Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

7/5/2017
01:00 PM
50%
50%

'Crackas With Attitude' Hacker Sentenced for Targeting Government Officials

A North Carolina man known as 'Incursio' goes to prison for hacking government systems as well as senior government officials.

A federal judge sentenced a member of the "Crackas With Attitude" group to two years in prison for hacking into US government computer systems, including that of then-CIA director John Brennan.

Andrew Otto Boggs, 23, of North Wilkesboro, NC, was sentenced for gaining unauthorized access to government computer systems and online accounts of several high-level government officials, according to a Department of Justice report.

Boggs, who also goes by the alias of "Incursio," used social engineering with his cohorts to trick more than 10 targeted victims, which resulted in more than $1.5 million in losses to victims. The group hacked into the personal online accounts of the victims and their family members, as well as several government computer systems between October 2015 to February 2016.

In November 2015, Boggs and his cohorts used a victim's government credentials to gain illegal access to a confidential federal law enforcement database. Then, several months later, Boggs posted documents and personal information, such as names and contact information, of tens of thousands of Department of Justice and Department of Homeland Security employees on the public Internet.

Read more about Boggs sentencing here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
7/7/2017 | 8:27:43 AM
Re: Progress but....
@robert: Probably a bit more elevated than mere "online vandalism." There's a difference between spreading PII (DOBs, SSNs, etc.) -- which essentially encourages and leads to identity theft (if not worse) -- and simply doodling "Kilroy was here" where you're not supposed to.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
7/7/2017 | 8:21:53 AM
Re: Score one for the white hats
> "I'm waiting on our logo to be finished before we commence attacks on governments."

First things first.

Relevant: youtube.com/watch?v=ePBxm3V2_0E
cybersavior
50%
50%
cybersavior,
User Rank: Strategist
7/6/2017 | 11:46:42 AM
Score one for the white hats
"We'll only be hitting governments and security firms," Boggs said. "I'm waiting on our logo to be finished before we commence attacks on governments."

"I fight authority, authority always wins", said Mellencamp.
robertmcfarlane
50%
50%
robertmcfarlane,
User Rank: Author
7/6/2017 | 7:09:51 AM
Progress but....
there is still a lot of work to be done!

This story first broke back in 2015.  "Crackas With Attitude" is just a group of young misdirected hacktivists. 2 US citizens in their early 20's and 3 teens from the UK, with the ringleader only 15 years old.

The affidavit from the case show Boggs stating - "I want to carry on CRACKA's legacy if or when he is arrested. I know he will receive a harsh sentence because our government doesn't like being embarrassed, so there is no better way of protesting than hacking and leaking more documents over and over again."

The group definitely created a ton of mischief. They hacked federal employees and their spouses facebook/email/twitter/ISP accounts. They paid $20 to "phone bomb" victims cell phones. They called in bomb threats to police stations. The most serious hack was gaining access credentials to LEEP and then posting 34,000 lines of PII of govt officials and military personnel.

Reading through the Affidavit I would equate their actions to online vandalism. Make no mistake, it's great to see cybercrime successfully prosecuted. However, we still have a long way to go to make a dent tackling the real problem - vast international organized crime syndicates motivated by Billions in profits. 
Microsoft Patches Wormable RCE Vulns in Remote Desktop Services
Kelly Sheridan, Staff Editor, Dark Reading,  8/13/2019
The Mainframe Is Seeing a Resurgence. Is Security Keeping Pace?
Ray Overby, Co-Founder & President at Key Resources, Inc.,  8/15/2019
GitHub Named in Capital One Breach Lawsuit
Dark Reading Staff 8/14/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-15224
PUBLISHED: 2019-08-19
The rest-client gem 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.
CVE-2019-15225
PUBLISHED: 2019-08-19
In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.
CVE-2019-15223
PUBLISHED: 2019-08-19
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.
CVE-2019-15211
PUBLISHED: 2019-08-19
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.
CVE-2019-15212
PUBLISHED: 2019-08-19
An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.