Reasor.com break-in
On Thursday 26-Dec-2002 the server running reasor.com was compromised, causing some down time while the infected files were removed and software packages updated to hopefully close the vulnerability.
There were several files left behind including the t0rn rootkit and mIRKfORCE.
The creator of t0rn was arrested in September by Scotland Yard. See the Businessweek article from 25-Sep-2002.
The most likely cause(s) seem to be exploitation of vulnerabilities in rpc.statd or wu-ftp. See CERT® Incident Note IN-2000-10