Home > Information Security Magazine > Features > Today's Attackers Can Find the Needle
EMAIL THIS
Information Security Magazine

  CURRENT ISSUE  

  FEATURES  

  COLUMNS  

  HOT PICK & PRODUCT REVIEWS  

  ARCHIVES  

  SUBSCRIBE/RENEW  
 

Today's Attackers Can Find the Needle
by Michael S. Mimoso & Marcia Savage
Issue: Jun 2006
printer-friendly
< PREV PAGE   |   1  |   2  |   3  |   4  |   5  |   6  |   NEXT PAGE  >

From massive botnets to targeted phishing and transacting Trojans, today's new breed of attacker is more dangerous than ever.

[IMAGE] [IMAGE] [IMAGE] [IMAGE]
[IMAGE] [IMAGE] [IMAGE] [IMAGE]
[IMAGE]
[IMAGE] [IMAGE] [IMAGE] [IMAGE]
More information from our sister site SearchSecurity.com

Learn how to protect your organization against organized cybercrime.

Visit our Guide to Thwarting Hacker Techniques for tips and expert advice on defending the enterprise against hackers.
[IMAGE]
[IMAGE] [IMAGE] [IMAGE] [IMAGE]
[IMAGE]
[IMAGE]

There's not much West Coast-cool to Christopher Maxwell and Jeanson James Ancheta. Both Californians are young and cocky, don't have great jobs and are staring down the barrel of multi-year prison sentences for herding bots and dropping adware on compromised computers.

This is the face of today's hacker: someone like Maxwell who, by day, works at Wal-Mart and, by night, prosecutors say, corrals drones for his botnet. Or like Ancheta, who was driving a BMW before his 21st birthday, and made more th...



an $60,000 from adware purveyors and from renting his botnet to spammers.

Their respective schemes were elaborate and lucrative.

In their wake are hundreds of thousands of unwitting victims preyed on through compromised corporate and home computers.

For some, like Northwest Hospital in Seattle, the toll was much more serious. Maxwell allegedly used the Sasser worm to exploit Windows machines running the vulnerable LSASS login verification service. The worm aggressively scanned the hospital's networks looking for additional vulnerable servers and clients and degrading service to the point where administrative functions like records management, patient admissions and billing were forced offline. Patient care continued, but the hospital had to reschedule one procedure and alter that patient's treatment schedule.

All of this, authorities say, to net a 15-cent commission for each bit of adware dropped onto an unsuspecting machine. But 15 cents on thousands of machines adds up quickly.

These cases, documented in voluminous court filings, are examples of the type of for-profit crime plaguing the Internet. The days of hackers vying for bragging rights with splashy tricks that show off their skills are long gone.

Today's cyberattackers are marshaling botnets, developing targeted code and hocking their exploits with one goal in mind: money. Although some attackers work alone--lone wolves, as one U.S. Department of Justice official puts it--others are part of large, organized operations.

For users, this trend can result in online fraud that drains bank accounts and steals identities. For businesses, the impact can be equally harsh. Confidential data gets lost, operations are disrupted, and reputations are tarnished.

< PREV PAGE   |   1  |   2  |   3  |   4  |   5  |   6  |   NEXT PAGE  >





TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts