Introduction to Cyber-Warfare - Proiect SEMPER FIDELIS

246 APPENDIX I. CHAPTER 6: LULZSEC HACKTIVITIESApproximate dateTarget, hacktivity, and modus operandi(where available)DetailsJune 2, 2011June 2, 2011June 2, 2011Sony BMG Belgium (sonybmg.be) database #Sownage 22intruded and exposed 21Sony Pictures may have seen private information ofmore than 1 million 23,24 of its customerscompromised, at least 50,000 of which arepublished 25–28Sony BMG Netherlands (sonybmg.nl) database #Sownage 34breached and exposed 33#Sownage, 29 SQL injection, nopassword encryption, 30 published onMediaFire, in order to expose Sony’svulnerability/inability to keep userdata safe 31,32June 3, 2011June 3, 2011Breach of Nintendo and posting of thevulnerabilities that allowed the intrusion and thetimely response to the breach on part of Nintendo, 35apology states “we like the N64 too much—wesincerely hope Nintendo plugs the gap” 36The Atlanta Infragard chapter experiences Web sitedefacement as well as the theft and subsequentpublication of personal data pertaining to 180members affiliated with the FBI; among the datagleaned are also the passwords of the CEO ofUnveillance, a network security company who laterreleases screenshots of alleged chats with LulzSecmembers trying to extort money and sensitiveinformation, while LulzSec retorted Unveillancehad offered money for attacking competitors’ Websites 38,39Exposing of vulnerabilities in thecompany’s IT-security 37In response to Pentagon consideringschemata according to which acts ofcomputer sabotage emanating fromother countries can be considered actsof war and would be responded toaccordingly 40,41June 4, 2011 Hacking magazine 2600 hacked 42 Due to its affiliation with Dutchhacker whom the LulzSec crewopposes 43June 6, 2011June 7, 2011June 8, 2011June 9, 2011Release of about 54 MB source code for SonyComputer Entertainment’s Developer Network siteand network maps from Sony BMG’s New Yorkoffices 44,4528-year-old Hector Xavier Monsegur aka (The Real)Sabu arrested (10.15 pm) in New York City’s LowerEast Side (Jacon Riis public housing development),Monsegur was member to Anonymous, LulzSec,and Internet Feds 48–52Defacement of Black & Berg CybersecurityConsulting Web site after challenge, turns downprize 54LulzSec hacks into the British National HealthService (NHS) 55–57#Sownage 46 ; the source code allows toreverse engineer the network andpossibly create new versions of thesoftware 47“rooter”, i.e., detection ofvulnerabilities in targeted computersystems 53Informing the administrators of theWeb site of the vulnerabilities viaTwitter 58–60Continued