You are browsing the archive for criminal enterprise.

Bogus Hacker Site Nets Two Dozen

6:53 am in Cyber Crime, Featured, Posts, Technology by Bruce Bremer, MBA

The FBI reports that a two-year sting operation resulted in the arrests of two dozen hackers in 8 countries on four continents.  Of the 24 arrested, 11 were in the United States.  The remaining 13 were apprehended in Bosnia, Bulgaria, Germany, Italy, Japan, Norway, and the U.K.

Perhaps a hacker’s greatest vulnerability is a smug attitude that says “I’m smarter than everyone else.”  The truth is law enforcement employs some of the smartest and most talented anti-hackers out there.  They are also savvy enough to appeal to a criminal’s vanity.

That is why the uber-smart geeks at the FBI created their own web site.  The phony web site, “Carder Profit”, provided a venue in which hackers could brag about how much they stole and trade/sell malware and hacking tools.  Some of the tools included key-loggers that capture the keystrokes on the victim’s keyboard.  Digital voyeurs could download tools to hijack a victim’s laptop camera.  “Fulls” were offered for sale (a “full” is a full set of personal information required to steal an identity including names, social security number, date of birth, and mother’s maiden name).

Several features of the under-cover website were designed to enhance apprehension and increase the likelihood of a conviction.  First, a hacker had to be registered with a valid email address.  The site was used to identify the user’s Internet Protocol (IP) address.  New users would either need two existing members to vouch for them or pay a registration fee.  Discussion threads and private messages were recorded so bragging hackers could implicate themselves with admissible evidence.

It is the most poetic justice that these cyber-thugs were caught using the same tools that they used to prey on their innocent victims.  My only regret is that we didn’t get to see that smug look on their faces fade away to pale shock as the cuffs were put on.

Bruce Bremer, MBA is LET’s technology contributor. Bruce retired from the Submarine Service after 21 years of in-depth experience with complex electronic technology. Since then, he has been involved in fleet modernization and military research analysis. He teaches electronics and alternative energy at a Virginia college. Besides his MBA, Bruce earned a Bachelor of Science degree in computer networking. He has been volunteering in public safety for many years.

Learn more about this article here:

http://www.gsnmagazine.com/node/26643?c=cyber_security

http://www.sfgate.com/business/bloomberg/article/Two-Dozen-Arrested-in-13-Countries-in-Credit-Card-3665340.php

http://abcnews.go.com/Business/international-fbi-cyber-sting-nabs-37-operation-card/story?id=16653993#.T-x-w7VDwrV

“Hactivists” Shut Down DOJ Computers

1:18 pm in Featured, Posts, Technology by Bruce Bremer, MBA

Agents from the FBI and New Zealand police arrested the flamboyant majority owner of Megaupload, Kim Dotcom (no, really).   Dotcom,who legally changed his last name from Schmitz, is a German national residing near Auckland.  Police served an arrest warrant alleging that the corpulent corporate executive engaged in flagrant violation of international copyright law, costing the entertainment industry billions of dollars annually.

The arrest resembled a scene from a 1960’s James Bond movie.  Dozens of agents and police officers swarmed the compound while Dotcom fled behind a series of electronically activated security doors leading to an armored safe room.   After spending a considerable amount of time cutting through the security doors, authorities confronted Kim Dotcom who was holding a loaded shotgun.  No one was injured in the arrest.  Two illegal firearms were confiscated.

In retaliation, the self-described “hacktivist” organization Anonymous attempted an ambitious Distributed Denial of Service (DDoS) attack on the U.S. Department of Justice web servers.  Many of those computers engaged in the attack were doing so without the knowledge of their owners.  More than 5,600 computers were involved.  Anonymous hackers left a trail of links on Twitter and other social networking sites.  When clicked, an Internet tool called Low Orbit Ion Cannon (LOIC) activated.

Scratching your head?  OK, this is what happened.  Hackers from Anonymous inserted innocuous-looking links in Twitter pages that actually linked to LOIC.  This tool was programmed to send a stream of junk data requests to the DOJ computers. A single computer doing this will be ignored and the normal legitimate traffic will get through.

However, a Distributed Denial of Service attack enables thousands of computers to send junk data requests to the same server at the same time, completely disabling the web site.  So long as the server is flooded with this malicious stream of data requests, it is inoperable (according to plan).  The DOJ responded with their own software to identify the IP address of the attacking computers so they can be ignored.

Besides the DOJ, many entertainment industry servers were attacked such as the Motion Picture Association of America (MPAA), the Recording Industry Association of America (RIAA), and Universal Music.

Cyberpunks such as Anonymous are more than an annoyance, they are dangerous.  Anonymous hackers recently hacked the Bay Area Rapid Transit (BART) system, downloaded and published the names, addresses, and credit card information of BART transit police officers and other employees.  Anonymous was protesting both the BART officer-involved shooting of Charles Hill on July 3, 2011 and the transit authority’s decision to silence underground cell phone service to squelch a planned protest.

Anarchists are not lovable.  They are not useful.  Anarchists share many characteristics of Kim Dotcom.  Their outlook is essentially hedonistic.  They, by nature, defy any type of authority that would stand between the population and mass bedlam.  There are no hospitals, charities, or universities named after them.  There are, however, many prison cots waiting for them.

Learn more about this article here:

http://bostonherald.com/business/technology/general/view.bg?articleid=1397802&srvc=business&position=4

http://www.google.com/hostednews/ap/article/ALeqM5gEA3V6KPPZQgHhp2Ti0jIKxhWEyg?docId=c631ebf4d27c4cbc9b5b57ed1b61c7d5

http://gizmodo.com/5709630/what-is-loic

http://www.sfexaminer.com/local/2011/08/anonymous-hacks-bart-police-officer-information-posts-it-online