The Famous Brett Wat's Journal: I notified the Australian Federal Police

It wasn't my idea to contact the police. I wasn't thinking along those lines, because I was trying to determine what action I could take to defend myself, and "contact the police" wasn't even on that list. With all due respect to the fine officers of the Australian Federal Police, I doubt they can do much about it, particularly in the short term. Maybe in the longer term if this nuisance keeps up, and spreads to more victims than just myself.

But several people, having read the threat letters, suggest I contact the feds. I have a close friend with a relative in the AFP, and he was able to provide clear instructions on how to go about it. I think it makes sense to contact the police over a matter like this, even if you don't think they'll help immediately, because it means they have something on record.

And since I think it makes sense to have it on an even wider record than that, I'll reproduce here (by hand, alas, so there may be errors) the body of my first letter to the Australian Federal Police. Enjoy.

Date: Friday, 21st March, 2003
Re: Reporting receipt of extortionate demands via email.

To the Australian Federal Police,

My name is Brett Watson, and I am employed in the field of Internet technology and software engineering. In addition to my professional interests, I also maintain an Internet presence at home as a hobby and means of self-education. This service has recently come under attack.

The incident was first brought to my attention on 16/03/03 when I noted an increase in activity on my system. At first I was unable to determine the cause of the increase, but by early 18/03/03 I determined that an unknown party (or parties) was generating massive amounts of email, forged so as to appear to come from me, inviting people to visit my website.

People generally take rather badly to this form of advertising (spamming), and in the interests of protecting my reputation and preserving my service, I was obliged to take a number of precautionary measures against this attack of unknown motives and origin. Such precautionary measures were to be on-going over the next several days as the attackers adjusted their techniques to suit my shift in defence.

Earlier today (21/03/03) I finally received two email messages which claim responsibility for this attack, and threaten to scale up the attack against me, my site, and my Internet service providers, until I meet their extortionate demands, or I "no longer exist".

I have attached, as attachments #1 and #2, the two emails I received, which claim responsibility for the attack, and which set out the extortionate demands. The demands are for censorship of the site, so that it conforms with their standards, rather than demands for money. As attachment #3, I provide a more detailed report of my experiences detecting and dealing with the initial attack, written on 19/03/03 (prior to receiving the extortionate demands). Attachment #3 also serves as a not-atypical example of the content of the site that they are threatening.

The tone of the letters of demand (attachments #1 and #2) paint a picture of immature teenage boys playing Internet war games, rather than serious, professional extortionists. Even so, if they wish to take hostile action against my site, they will find it ridiculously easy to do so. My site is a hobby, and I cannot afford the employment of full-time staff and high-capacity network connections that would allow a business-oriented site to ride out this kind of storm. I may be obliged to shut down certain services just to avoid the expense associated with an attack.

I request that the police view this matter with the same seriousness that they would were it physical damage to private property and associated extortionate behaviour, and I will be only too happy to assist in your enquiries where requested to do so.

I have not attempted to make contact with the offending parties, nor do I intend to do so.

Regards,
Brett Watson