Attacks/Breaches
2/6/2012
12:17 PM
Connect Directly
RSS
E-Mail
50%
50%

Who Is Anonymous: 10 Key Facts

Anonymous 'hacktivists' aim to expose what they call government and establishment hypocrisy. Take a closer look at the group, its offshoots, and its infamous attacks.
Previous
3 of 10
Next


One of the most fascinating chapters in Anonymous history concerned Aaron Barr, the CEO of HBGary Federal, who'd bragged about how he'd infiltrated Anonymous, and was set to reveal the identities of its key leaders. Anonymous responded by hacking into HBGary's email server less than 24 hours later, and claimed that a 16-year-old girl had socially engineered the social-media-friendly Barr. Anonymous (including future LulzSec leader Sabu, the rumor goes) then released a slew of emails claiming that HBGary had been retained by Bank of America--on the recommendation of the Department of Justice--to help it wage an anti-WikiLeaks campaign, after the whistle-blowing website claimed to have damning emails about the bank's practices. Other emails, meanwhile, detailed secret cyber-warfare tool-building programs, as well as legally questionable activities. Barr, meanwhile, cancelled his appearance on a DefCon July 2011 panel titled "Whoever Fights Monsters: Aaron Barr, Anonymous, and Ourselves."

Photo: Day 9 Occupy Wall Street September 25 2011 by David Shankbone, Flickr. Used with permission via a Creative Commons license.

RECOMMENDED READING

Black Hat Pwnies Nominate LulzSec, Anonymous

LulzSec Hackers Retire: Time To Rethink Risk

Cracking Bin Laden's Hard Drives

14 Enterprise Security Tips From Anonymous Hacker

Twitter Must Turn Over Records In Wikileaks Case

Previous
3 of 10
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
rjones2818
50%
50%
rjones2818,
User Rank: Moderator
5/22/2012 | 7:05:52 PM
re: Who Is Anonymous: 10 Key Facts
Interesting article. The Guy Fawkes mask idea is from the graphic novel for 'V for Vendetta' by Alan Moore and David Lloyd.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3345
Published: 2014-08-28
The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 does not properly check authorization for administrative web pages, which allows remote attackers to modify the product via a crafted URL, aka Bug ID CSCuq31503.

CVE-2014-3347
Published: 2014-08-28
Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid s...

CVE-2014-4199
Published: 2014-08-28
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

CVE-2014-4200
Published: 2014-08-28
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.

CVE-2014-0761
Published: 2014-08-27
The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
This episode of Dark Reading Radio looks at infosec security from the big enterprise POV with interviews featuring Ron Plesco, Cyber Investigations, Intelligence & Analytics at KPMG; and Chris Inglis & Chris Bell of Securonix.