Saturday | 30 August, 2008
Computerworld
Stupid hacker tricks: The folly of youth
Tech-savvy delinquents set the Net aflame with boneheaded exploits that earn them the wrong kind of fame
Andrew Brandt (InfoWorld) 06/05/2008 18:28:18

Computerworld Buyer's Guide - Vendors Matched to this Article
Related Features
  • +

    Blog: Regulatory Compliance & the Real Risk of Undetected Malware 01/02/2008 12:35:37

    With the emergence of regulatory laws borne out of experience from a variety of embarrassing security breaches, today's corporate leaders face a myriad of repercussions. These range from serious fines to jail time when found not in compliance with regulations such as Sarbanes-Oxley (SOX), Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley (GLB), and Payment Card Industry (PCI), etc.
  • +

    How to Be a Supremely Productive Person: A Chat With John Halamka 11/01/2008 10:59:10

    John Halamka has two CIO titles, a family, passionate rock-climbing and wine-making interests and a major-league blog habit. We discuss his celebrity turn in a BlackBerry ad, his tips for e-mail triage, how he sleeps three hours a night and why he now understands Britney Spears.
    John Halamka has two CIO titles, a family, passionate rock-climbing and wine-making interests and a major-league blog habit. We discuss his celebrity turn in a BlackBerry ad, his tips for e-mail triage, how he sleeps three hours a night and why he now understands Britney Spears.
  • +

    Your World. . . Hacked 02/10/2007 10:51:23

    As your business becomes more collaborative and global, the risks to your company’s trade secrets rise proportionally. Fortunately, there are new strategies to protect the data that allows you to compete
    The call to Bob Bailey, an IT executive with a major US government contractor, came on an otherwise ordinary day in October 2003. "Why are you attacking us?" demanded the caller, an IT leader with a Silicon Valley manufacturer. He wanted to know why Bailey's company had launched a denial-of-service attack against his network
  • +

    P&L Management 101 04/02/2008 13:09:05

    Now that you find yourself in charge of a revenue line, it’s time to start thinking about how to manage your new business
    CIOs often yearn for new worlds to conquer. For many, the first step on that journey is to earn the right to manage a P&L. In order to achieve that goal, executives listen to their external customers, engage with the business, focus on innovation and look for new revenue opportunities. These CIOs build new business models and sell them to their CEOs. In return, they receive the keys to P&L management
  • +

    Blog: Interview Questions To Avoid 30/11/2007 13:00:49

    After reading an article by business performance management consultant and executive coach Dan Coughlin on how to handle difficult corporate situations, it struck me how that same advice does not always apply to interviewing. Coughlin recommends confronting difficult situations head-on, such as when a peer is degrading your efforts around the office. But in job interviews, being direct isn't always the right approach. Some questions and situations surface during job interviews that you simply should not discuss. I've encountered a few recently during my job search. I share them with you here to show why the direct approach didn't work, along with some advice on how to handle these scenarios.
Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.

Newsletter Subscription

Sign up for our Computerworld newsletters!
Computerworld's twice-daily news service keeps you in touch with the latest, most important headlines from Australia and around the world.
Keep up with the latest virtualisation technologies, products, news and features.
RSS Feeds

Ah, youth. Ready to take on the world, today's generation of dynamic, tech-immersed youngsters have grown up alongside the Internet. Firsthand, and sometimes single-handedly, they have advanced some of today's hottest technology trends, from peer-to-peer networking, to massively multiplayer online games, to social networks and instant messaging. And along the way, a small, sociopathic number of them have behaved very, very badly.

Even the very definition of poor online behavior has been advanced by these cyberschnooks. Armed with broadband and lots of unsupervised free time in front of the computer, shielded by the relative anonymity of the Web, they've managed to transform themselves from Those Neighborhood Kids Who Set Fires and Torture Small Animals into international menaces who destroy online communities, damage the reputation and utility of online services, and steal anything worth taking from the Net -- all while mangling the English language as thoroughly as possible.

Fortunately for the rest of us, while using the Net's multiplier effect to their nefarious benefit, most are as sloppy and egotistical as we've come to expect from the young and delinquent, leaving a bread-crumb trail a mile wide for authorities to follow. And when they cross the line, as many of these tech-savvy Nelson Muntzes eventually do, it's with more than a little schadenfreude that white-hat vigilantes posse up to take them down.

It is to these ne'er-do-wells that this latest installment of 0 "Stupid hacker tricks" is dedicated. Call it Portrait of the Stupid Hacker as a Young Man.

You got Rbot in Mytob, you Zlob

Perp: Farid "Diab10" Essebar

Status: Currently a guest of the Moroccan prison system. His prison sentence is scheduled to end later this year.

Dossier: In 2005, at the ripe old age of 18, Farid Essebar probably thought he was untouchable. Working with accomplices in his home country of Morocco and in Turkey, the Russian-born Essebar wrote and distributed the Mytob, Rbot, and Zotob botnet Trojans. The malware infected thousands of computers at large corporations, US government departments, and media companies and was built to log keystrokes and steal financial and personal data.

Among the targets reported to have major outbreaks on August 15, 2005, were Daimler Chrysler, ABC News, CNN, The New York Times, the US Senate, the US Centers for Disease Control and Prevention, and Immigration and Customs Enforcement. Affected computers typically got into a cycle where they rebooted constantly, spread the malware to other computers on the network, then provided remote access to infected computers to a bot herder. The Zotob variant spread rapidly, taking advantage of unpatched Windows computers using a vulnerability disclosed only days earlier.

Essebar also fell prey to the braggadocio bug, a common ailment. When University of Pennsylvania security researcher David Taylor deliberately infected a computer with Zotob, and stumbled into one of Essebar's botnet IRC channels, he struck up a conversation with him. Surprisingly, Essebar responded, gloating that he earned substantial sums using his bot to install adware on infected computers.

But within seven days, the FBI, working in concert with local law enforcement and Microsoft employees, sent teams of computer experts to Rabat, Morocco, and Ankara, Turkey. On August 25, less than two weeks after the outbreak began, authorities arrested Essebar, as well as then-20-year-old Achraf Bahloul in Rabat. The team in Ankara paid a visit to, and arrested, then-21-year-old Atilla "Coder" Ekici, alleging that he paid Essebar to write the Zotob variant. A bit more than a year after the initial arrest, Moroccan authorities convicted Essebar of illegal access to computer systems, theft, credit card fraud, and conspiracy, and sentenced him to two years in prison.

Computerworld Buyer's Guide - Vendors Matched to this Article
Market Place

Computerworld Member Login


 

Prioritizing Services with IT Service Management (ITSM)

Computerworld Live Webinar
Wednesday 20th, August 2008
11:00am EST (Sydney, Australia)

To be repeated on:

Thursday 4th, September 2008
11:00am EST (Sydney Australia)

Sign up and receive a free copy of The Forrester WaveTM Service Desk Management Tools, Q2 2008 at the conclusion of the Webinar.

Attend and discover:

  • How to deliver value to your business through ITSM
  • Best practice ITSM implementation
  • Why emphasis is changing from optimizing IT management processes to better servicing customers and demonstrating real dollar value
  • If service-oriented ITSM is best for your business
Whitepaper

Revolutionising Back-up and Recovery

Rapid adoption of virtual server technology, and the challenges associated with the backup and recovery of ever-growing stores of information is causing a number of IT managers to reevaluate their data protection strategies. New backup and recovery methods which use data de-duplication technology to reduce capacity and network bandwidth requirements are being deployed to keep up with explosive data growth, shrinking backup windows, compliance initiatives and security concerns. Read on to find out more.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links