Cracking the Code Of Cybersecurity Laughs
By Tom Seest
Unraveling the Mystery Of Cybersecurity Lulz
At BestCybersecurityNews, we help entrepreneurs, solopreneurs, young learners, and seniors learn more about cybersecurity.
Lulz (pronounced “lutz”) is an acronym for laughs, and it’s also the name of a hacker group that made headlines in 2011. It was believed to have been responsible for Sony Pictures’ breach in 2011 and often posted sarcastic messages on its Twitter account afterward.
Unraveling the Mystery Of Cybersecurity Lulz
Table Of Contents
Why Should You Care About Lulz?
Lulz is an acronym for the slang term “laugh.” It’s also a type of cyberattack that targets sites and networks using various tactics, including SQL injections. These attacks can expose vulnerabilities in computer systems that hackers may exploit to steal confidential information.
In the cybersecurity community, lulz is a term that describes hackers who have grown increasingly bolder in targeting large corporations and public websites due to the lack of protection users’ personal information is afforded them. Security experts warn companies that they must do more to strengthen their systems’ defenses.
LulzSec claimed responsibility for breaking into Sony Pictures’ website in 2011 as well as targeting FBI affiliate Infragard and security company Unveillance.
These break-ins serve as a reminder that many large institutions do not have as strong a security perimeter as they think, according to Jason Glassberg, co-founder of Casaba, an Internet security product and services company. He noted that hackers used an obvious SQL injection technique – code which requests data instead of what the site expects – to gain access to sensitive information.
They did this by sending queries to a database filled with unencrypted user IDs and passwords. These data was then transmitted over the Internet to a LulzSec hacker who downloaded them into an archive file that could be later retrieved.
Court documents released this week indicate that five individuals – one from each country: America, Britain and Ireland – were arrested on March 6 by the FBI in connection with the lulzsec attacks. They were allegedly led by computer expert “AnonymousSabu,” according to court documents.
This group is believed to be an offshoot of Anonymous, the hacktivist movement which sought revenge against WikiLeaks and its founder Julian Assange while attacking Sony and other organizations it considered oppressive. Its objectives include advocating for internet freedom – something it believes to be a right.
Due to the lulzsec break-ins, many companies are now scrambling to make their websites more secure. They seek ways to prevent customers’ information from being stolen and take other steps to safeguard their network against similar type of hacking as lulzsec does – such as encrypting databases and providing HTTPS connections for users – in an effort to make their networks safer.
Why Should You Care About Lulz?
What Sparked Lulzsec’s Unexpected Retirement?
Lulzsec is a collective of hackers responsible for numerous attacks and hacks over the last 50 days, including documents stolen from government websites and gaming platforms such as EVE Online, Minecraft, League of Legends and 4Chan.
Operation Anti-Security, originally known as Operation Zero Security, began in 2011 as a collective of hackers seeking to attack governments and corporations. Within two years it quickly rose to become one of the world’s most well known hacker groups, raising awareness around cybersecurity and cyberwarfare issues in an amusing lighthearted manner.
Throughout its brief existence, the group has leaked confidential data from numerous organizations such as Sony, PBS, the US Senate, and the CIA website. Their most recent attack was a response against Arizona law enforcement for its stringent immigration regulations.
On Pastebin, the group revealed their decision to cease hacking after 50 days of activity. This comes only days after Scotland Yard arrested a 19-year-old Briton believed to be associated with the group.
Though the ‘group’ was officially disbanded, other members have been arrested and convicted in separate cases. Three members of the core group – Ryan Cleary, Jake Davis and Mustafa Al-Bassam – were sentenced to between 24 to 32 months imprisonment at a young offender’s institute.
Sabu, also known as Hector Monsegur, was arrested by London’s Central e-Crime unit in 2011 and charged with multiple serious crimes. If convicted, he faces a minimum sentence of five years in jail.
The group also targeted websites opposing file-sharing, information security companies and law enforcement agencies. Their tactics ranged from website flooding and denial-of-service (DDoS) attacks to redirections and hacking of a site’s web address.
At a sentencing hearing this week in the UK, prosecutors revealed that their group wasn’t motivated by profit but instead engaged in “anarchic self-amusement”. Their aim was to cause disruption and embarrass governments and companies alike.
What Sparked Lulzsec’s Unexpected Retirement?
Can Lulzsec Make a Comeback?
Lulz is a shorthand for “laughs” or “anarchy.” But it also symbolizes something deeper: the subversive yet satisfying pleasure of hacking. That was the message behind lulzsec and what made it so beloved among security professionals.
An image conveyed the irreverence of hackers: people who take pleasure in making trouble for no other purpose than sheer enjoyment, while also doing so to support causes they care about. It was a fitting illustration of what Josh Corman, head of Akamai’s Security Intelligence team, refers to as “hacktivism,” which involves hacking combined with activism for social good.
Corman points out the distinguishing factor between hacktivists and more serious criminals as their motivation. While a criminal may be interested in stealing credit card information or payroll data, a hacktivist often just seeks attention for their statement.
In 2011, LulzSec launched an unprecedented 50-day hacking spree that targeted websites ranging from Fox News to Sony and government organizations. They dubbed their attack the “Summer of Lulz.”
The FBI reports that LulzSec was led by Sabu, an online hacker who previously served as an informant. Now he has turned in his fellow hackers to law enforcement authorities.
However, some security experts and hackers remain uncertain as to the future of lulzsec. The group hasn’t posted on their Twitter account since July, and some members have been arrested.
Meanwhile, lulzsec.org’s website has been repeatedly hacked but avoided becoming compromised due to an online security service that acts as a firewall between attackers and the site’s servers. Cloudflare CEO Matthew Prince expresses his disappointment that the hackers have since disappeared, yet believes their actions contributed towards safeguarding the internet in general.
Furthermore, a report published in November revealed that the LulzSec members recently arrested are part of an international hacking collective known as Anonymous. These groups have joined forces with WikiLeaks, attacked the Church of Scientology, and stood up for online activists seeking freedom.
Can Lulzsec Make a Comeback?
What Lessons Does Lulzsec Teach Us?
Lulzsec represented a new breed of hacking that combined debonair charm and chaos. It was an online community made up of internet pranksters who never met each other face-to-face, instead recruiting new members through social media and chat rooms.
For 50 days, lulzsec launched an assault against government agencies and companies in an effort to bring down the “establishment.” They stole sensitive personal data for themselves and those close to them, as well as pilfering large sums of money.
The group breached the PlayStation Network, obtaining information about 24.6 million customers. They also entered PBS and Fox websites where they exposed a database of X-Factor contestants. Furthermore, they spread false rumors that rapper Tupac Shakur was living in New Zealand.
As a result of these attacks, companies and government agencies were required to reevaluate how they handle customer and employee data. Security experts warn that while there are numerous measures companies can take for system protection, not all will be successful.
Some of the attacks were simple Distributed Denial of Service (DDoS) assaults that can quickly overwhelm a server with too many requests. These attacks are notoriously difficult to defend against.
They do, however, point out the shortcomings in how organizations manage their networks. And this might make those organizations more cognizant of the fact that their own security needs to be taken more seriously.
One of the major issues with these types of attacks is that they often originate from talented script kiddies’ in their early to mid-teens. These individuals seek recognition for their skills and in some cases ‘bragging rights’.
Additionally, they often neglect to utilize security software and other tools properly, leaving them more vulnerable to attack.
Security companies should pay close attention to their employees’ online activity and how they’re protecting themselves from threats like these. Furthermore, organizations should heed the advice of cybersecurity specialists who can offer invaluable insight into how best to secure networks.
What Lessons Does Lulzsec Teach Us?
Please share this post with your friends, family, or business associates who may encounter cybersecurity attacks.
