GLOBAL HELL▊
A crew of teenagers who spray-painted the front doors of the United States government — the White House, the U.S. Army, the FBI — not to steal anything worth stealing, but to be seen doing it. They called it bragging rights. The government called it a $1.5 million cyber gang and went looking for someone to make an example of. It found two nineteen-year-olds. When the FBI raided one of them and warned him off, he answered nine days later by replacing the Army's home page with six words: Global Hell is alive. Global Hell will not die. He was wrong about the crew and right about the line — the crew died in a federal courthouse, and the line is the only part anyone still quotes.
Global Hell is alive. Global Hell will not die.
The message left on the defaced U.S. Army home page, June 28, 1999 — placed there by Chad Davis ("Mindphasr") nine days after the FBI had searched his apartment and told him to stop (Washington Post / The Tech, 1999)
- WHO
- globalHell ("gH") — an American website-defacement crew, active February 1998–1999, ~60 members at its height, formerly known as total-Ka0s FACT
- SCENE
- Founders/leaders: MostHateD (Patrick W. Gregory, a Texan) and Mindphasr (Chad Davis, of Green Bay / De Pere, Wisconsin). Part of the late-90s defacement wave alongside Level Seven, World of Hell and Global kOS; a direct ancestor of the later LulzSec deface-and-get-indicted cycle (see Crew Rivalries)
- THE DRAMA
- Defaced ~111–115 sites including the White House, the U.S. Army, the U.S. Postal Service, NASA, NOAA, Ameritech and US Cellular; flooded the FBI website offline in retaliation for a nationwide raid, then kept hacking after being warned
- RECORD
- Gregory pleaded guilty to conspiracy (computer hacking + telecommunications fraud), sentenced Sept 6, 2000 to 26 months + $154,529.86 restitution. Davis pleaded guilty to damaging the Army computer, sentenced March 1, 2000 to six months + $8,054 restitution + three years' supervised release FACT
- STATUS
- DISBANDED — dissolved 1999 under prosecution; one of the government's first internet-age "make an example" defacement cases
This file is not an accusation; the accusations were the government's, and the founders pleaded to them. It is a record of the exact moment website defacement stopped being a prank and became a federal test case — the crew that hit the White House and the Army loudly enough that the state needed convictions, and got two teenagers to hand it. The through-line is the gap between the myth — a million-dollar cyber gang — and the paperwork, which shows a defacement crew, some stolen conference-call codes, a lot of bragging, and two short sentences meant to be seen.
the drama timeline
ACT I — BRAGGING RIGHTS (1998)
Two nineteen-year-olds turn a defacement crew into a household name by picking the biggest doors they can find.
-
FEB 1998
The crew forms
Patrick Gregory (MostHateD) and Chad Davis (Mindphasr) found globalHell — a rebrand of an earlier crew called total-Ka0s. At its height it ran to roughly sixty members. By the crew's own account and everyone else's, gH was less interested in stealing than in being seen: it was, in the plainest terms, a defacement crew that wanted the credit.
-
1998–99
~111–115 defacements
Across its run the crew is credited with breaking and defacing roughly 111–115 websites, among them systems belonging to the U.S. Army, the White House, the U.S. Postal Service, NASA, NOAA, Ameritech and US Cellular. "They are into bragging rights," a security analyst told the Washington Post at the time. "They are vandals who are into it for the sense of chaos." That was the point of the exercise, and gH never pretended otherwise.
ACT II — THE SPRING THE GOVERNMENT NOTICED (May 1999)
gH goes for the marquee, the FBI comes for the crew, and the crew answers by knocking the FBI's own website offline.
-
EARLY MAY 1999
The White House
In early May 1999 the crew "went right to the top" and defaced the whitehouse.gov website with off-color messages, forcing the site offline. The defacement was mirrored at Attrition, the scene's contemporaneous record of who hit what. Crew member Eric Burns ("Zyklon") would later plead guilty specifically to defacing the White House site.
-
MAY 8–9, 1999
The crackdown
On May 8 the FBI arrested Eric Burns ("Zyklon"). The next day it launched raids in at least eleven cities, searching and questioning suspected gH members — several of them minors — and seizing equipment. No arrests came out of the sweep itself. It was a show of force aimed at a crew that had made a career of being visible.
-
MAY 26, 1999
gH knocks over the FBI
As the raids were still unfolding, gH retaliated by flooding the FBI's own website with thousands of simultaneous requests — an early denial-of-service — and the Bureau was forced to pull the site down rather than risk its server. Over the following week the crew also hit the Department of the Interior, the U.S. Senate, and the state of Virginia. It is one thing to deface a agency; it is another to make the FBI take its own front page offline mid-investigation.
ACT III — MAKING AN EXAMPLE (June 1999–September 2000)
The government picks the two loudest founders and turns a defacement crew into case law.
-
JUN 2, 1999
The warrant, ignored
FBI agents searched Chad Davis's Green Bay apartment, seized his equipment, and let him know the Bureau was cracking down on gH. Davis admitted he belonged to the crew. Then, per the federal complaint, he did the single worst thing a target under active investigation can do: he kept going.
-
JUN 28, 1999
"Global Hell will not die"
Twenty-six days after the FBI carried his computers out the door, Davis replaced the U.S. Army's home page with the message "Global Hell is alive. Global Hell will not die." The DOJ said he also modified files on an unclassified Army network to cover his tracks, preventing Army personnel from using the system. It was the defacement that made the case: a target, warned in person, taunting the Army in writing.
-
AUG 1999
The first arrest
The Justice Department charged Davis in a federal complaint — "Wisconsin Hacker Charged with Military Break-In." U.S. Attorney Thomas P. Schneider set the tone the whole prosecution would run on: "Interference with government computer systems [is] not just electronic vandalism — [it runs] the risk of compromising critical information infrastructure systems." Davis was the first of the crew to be arrested, and the template for the rest.
-
MAR 1, 2000
Davis sentenced
Having pleaded guilty on January 4, 2000 to intentionally damaging a protected computer, Davis was sentenced to six months' imprisonment, three years' supervised release, and $8,054 in restitution to the Army — plus a requirement to get an employer's approval before touching the internet. A million-dollar cyber gang, and the founding member's actual bill came to about eight thousand dollars.
-
SEP 6, 2000
MostHateD sentenced — and the crew dies
Gregory pleaded guilty to a single count of conspiracy folding together computer hacking and telecommunications fraud — he admitted stealing conferencing codes from AT&T, MCI and Latitude Communications to hold crew conference calls, calls that became key evidence against gH. He was sentenced to 26 months in prison, three years' supervised release, and $154,529.86 in restitution, reduced for identifying other members. The founder who named the crew helped name its members. Global Hell did, in fact, die — in a federal courthouse.
ACT IV — THE LINEAGE (1983–2011)
gH did not invent the crime or the crackdown. It sits in the middle of a straight line the scene has been walking for forty years.
-
1983–1990
The pattern is set
The template predates the web: the 414s raided in 1983, then Operation Sundevil and the Legion of Doom / Masters of Deception cases of 1990–94 — the first time the state picked a loud young crew and built a landmark prosecution on it (see Phiber Optik). The lesson every time: pick the crew that wants the credit, and the credit becomes the evidence.
-
1999
gH — the web-era example
globalHell is that same move, ported to the World Wide Web: a defacement crew that made itself the most visible target available, then became the government's early internet-age example. The medium changed — a home page instead of a phone switch — but the deal did not. Loud crew, big-name victim, short sentence, big headline.
-
2011
The descendants — LulzSec
Twelve years later the exact same story ran again, funnier and bigger: LulzSec defaced and dumped its way through the CIA site, the Senate, and half of Sony — "just because we could," the modern phrasing of "bragging rights" — and was undone the same way gH was, from the inside, when its leader Sabu turned informant. gH is the missing link between the phone-phreak prosecutions and the Anonymous era: the crew that proved a defaced government home page was worth a federal indictment, and that the loudest member is always the first to fall.
both sides, on the record
The prosecution's case: the intrusions were real, and the founders pleaded to them. gH broke into and defaced federal systems — the White House, the U.S. Army — knocked the FBI's website offline mid-investigation, and Davis modified files on an Army network specifically to evade detection, denying its use to Army personnel. This was not just graffiti on a public page; it was unauthorized access to government machines, and a court accepted the pleas.
Warned, and undeterred: Davis was searched by the FBI, told the Bureau was cracking down, and defaced the Army twenty-six days later. Gregory ran a telecommunications-fraud scheme — stolen conferencing codes from AT&T, MCI and Latitude — on the side. By the letter of the law, the government's case was clean, and the sentences were on the light end of what it could have sought.
The damage figure was theater: the "$1.5 million–$2.5 million cyber gang" was the prosecutors' number, and, as The Register noted at the time, such figures "are often wildly inflated" — padded with vague items like loss of brand-name confidence. The actual restitution a court ordered from the crew's own founding member: $8,054 [4].
Defacement is vandalism, not espionage: gH hit unclassified systems and swapped home pages. Nobody alleged stolen secrets or endangered lives; the crew's own analysts described "vandals into it for the sense of chaos." Gregory publicly argued that the intrusions exposed real security holes and served a public interest — the same claim every generation of the scene has made since [3].
The point was the example: two nineteen-year-olds drew a nationwide, eleven-city FBI operation and a U.S. Attorney's "critical infrastructure" rhetoric for a run of defacements — and walked out with six- and twenty-six-month sentences. The mismatch between the manhunt and the sentence is the tell: the state needed an internet-age example more than it needed these two kids [2].
YOU DECIDE
The intrusions were real, the founders pleaded to them, and defacing the Army to taunt an FBI investigation is exactly as dumb as it sounds. But strip away the "million-dollar cyber gang" and you are left with a defacement crew, some stolen conference-call minutes, a great deal of bragging, and two short sentences the government wanted the world to see. gH picked the loudest possible targets and got the loudest possible prosecution — and the loudest member, MostHateD, ended up naming the rest.
The archive does not deify, and it does not inflate. It keeps the defacement mirror, the DOJ complaint, and the restitution figure — $8,054 — that the headline never mentioned.
evidence locker
PRIMARY / GOVERNMENT
DOJ — "Wisconsin Hacker Charged with Military Break-In" (99-387) FACT — the federal complaint against Chad Davis ("Mindphasr") for hacking a protected U.S. Army computer at the Pentagon and modifying files to evade detection; source of the U.S. Attorney Schneider "not just electronic vandalism" quote and confirmation of the prior FBI search warrant.
justice.gov/archive/opa/pr/1999/August/387crm.htm
CONTEMPORANEOUS COVERAGE
Washington Post / The Tech — "FBI Raid Fails to Deter Cracker; 'Global Hell' Continues Attacks" ATTRIBUTED — Roberto Suro, Sept 1, 1999; the June 2 search, the June 28 Army defacement text, the early-May White House defacement, the 11-city raids, and the May 26 FBI-site flood.
tech.mit.edu/V119/N38/Hackers.38w.html The Register — "MostHateD to plead guilty in gLobaL heLL hack case" ATTRIBUTED — March 30, 2000; Gregory's conspiracy/teleconferencing-fraud plea, the "previously known as total-Ka0s" origin, Davis's six-month / $8,054 sentence, and the note that the Feds' damage figures "are often wildly inflated."
theregister.com/2000/03/30/mosthated_to_plead_guilty
REFERENCE
Wikipedia — globalHell ATTRIBUTED — dated index: Feb 1998 founding by Gregory (MostHateD) and Davis (Mindphasr), the ~111–115 defacements and target list, the May 1999 raids and FBI retaliation, the pleas, and the sentences (Gregory 26 months / $154,529.86, Sept 6, 2000; Davis six months / $8,054).
en.wikipedia.org/wiki/GlobalHell
CONTEXT & CROSS-LINKS
troll.fan — Sabu CROSS-LINK — the informant who sank LulzSec from the inside, as MostHateD's cooperation helped sink gH.
troll.fan/dossiers/sabu.html
The standard. globalHell was a real crew and its founders are public record: Patrick Gregory ("MostHateD") and Chad Davis ("Mindphasr") were each federally charged, pleaded guilty, and were sentenced, and both are named here on that basis and no other. The defacements of the White House and the U.S. Army, the FBI-site flood, and the two sentences are stated as fact, sourced to the DOJ, Attrition's defacement mirror, and contemporaneous Washington Post and Register reporting. The government's "million-dollar cyber gang" framing is given as the prosecution's, and the defense — that the damage figures were inflated and the conduct was defacement, not espionage — is given at full strength. No other members are named beyond those separately charged in the public record; no motive or private character beyond the record is asserted. If a line here couldn't survive scrutiny, it wouldn't be on the page.