Hacktivists make their causes known online while masked in anonymity
A woman uses her computer keyboard to type while surfing the internet in North Vancouver, B.C. ‚ÄúDigital dissent‚ÄĚ by hackers is a serious problem for companies and governments, as well as other groups that become targeted. ‚ÄĒ File photo by The Canadian Press
Digital dissenters known as hacktivists have developed a track record for disruption and attracting attention and are now considered one of the three main groups of attackers online, says security software company Websense.
Websense prefers not to talk specifically about hacker groups such as Anonymous or Lulzsec, but highlighted the general rise of these groups in recent years.
Hacktivists use the web for dissent rather than holding public protests, said Patrik Runald, director of security research at Websense Security Labs.
‚ÄúIf you look at the attacks that these hacktivists groups have done, it‚Äôs typically because they don‚Äôt agree with something or they want to embarrass an organization,‚ÄĚ Runald said from San Diego, Calif.
The work of hacker collective Anonymous has spawned no shortage of headlines.
Anonymous has taken credit for such acts as releasing the personal information of more than 4,000 bank executives on a U.S. government website.
It also reposted personal and professional information of members of the American Westboro Baptist Church after they tweeted they would picket the funerals of the 20 children who were murdered at Sandy Hook Elementary School in Newtown, Conn.
Hacktivists join cyber thieves and sophisticated attackers, including some state-sponsored agents, as the three main types of online attackers, he said.
‚ÄúYou can get a lot of attention by disrupting financial systems or by hacking into well-known organizations,‚ÄĚ Runald said.
But hacktivism isn‚Äôt as bad as it was a year or two ago, Runald said, adding hacker groups may be picking their causes more carefully.
‚ÄúBut those same actors are still out there. It‚Äôs not that there has been a ton of arrests. Even if there had been, there‚Äôs always people to take their place,‚ÄĚ he said.
‚ÄúOn the Internet, you can make it a lot harder for authorities to track down who you are.‚ÄĚ
Last spring, a variety of Quebec government websites were hacked by self-described Anonymous acti¬≠vists due to the government‚Äôs anti-protest law directed at student demonstrators protesting tuition hikes.
Anonymous also took credit for publishing the personal information of a number of Formula One car-race ticket holders during the student protests.
In addition, Anonymous has previously claimed responsibility for attacks on credit card companies Visa Inc. and MasterCard Inc. and eBay Inc.‚Äôs PayPal.
Carleton University associate professor Anil Somayaji said different groups of people at different times have used the name ‚ÄúAnonymous.‚ÄĚ
‚ÄúThere‚Äôs no organization that you can call up and say, ‚ÄėLet me talk to Anonymous,‚ÄĚ‚Äô said Somayaji, who teaches at Carleton‚Äôs School of Computer Science in Ottawa.
‚ÄúThat‚Äôs what makes large organizations nervous, because there‚Äôs no well defined way to stop it. There‚Äôs no one to target.
‚ÄúThe Internet gives small groups of people leverage in various ways.‚ÄĚ
Efforts to unmask these groups will get them angry and they will ‚Äúcome after you,‚ÄĚ he added.
Runald noted the example of U.S. security firm HBGary International and its dealings with Anonymous. HBGary had compiled names of members of Anonymous in 2011 and was preparing to go public when it was hacked by the group and its servers were broken into, emails were published and data destroyed.
Canada‚Äôs spy agency has said Anonymous isn‚Äôt just a thorn in the side of the powerful, but the new model for digital hacktivism.
A declassified report from the Canadian Security Intelligence Service has said although hacktivism ‚ÄĒ a blend of hacker smarts and social activism ‚ÄĒ has existed for years, it is only now that conditions have allowed such groups to bloom.
‚ÄúAnonymous is the face of modern hacktivism,‚ÄĚ the spy agency report said.
Runald said he doesn‚Äôt consider WikiLeaks founder Julian Assange a hacktivist because to the ‚Äúbest of our knowledge he isn‚Äôt the guy who hacks into anything‚ÄĚ ‚ÄĒ information is sent to him from hackers. WikiLeaks published about 250,000 secret U.S. State Department cables in December 2010.
Runald noted that when an organization has been hit by hacktivists, hacktivists don‚Äôt keep it a secret.
‚ÄúThey will talk about it. You don‚Äôt do a protest in silence, because what‚Äôs the point.‚ÄĚ