 Jun 2005 — Gary McKinnon, 39, faces extradition to the US over claims that he accesse...
-
Source: instagram.com
Title: DS Jbn2ER D
Link: https://www.instagram.com/p/DS_Jbn2ER_D/Source snippet
"It is still considered the "biggest military computer hack...In 2002 a systems administrator named Gary McKinnon pulled off the largest...
-
Source: tarrdaniel.com
Link: https://www.tarrdaniel.com/documents/Ufology/gary_mckinnon_case.htmlSource snippet
UFO - Ufology - The Gary McKinnon CaseIn 2001, a British man named Gary McKinnon allegedly carried out the "biggest military computer hac...
-
Source: youtube.com
Title: The Man Who Hacked the U.S. Government
Link: https://www.youtube.com/watch?v=ND0zQX1rGdgSource snippet
UK hacker to learn extradition fate...
-
Source: youtube.com
Title: Gary Mc Kinnon wins extradition battle
Link: https://www.youtube.com/watch?v=y4lecD44F5ESource snippet
UK Hacker extradition to US blocked...
-
Source: youtube.com
Title: UK hacker to learn extradition fate
Link: https://www.youtube.com/watch?v=LEvGU1b4yswSource snippet
Gary McKinnon wins extradition battle...
Topic Tree