FBI Opens Fresh Criminal Investigation Into Anonymous Following Hack
February 8, 2013 11:42 AM
comment(s) - last by
Bankers affected say it's no big deal
Jo David Cummins, president and CEO of Community First Bank of the Heartland in Illinois, laughs off
' mid-January "hack"
U.S. Federal Reserve
database, which scooped up his record and over 4,000 others. He
, "It hasn't been much of a hassle. The information that was on the contact system was the same thing that was on my business card, so it wasn’t like it was anything that could do any harm to me or the bank."
I. Adobe Flaw Likely Exploited by Hackers.
But while it may not be a big deal for most of the affected, the
U.S. Federal Bureau of Investigation
and the Federal Reserve are taking the incident very seriously. Comments Federal Reserve spokesman Jim Strader, "We are in the process of a comprehensive assessment to determine what information might have been obtained in this incident. We remain confident that this incident did not affect critical operations of the Federal Reserve."
The site that the information leaked from was dubbed
Emergency Communication System
(ECS). While protected by passwords and encryption,
was able to circumvent those barriers.
It's possible that the attackers used an SQL injection (aka "
Little Bobby Tables
") style attack. Such attacks can be prevented if the requests were sanitized.
However, it's also possible that the hackers exploited well-known security flaws in Adobe Systems, Inc.'s (
) Cold Fusion suite, which the site was built upon. In mid-January -- right about the time of the attack -- Adobe patched several critical security flaws that could allow malicious users access to restricted files and even allow them to takeover servers.
An Adobe flaw may have been responsible for the Fed hack. [Image Source: Adobe]
for the patch, Adobe stated:
This hotfix addresses vulnerabilities that could permit an unauthorized user to remotely circumvent authentication controls, potentially allowing the attacker to take control of the affected server... Adobe is aware of reports that four vulnerabilities (CVE-2013-0625, CVE-2013-0629, CVE-2013-0631 and CVE-2013-0632, referenced in Security Advisory APSA13-01)
are being exploited in the wild against ColdFusion customers.
A 2012 audit at the Fed suggested that a monitoring system be put in place to review security at third-party systems. It's possible the ECS system may fall under that category.
The Federal Reserve System is the backbone of the American banking industry, established before the Great Depression. The oft-criticized institution is a strange mix of private and public parts.
On the public side, regional Fed banks are largely owned by nationally chartered commercial banks, which are required to be shareholders in their local branch. On the other hand, the federal government selects and controls the salary of many of the system's top officials; indeed the President himself personally appoints Fed's Board of Governors.
II. Hackers Still Flaming Mad About Swartz's Death
Many members of the quasi-leaderless hacktivist group
have been vocal opponents of the Fed and the U.S. commercial banking industry in general, which they label as corrupt and exploitive.
The recent attack is part of the group's
dramatically titled "OpLastResort"
. The operation is a manifestation of the explosion of anger over the death of online activist Aaron Swartz. Mr. Swartz, who designed the RSS, reportedly tragically committed suicide last month after fighting a long battle
with depression and government harassment
Federal prosecutors had investigated Mr. Swartz after he dumped 4 million papers from the JSTOR network. JSTOR hosts peer-reviewed journal papers, most of which cost money to access. Critics of Mr. Swartz's actions argue that journal fees help sustain the costly march of research in fields such as physics, biology, and genetics. But his supporters argue that academic research should be free to all, not pent up in some ivory cage.
Even some of his critics, though, balked at how the feds allegedly harassed him for the breach.
to fire the prosecutors involved with the criminal case -- Assistant U.S. Attorney Steve Heymann and his boss U.S. District Attorney Carmen Ortiz -- has been attracting substantial attention. The petition to remove DA Ortiz has already received 25,000 signatures, meaning that President Barack Obama must respond to it.
III. Sabu to be Sentenced
In a related reminder, former
mastermind Hector Xavier Monsegur (handles: "Sabu", "Xavier DeLeon", and "Leon") is set to be sentenced on Feb. 22. Mr. Monsegur had founded the sub-unit of
and in 2011
led it in hacking Sony
breaching government sites
Hacker "messiah" Hector Monsegur, a former member of
's upper echelon is set to be sentenced later this month. His sentence will likely be greatly reduced for his role in "snitching" on his fellow hackers. [Image Source: Fox News]
Unbeknownst to his cohorts, Mr. Monsegur was located by the FBI and offered a plea deal. The hacker accepted, and for the next few months continued to lead attacks, while
allegedly serving as a double agent
, feeding feds information that helped them
track down other top members
such as Topiary
, a 19-year-old who was
arrested in the UK's Shetland Islands
The hacker was given a sentencing reprieve due to concerns about his safety and his ongoing cooperation with federal investigations. He has plead guilty to 12 federal computer crimes, which carry a maximum theoretical sentence of 124-years. It is likely that his sentences will at a bare minimum be reduced to being served consecutively (which greatly slashes his prison time -- for example Bank Fraud, one of his charged offenses, carries a maximum 30 year sentence).
This article is over a month old, voting and posting comments is disabled
2/8/2013 5:01:00 PM
This is also why we need to go back to having two separate types of banks:
These institutions were kept separate since 1933. Lessons were learned in the Great Depression that Commercial Banks should not be making risky investments in the market, since they have a much higher probability of going under than if they stick to just lending money.
Fast forward to 1999 and the Gramm-Leach-Bliley Act. This repealed the banking separation letting Commercial Banks make risky investments in the market, getting them chained to all of those crap CBO's and other products offered by the Investment Banks when they were going under.
Many Commercial Banks were bailed out. If they weren't bailed out they would've went under causing the FDIC to have to back their depositor's dollars with taxpayer money.
Either way the taxpayer's lose. It's a good system for the banks.
"Nowadays, security guys break the Mac every single day. Every single day, they come out with a total exploit, your machine can be taken over totally. I dare anybody to do that once a month on the Windows machine." -- Bill Gates
Federal Reserve Hacked, WSJ Still Under Heavy Fire From Chinese Hackers
February 6, 2013, 1:50 PM
House Committee Questions Aaron Swartz Charges in Letter to DOJ
January 29, 2013, 5:08 PM
Anonymous Declares War on the U.S. Government Following Aaron Swartz' Suicide
January 26, 2013, 1:43 PM
Betrayed by Their Chief: LulzSec Don Helps FBI Take Down his Underlings
March 6, 2012, 3:25 PM
More Anonymous and LulzSec Folks End up in Prison Awaiting Charges
September 23, 2011, 9:51 AM
Netflix Announces 7-to-1 Stock Split, Eyes Explosive Overseas Growth
June 23, 2015, 8:18 PM
Sources: Hack on Fed. Database Lost 4.1M Social Security Numbers, Personal Info
June 11, 2015, 9:11 PM
The Big One: Chinese Hackers Steal Records of 4 Million U.S. Gov. Employees
June 4, 2015, 8:13 PM
Tutorial: Here's How to Force YouTube or Vimeo VIdeos to Embed as HTML5
June 3, 2015, 10:14 PM
Google Finally Fixes Maps Bug That Was Giving Racist, Profane Results
May 21, 2015, 1:43 PM
The Pirate Bay Loses Its Iconic Swedish Dot SE Domains
May 20, 2015, 6:31 PM
Most Popular Articles
SanDisk's 200GB microSDXC Card Turns Smartphones Into Enviable PMPs
June 26, 2015, 2:02 PM
Windows XP, Vista Users Can Get Free Windows 10 Upgrade Thanks to Loophole
June 23, 2015, 2:23 PM
SpaceX Falcon 9's Seventh Supply Mission to ISS Ends w/ Fiery Stage 1 Explosion
June 28, 2015, 1:10 PM
U.S. Navy Spends $9M USD to Cling to Windows XP, Office 2003
June 24, 2015, 2:03 PM
F-16 Schools Trillion-Dollar F-35 in Mock Combat, Fleeing is Best Option Pilot Admits
July 1, 2015, 5:53 PM
Latest Blog Posts
Sceptre Airs 27", 120 Hz. 1080p Monitor/HDTV w/ 5 ms Response Time for $220
Dec 3, 2014, 10:32 PM
Costco Gives Employees Thanksgiving Off; Wal-Mart Leads "Black Thursday" Charge
Oct 29, 2014, 9:57 PM
"Bear Selfies" Fad Could Turn Deadly, Warn Nevada Wildlife Officials
Oct 28, 2014, 12:00 PM
The Surface Mini That Was Never Released Gets "Hands On" Treatment
Sep 26, 2014, 8:22 AM
ISIS Imposes Ban on Teaching Evolution in Iraq
Sep 17, 2014, 5:22 PM
More Blog Posts
Copyright 2015 DailyTech LLC. -
Terms, Conditions & Privacy Information