Threat Intelligence

7/5/2017
01:00 PM
50%
50%

'Crackas With Attitude' Hacker Sentenced for Targeting Government Officials

A North Carolina man known as 'Incursio' goes to prison for hacking government systems as well as senior government officials.

A federal judge sentenced a member of the "Crackas With Attitude" group to two years in prison for hacking into US government computer systems, including that of then-CIA director John Brennan.

Andrew Otto Boggs, 23, of North Wilkesboro, NC, was sentenced for gaining unauthorized access to government computer systems and online accounts of several high-level government officials, according to a Department of Justice report.

Boggs, who also goes by the alias of "Incursio," used social engineering with his cohorts to trick more than 10 targeted victims, which resulted in more than $1.5 million in losses to victims. The group hacked into the personal online accounts of the victims and their family members, as well as several government computer systems between October 2015 to February 2016.

In November 2015, Boggs and his cohorts used a victim's government credentials to gain illegal access to a confidential federal law enforcement database. Then, several months later, Boggs posted documents and personal information, such as names and contact information, of tens of thousands of Department of Justice and Department of Homeland Security employees on the public Internet.

Read more about Boggs sentencing here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
7/7/2017 | 8:27:43 AM
Re: Progress but....
@robert: Probably a bit more elevated than mere "online vandalism." There's a difference between spreading PII (DOBs, SSNs, etc.) -- which essentially encourages and leads to identity theft (if not worse) -- and simply doodling "Kilroy was here" where you're not supposed to.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
7/7/2017 | 8:21:53 AM
Re: Score one for the white hats
> "I'm waiting on our logo to be finished before we commence attacks on governments."

First things first.

Relevant: youtube.com/watch?v=ePBxm3V2_0E
cybersavior
50%
50%
cybersavior,
User Rank: Strategist
7/6/2017 | 11:46:42 AM
Score one for the white hats
"We'll only be hitting governments and security firms," Boggs said. "I'm waiting on our logo to be finished before we commence attacks on governments."

"I fight authority, authority always wins", said Mellencamp.
robertmcfarlane
50%
50%
robertmcfarlane,
User Rank: Author
7/6/2017 | 7:09:51 AM
Progress but....
there is still a lot of work to be done!

This story first broke back in 2015.  "Crackas With Attitude" is just a group of young misdirected hacktivists. 2 US citizens in their early 20's and 3 teens from the UK, with the ringleader only 15 years old.

The affidavit from the case show Boggs stating - "I want to carry on CRACKA's legacy if or when he is arrested. I know he will receive a harsh sentence because our government doesn't like being embarrassed, so there is no better way of protesting than hacking and leaking more documents over and over again."

The group definitely created a ton of mischief. They hacked federal employees and their spouses facebook/email/twitter/ISP accounts. They paid $20 to "phone bomb" victims cell phones. They called in bomb threats to police stations. The most serious hack was gaining access credentials to LEEP and then posting 34,000 lines of PII of govt officials and military personnel.

Reading through the Affidavit I would equate their actions to online vandalism. Make no mistake, it's great to see cybercrime successfully prosecuted. However, we still have a long way to go to make a dent tackling the real problem - vast international organized crime syndicates motivated by Billions in profits. 
New Free Tool Scans for Chrome Extension Safety
Dark Reading Staff 2/21/2019
Making the Case for a Cybersecurity Moon Shot
Adam Shostack, Consultant, Entrepreneur, Technologist, Game Designer,  2/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-9015
PUBLISHED: 2019-02-22
A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the correspond...
CVE-2019-9016
PUBLISHED: 2019-02-22
An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[name] parameter in a mod=column request, as demonstrated by the /mopcms/X0AZgf(index).php?mod=column&ac=list&menuid=28&am...
CVE-2018-20784
PUBLISHED: 2019-02-22
In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
CVE-2019-9003
PUBLISHED: 2019-02-22
In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.
CVE-2019-9004
PUBLISHED: 2019-02-22
In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wasting) 24 bytes of memory. This can lead to termination of the LWM2M server afte...