LulzSec hacker helps FBI stop attacks

Prosecutors called Mr Monsegur's help "extraordinary"

The former "leader" of hacking group LulzSec has helped the FBI stop more than 300 cyber attacks since his arrest on hacking charges in 2011. The co-operation of Hector Xavier Monsegur has helped to prevent losses of millions of dollars, according to court documents filed by prosecutors. Mr Monsegur will be sentenced on Tuesday for his role in major online hacking attacks. Prosecutors have recommended that he receives a reduced sentence.

LulzSec was formed in approximately May 2011 when Mr Monsegur - also known as Sabu - and five other members of the Anonymous hacking movement joined forces. According to the documents filed with the court the group was responsible for "major hacks" into and "thefts" from computer servers belonging to companies including Fox Television, Nintendo and Sony. Mr Monsegur was arrested in June 2011 and pleaded guilty, as part of a co-operation agreement with the US government, to nine counts related to computer hacking, amongst others.

'Extraordinarily valuable' The documents that were filed in a New York court last week state that Mr Monsegur's most substantial assistance came from his "co-operation against significant cybercriminals" affiliated with Anonymous, LulzSec and Internet Feds - another hacking group. Because of his help the FBI say they were able to identify, prosecute and convict the "number one cybercriminal target in the world" at the time - Jeremy Hammond.

Mr Monsegur was the leader of hacking group LulzSec He also helped prevent major hacking attacks that were being planned by active cybercriminals. Mr Monsegur was in contact with hackers and received information from them about attacks that were being planned. He shared this knowledge with the FBI. Victims of the attacks were to include the US Armed Forces, the US Congress and Nasa as well as a "television network, a video game manufacturer and an electronics conglomerate".

Electrical grid hack "The FBI used this information, wherever feasible, to prevent or mitigate harm that otherwise would have occurred," the prosecutors' filing said. "The FBI estimates that it was able to disrupt or prevent at least 300 separate computer hacks in this fashion. "Although difficult to quantify, it is likely that Monsegur's actions prevented at least millions of dollars in loss to these victims." He is also credited with providing officials with information about vulnerabilities that could have led to attacks on a water utility for a US city and a foreign energy company. "Law enforcement used the information Monsegur provided to secure the water utility, and the information about the energy company was shared with appropriate government personnel," prosecutors said.

A hack on the US electrical grid was also found to be a hoax after Mr Monsegur communicated with members of Anonymous. This saved the government "substantial time and resources". Under US sentencing guidelines Mr Monsegur could be sentenced to between 21 and 26 years in prison. Prosecutors have called Mr Monsegur's help "extraordinarily valuable and productive" and have recommended that his sentence is limited to "time served". He has already spent seven months in jail after breaking conditions of his bail in 2012.

read more...

Microsoft and FBI take down global cybercrime ring

Cybercriminals can control huge networks of computers, called botnets, which can be used to distribute spam, malware and assist with organised crime.

Microsoft and the FBI say they have taken down a sophisticated ring of cybercriminals responsible for over $500 million in financial fraud.

  The software giant said Wednesday that it successfully disrupted more than 1,000 networks of computers infected with "malware."

"This cooperative action is part of a growing proactive effort by both the public and private sector to fight cybercrime," Microsoft said in a statement.

The company said the malware affected roughly 5 million people around the globe.

Most computer infections appeared in the United States, Europe, Hong Kong, Singapore, India and Australia.

The FBI said this take-down exemplifies how the public and private sectors can work together, both domestically and internationally, to protect the public from global criminals.

The FBI issued a report this week on the rising use of botnets, which are groups of infected computers controlled by cybercriminals. Criminals can infect a huge network of computers -- numbering in the hundreds of thousands or even millions -- and then each computer is connected to a command-and-control server operated by the criminal.

Botnets can be used to distribute spam, malware and assist with organized crime and terrorist activities, said the FBI.This is not the first time that Microsoft (MSFT, Fortune 500) has taken an active role in fighting cybercrime. In March 2012, Microsoft employees, escorted by U.S. Marshals, raided two U.S. companies and seized servers and hundreds of websites used to steal more than $100 million over five years.

Other major players in the financial services industry also contributed to the recent cybercrime take-down, including the Electronic Payments Association and the American Bankers Association. To top of page

read more...