Risk
1/11/2005
04:22 PM
Thomas Claburn
Thomas Claburn
Commentary
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Machine Wars

Cybercrime used to be personal. Today, it's professional and pre-programmed.

Cybercrime used to be personal. Today, it's professional and pre-programmed.Recall computer security expert Tsutomu Shimomura's effort to track hacker Kevin Mitnick in 1994. There was a personal rivalry fit for detective fiction.

But these days, as I discovered researching InformationWeek's upcoming security feature Machine Wars, hacking is automated.

There are many areas where expertise can be automated and made available through software. In medicine, we now have expert systems that automate aspects of the diagnostic process. So perhaps it's no surprise that hackers are releasing tools that automate attacks. But the advent of crime bots also owes something to emergence of organized gangs of cyber criminals. Experts indicate that such groups are increasingly funding the development of worms, viruses, and the like.

The arrest of members of a Russian cyber crime gang last July by the UK's National Hi-Tech Crime Unit and its counterparts in the Russian Federation represents an example of this trend. The gang is believed to have extorted hundreds of thousands of pounds from online bookmakers after crippling their servers with a denial of service attack to demonstrate the dangers of failing to pay protection money.

According to a spokesperson for the UK NHTCU, "The denial of service attacks were launched from compromised machines (ie: zombies) via a botnet."

Like John Henry in his storied race against a steam drill, IT admins are killing themselves trying to keep up.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading, January 2015
To find and fix exploits aimed directly at your business, stop waiting for alerts and become a proactive hunter.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7402
Published: 2014-12-17
Multiple unspecified vulnerabilities in request.c in c-icap 0.2.x allow remote attackers to cause a denial of service (crash) via a crafted ICAP request.

CVE-2014-5437
Published: 2014-12-17
Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote management via a request to remote_management.php,...

CVE-2014-5438
Published: 2014-12-17
Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary web script or HTML via the computer_name parameter to connected_devices_computers_edit.php.

CVE-2014-7170
Published: 2014-12-17
Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service.

CVE-2014-7285
Published: 2014-12-17
The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.