31.10.2012 Views

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

“Is everyone excited by this news?” Later he added: “Message to Interpol: SUCK MY DICK.”<br />

But many people in Anonymous had <strong>the</strong>ir suspicions about Sabu. Why had everyone else who had founded LulzSec been caught while<br />

<strong>the</strong> loudmou<strong>the</strong>d ringleader who was widely known to live in New York and be <strong>of</strong> Puerto Rican descent was still at large?<br />

Among <strong>the</strong> more suspicious was Mike “Virus” Nieves, a <strong>hacker</strong> whom Sabu had collaborated with during LulzSec. On August 16, a day<br />

after Sabu’s second court appearance, where he had agreed in writing to work for <strong>the</strong> FBI, Virus accused Sabu outright <strong>of</strong> being a snitch.<br />

The conversation started when Sabu first approached Virus and made <strong>the</strong> veiled accusation that a friend <strong>of</strong> Virus’s was an informant. Virus<br />

saw through this deliberate tactic straightaway. It was a typical strategy among <strong>hacker</strong> informants: to faze someone who suspected you <strong>of</strong><br />

being a snitch, you accused him <strong>of</strong> being a snitch. Their long and eventually hostile chat took place two weeks after Jake Davis had walked<br />

out <strong>of</strong> his first court appearance.<br />

“Regarding Topiary,” Virus told him. “You ratted him out. It’s so obvious, Sabu.”<br />

“You better watch your fucking mouth because I’m not a rat,” Sabu wrote back. “And I definitely didn’t rat my own boy.” Virus wasn’t<br />

listening.<br />

“I can spot a rodent a mile away,” he said, adding for good measure, “‘Antisec,’ what a fucking joke.”<br />

“For a fucking joke it’s doing more mayhem than it did a decade ago,” Sabu retorted.<br />

“You don’t even get what Antisec was about,” said Virus. “You’re not owning whitehats. Just dumbass foreign .govs.”<br />

“I was actually involved,” said Sabu. “Big difference man. I don’t sit here and run automated tools. I’m a seasoned security researcher<br />

going back to mid-to-late 90s.”<br />

“You’re a low-level blackhat that got owned,” Virus shot back. “I’m done being your friend. You’re way too shady and I’m too old for<br />

this childish crap. Your lame-ass Antisec movement is hitting anything it can.” In truth, Sabu’s Antisec followers were <strong>of</strong>ten thwarted when<br />

<strong>the</strong>y tried to hit out at “anything <strong>the</strong>y could.” The FBI was taking advantage <strong>of</strong> Sabu’s cult-leader status by following up each <strong>hacker</strong> who<br />

presented a vulnerability to his mentor in <strong>the</strong> hope <strong>of</strong> a pat on <strong>the</strong> head. Sabu sometimes received more than two dozen vulnerabilities a day,<br />

and each time he would alert his FBI handlers. By August <strong>of</strong> 2011, he had helped <strong>the</strong> FBI patch a hundred and fifty vulnerabilities in<br />

computer networks that o<strong>the</strong>r <strong>hacker</strong>s were targeting or was at least helping to mitigate <strong>the</strong> damage. Over <strong>the</strong> coming months, he would<br />

reportedly assist in alerting about three hundred government and corporate organizations about potential attacks by <strong>hacker</strong>s with Anonymous,<br />

allowing <strong>the</strong>m to patch flaws in <strong>the</strong>ir networks.<br />

As Virus brought his stand<strong>of</strong>f with Sabu to an end, he waxed pragmatic about what Sabu was probably doing. “Quite frankly, I don’t c<strong>are</strong><br />

if you’re working with <strong>the</strong> Feds to clean up <strong>the</strong> mess you created and getting your so called ‘friends’ arrested,” he said. “It’s human nature.”<br />

“My nigga,” said Sabu. “You seriously need to stop saying that.”<br />

“Or?”<br />

“<strong>We</strong>’ll meet up in Manhattan and talk it out face to face.”<br />

“I know your tactics, and you won’t gain access to any <strong>of</strong> my shit,” said Virus.<br />

“Bro, you know me less than <strong>the</strong> Feds do,” Sabu said, momentarily hinting at his working relationship <strong>the</strong> FBI. “But let’s be real.”<br />

The two went back and forth about how <strong>of</strong>fensive snitch was before Sabu observed, “You’re talking a lot <strong>of</strong> shit, like you have some issue<br />

with me. I always gave you mad love even from <strong>the</strong> first day I met you.”<br />

“I don’t c<strong>are</strong> for your love,” said Virus with finality. “There is no ‘love’ on <strong>the</strong> internet.” This seemed to ring true above all else. Sabu may<br />

have been a skilled rooter who could find network vulnerabilities and exploit <strong>the</strong>m, but his greatest skill was hacking into people’s minds. He<br />

lied to <strong>the</strong> very team members he had brought toge<strong>the</strong>r and led, all <strong>the</strong> while helping <strong>the</strong> police build up charges against <strong>the</strong>m and corroborate<br />

<strong>the</strong>ir identities. All <strong>the</strong> more impressive was that Sabu’s charisma and lies were so effective that o<strong>the</strong>r <strong>hacker</strong>s continued working with him,<br />

even after Topiary, Tflow, and Kayla were arrested, and even as o<strong>the</strong>r <strong>hacker</strong>s remained suspicious <strong>of</strong> him. It was even said to be an open<br />

secret among <strong>hacker</strong>s in New York City that “Sabu” was Monsegur, with one rumor doing <strong>the</strong> rounds that local <strong>hacker</strong>s had sprayed graffiti<br />

on his building.<br />

On <strong>the</strong> same day as Sabu’s confrontation with Mike Virus, a group <strong>of</strong> self-styled anti-Anonymous investigators published a blog post<br />

claiming to dox Sabu. This time it included a photo <strong>of</strong> a large Latino-looking man in his late twenties, wearing a lea<strong>the</strong>r jacket and a hat. The<br />

photo was <strong>of</strong> Monsegur. It also showed a detailed history <strong>of</strong> his exploits, and his IP address. It was perhaps <strong>the</strong> most comprehensive dox to<br />

date. The following day, August 17, Sabu posted a cryptic message on Twitter, invoking a quote from <strong>the</strong> movie The Usual Suspects about<br />

<strong>the</strong> film’s mythical bad guy, Keyser Söze: “The greatest trick <strong>the</strong> devil ever pulled was convincing <strong>the</strong> <strong>world</strong> he did not exist. And like that…<br />

he is gone.” For <strong>the</strong> next few weeks, nobody heard a peep from Sabu on public IRC or Twitter. Most assumed that he had ei<strong>the</strong>r fled or been<br />

caught. Then exactly a month later, on September 17, he started tweeting again, starting with:<br />

“They tried to snitch me out, troll me, dox every one around me, bait me into endless arguments but <strong>the</strong>re’s one thing <strong>the</strong>y can’t do: STOP<br />

ME!”<br />

All at once, Sabu dived back into <strong>the</strong> <strong>world</strong> <strong>of</strong> Anonymous and Antisec, jumping into conversations on public IRC channels and asking to<br />

hear reports from o<strong>the</strong>r Antisec <strong>hacker</strong>s. For <strong>the</strong> most part, he didn’t join in any attacks. O<strong>the</strong>r <strong>hacker</strong>s close to Sabu at <strong>the</strong> time do not<br />

remember him hacking anything for <strong>the</strong> months after he came back. They knew that he was bragging publicly on Twitter about attacks he<br />

had carried out but assumed this was part <strong>of</strong> his role as a mouthpiece for Anonymous and Antisec. Sabu instead pushed <strong>the</strong> “younger ones”<br />

with Anonymous by praising <strong>the</strong>m and <strong>of</strong>fering to help facilitate attacks, one source said.<br />

At one point, for instance, he <strong>of</strong>fered to help Anonymous <strong>hacker</strong>s in Brazil get root access to government servers. (Hacktivism is extremely<br />

popular in Brazil, in part because <strong>the</strong> country has <strong>the</strong> highest rate <strong>of</strong> Twitter usage and also because <strong>of</strong> long-standing controversy over<br />

government corruption.) Sabu acted as <strong>the</strong> mediator, talking to <strong>the</strong> Brazilian hacktivists, <strong>the</strong>n telling his crew <strong>of</strong> <strong>hacker</strong>s what <strong>the</strong> Brazilians<br />

wanted to deface. His crew rooted <strong>the</strong> Brazilian servers and <strong>the</strong>n sent Sabu <strong>the</strong> login credentials to pass on to <strong>the</strong> Brazilian <strong>hacker</strong>s.<br />

“<strong>We</strong> can’t remember one [hack] he did, even before he got busted,” said one <strong>hacker</strong> who had been working with Sabu from at least late<br />

2011. “He liked to say he did it all. He did not.”<br />

It is unclear to what extent Sabu was allowed to hack with impunity during his time assisting <strong>the</strong> FBI. There <strong>are</strong> different accounts. Some<br />

say that in his role to corroborate <strong>the</strong> public claims by Anonymous that a company or government agency had been hacked, he would enter<br />

<strong>the</strong> targeted network and check that <strong>the</strong> vulnerability was <strong>the</strong>re. O<strong>the</strong>rs have said he would simply check <strong>the</strong> claims out by talking to o<strong>the</strong>r<br />

<strong>hacker</strong>s in private IRC rooms. It was probably a bit <strong>of</strong> both. For <strong>the</strong> most part, he was ei<strong>the</strong>r giving advice, barking orders, or trying to keep

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!