31.10.2012 Views

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

“Y’all were <strong>the</strong> inspiration I needed to mess with my roommate’s Facebook beyond all repair,” said ano<strong>the</strong>r.<br />

“Good to see some refreshing carnage,” Topiary told <strong>the</strong> horde, whom he now referred to as lulz lizards; he called <strong>the</strong>ir intended victims<br />

peons. “Releasing 62,000 possible account combinations is <strong>the</strong> loot for creative minds to scour. Think <strong>of</strong> it like digging a very unique<br />

mineshaft.” Pretty soon more than forty thousand people had downloaded <strong>the</strong> database and were using it to hack all manner <strong>of</strong> social media<br />

accounts.<br />

LulzSec’s 220,000 Twitter followers had become a community for Topiary as much as an audience. For <strong>the</strong> next few days he was<br />

constantly joking with <strong>the</strong>m on Twitter, telling <strong>the</strong> FBIPressOffice Twitter account that “we pissed in your Cheerios,” <strong>the</strong>n funneling more<br />

requests to hit o<strong>the</strong>r smaller websites and sending <strong>the</strong> Twitter followers to a funny video and watching <strong>the</strong> site crash.<br />

Anyone who had met Topiary would see hardly any similarity between his real-life persona and <strong>the</strong> cocksure voice he used as LulzSec’s<br />

front man. It was all an act, and to him it felt like acting. A few times he would try to sound like Sabu or Kayla so that it would look like<br />

more than one person was manning <strong>the</strong> feed, but for <strong>the</strong> most part he was speaking for <strong>the</strong> monocled man with <strong>the</strong> top hat. And dozens <strong>of</strong><br />

people constantly asked how <strong>the</strong>y could join in.<br />

“<strong>We</strong>’ve got all this attention now,” Topiary said quietly to his core team, “and people asking to join us. How about I write something about<br />

<strong>the</strong> new Antisec movement attacking governments and banks? Is everyone up for that?”<br />

The o<strong>the</strong>rs in <strong>the</strong> team, including Sabu, said yes. With a respected name like WikiLeaks now silently behind <strong>the</strong>m it made sense to, for<br />

once, put a serious face on what <strong>the</strong>y were doing. Straightaway Topiary wrote up a new <strong>of</strong>ficial statement saying that Antisec would “begin<br />

today,” calling on more people to join <strong>the</strong> cyber insurgency LulzSec was spontaneously reviving. On <strong>the</strong> evening <strong>of</strong> Sunday, June 19, he<br />

published a statement inviting white hats, black hats, and gray hats, and just about anyone else, to join <strong>the</strong> rebellion. Later he said that writing<br />

it was, as usual, like writing a piece <strong>of</strong> fiction:<br />

“Salutations Lulz Lizards,” it started. “As we’re aw<strong>are</strong>, <strong>the</strong> government and whitehat security terrorists across <strong>the</strong> <strong>world</strong> continue to<br />

dominate and control our Internet ocean…<strong>We</strong> <strong>are</strong> now teaming up with Anonymous and all affiliated battleships….<strong>We</strong> fully endorse <strong>the</strong><br />

flaunting <strong>of</strong> <strong>the</strong> word ‘Antisec’ on any government website defacement or physical graffiti art.…Top priority is to steal and leak any<br />

classified government information, including email spools and documentation. Prime targets <strong>are</strong> banks and o<strong>the</strong>r high-ranking<br />

establishments.”<br />

Not really that interested in hitting banks and governments but more interested in how people would respond to <strong>the</strong> call to arms, he posted<br />

<strong>the</strong> <strong>of</strong>ficial statement and headed to bed. His mind was still racing after ano<strong>the</strong>r chaotic day keeping up with <strong>the</strong> media, his constantly<br />

changing passwords, <strong>the</strong> fast-paced operations, <strong>the</strong> new supporters, <strong>the</strong> tweets, <strong>the</strong> reactions, <strong>the</strong> uproar, <strong>the</strong> chaos <strong>of</strong> seeing more than a<br />

thousand news and blog posts written over a Pastebin post he’d typed out on Notepad. He had never expected this much to happen when he<br />

and Sabu had first discussed getting <strong>the</strong> team back toge<strong>the</strong>r. It did not feel like things were spiraling out <strong>of</strong> control, at least not yet. If<br />

anything, Topiary was starting to feel that old, familiar itch in <strong>the</strong> back <strong>of</strong> his mind. A sense that this latest experience in disrupting <strong>the</strong><br />

Internet through LulzSec had run its course and was becoming tedious. It was an echo <strong>of</strong> <strong>the</strong> restlessness he’d felt with AnonOps only a few<br />

months ago.<br />

In <strong>the</strong> meantime, Ryan had become increasingly annoying to Topiary with his lonely and desperate bids for attention. A couple <strong>of</strong> days<br />

earlier, after twelve hours away from his computer because he’d been asleep, Topiary found more than a dozen messages from Ryan on his<br />

laptop asking why he was being ignored.<br />

Of course, <strong>the</strong>re was no way Topiary could stop. He was <strong>the</strong> main mouthpiece <strong>of</strong> LulzSec and a prime motivator for <strong>the</strong> team and its<br />

supporters, and leaving would be an enormous practical and emotional effort.<br />

It was hard to sleep. Topiary now habitually glanced out <strong>of</strong> his window whenever he heard a car drive past. He said privately that he was<br />

expecting a raid any day. Acceptance seemed <strong>the</strong> best way to deal with <strong>the</strong>se things. His emotions lurched from <strong>the</strong> high <strong>of</strong> an outrageous<br />

new leak to <strong>the</strong> gut-wrenching paranoia that he was about to get doxed or, worse, raided. Ryan thought <strong>the</strong> same. He claimed he <strong>of</strong>ten went<br />

to sleep each night expecting to be raided <strong>the</strong> next day.<br />

“I’ve given up caring,” Topiary said. Was he imagining what jail might be like? “I don’t like to think about that,” he answered. He also<br />

couldn’t help thinking about <strong>the</strong> second, stiffly worded tweet that Greg Hoglund had added just few days before, <strong>the</strong> one he had bli<strong>the</strong>ly<br />

dismissed at <strong>the</strong> time.<br />

“Aaron,” Hoglund had said. “I wanted to be here to see <strong>the</strong> fruits <strong>of</strong> our labour over <strong>the</strong> last two months. LOL.”<br />

Topiary woke up on Monday, June 20, to a surprise. There had been a much bigger response to his Antisec statement than he had<br />

anticipated. Tens <strong>of</strong> thousands <strong>of</strong> people had read it (eventually almost a quarter <strong>of</strong> a million accessed <strong>the</strong> page) and <strong>the</strong> media was eagerly<br />

reporting <strong>the</strong> line that LulzSec had “teamed up with Anonymous” and decl<strong>are</strong>d war on just about everything in a position <strong>of</strong> authority in <strong>the</strong><br />

hope <strong>of</strong> rooting out corruption. It seemed that cyber anarchists everywhere were running amok. That day CBS local TV news for San Diego<br />

reported on some mysterious black graffiti that had appe<strong>are</strong>d on <strong>the</strong> boardwalk along Mission Beach: a crudely drawn man in a top hat and<br />

mustache and <strong>the</strong> words “Antisec” in a speech bubble.<br />

“I was taken aback,” Topiary later remembered. “My Notepad-forged declaration <strong>of</strong> Antisec had <strong>the</strong> AnonOps servers teeming with users.<br />

It was like Operation Payback’s prime on steroids. For a while I felt horribly guilty for some reason. The words were almost fiction to me,<br />

just ano<strong>the</strong>r piece <strong>of</strong> writing, but it got through to so many people, who were now putting <strong>the</strong>ir necks on <strong>the</strong> line for <strong>the</strong> cause. Someone had<br />

even gone out and tagged beach walls with Antisec, getting on <strong>the</strong> news.”<br />

Ryan was also galvanized by <strong>the</strong> new mass enthusiasm for Antisec. Naturally, he became more eager than ever to put his botnet to good<br />

use. Later that day he started trying to lash out at o<strong>the</strong>r major targets: Britain’s Ministry <strong>of</strong> Finance, <strong>the</strong>n <strong>the</strong> NSA, <strong>the</strong>n <strong>the</strong> FBI. Finally, he<br />

successfully hit <strong>the</strong> site for <strong>the</strong> U.K.’s Serious Organised Crime Agency (SOCA). Anything ending in .mil or .gov, he wanted to get. Topiary<br />

watched, transfixed, and after a while decided it would be good to calm Ryan down. He didn’t want things getting out <strong>of</strong> hand. Even so, he<br />

didn’t want to let LulzSec’s credit for <strong>the</strong> SOCA hit go to waste, so he announced it on Twitter, again without <strong>the</strong> usual loud flair. “Tango<br />

down—soca.gov.uk—in <strong>the</strong> name <strong>of</strong> Antisec.”<br />

Comp<strong>are</strong>d to <strong>the</strong> CIA, this felt like a minor attack, and it hadn’t even completely worked, since <strong>the</strong> SOCA site was down only for certain<br />

visitors. But moments later, someone at SOCA sent an e-mail to London’s Metropolitan Police saying <strong>the</strong> website had been brought down.<br />

Ryan had been launching DDoS attacks from his computer for many months, but now, finally, <strong>the</strong> police were spurred into action.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!