Fresh insight into hacking activity revealed

Fresh insight into the psychology and activity of hackers can be found in a report just published by data security firm, Imperva. The report analyses the content and activities of an online hacker forum with nearly 220,000 registered members.

The report details the technical strategies they learn, develop and deploy. This forum is used by hackers for training, communications, collaboration, recruitment, commerce and even social interaction. Commercially, this forum serves as a marketplace for selling of stolen data and attack software. The chat rooms are filled with technical subjects ranging from advice on attack planning to solicitations for help with specific campaigns. This forum is also a place where curious neophytes can find 'how-to-hack' tutorials on various methods.

“Studying hacker forums is important to providing insights into hacker psychology and technical strategies,” explained Imperva CTO Amichai Shulman. “Hacker forums are still not well understood by many in the security community, and we believe that studying and quantifying what happens in these online communities can lead to the development of strategies to combat cybercrime.”

The findings include:

•Examples of hacker communications, collaboration, recruitment, commerce and social interaction activities.

•Attack discussions on this forum increased over the four-year period of analysis, growing an average of 157% year over year between 2007 and 2010.

•The most discussed topics in this forum from June 2010 to June 2011 were Dos/DDoS attacks, with 22% of discussions, followed by SQL injections, which comprised 19% of all discussions.

•25% of discussions from June 2010 to June 2011 focused on learning to hack, with members devoting six per cent of their time sharing 'how-to' tutorials and discussing basic methodologies, indicating a strong, steady interest from new talent.

•Mobile hacking has seen very strong growth in this forum from 2007 to 2010, with iPhone hacking leading the way.

    Share Story:

YOU MIGHT ALSO LIKE


Resilience Rooted in Reality
In this podcast, CIR speaks to CLDigital’s Tejas Katwala about why organisations must move beyond checklist compliance to build living, data driven resilience. He explains how rethinking governance, risk and compliance, breaking down silos and focusing on value streams can create sustainable, real time resilience that is rooted in the way businesses actually operate today.

Building cyber resilience in a complex threat landscape
Cyber threats are evolving faster than ever. This episode explores how organisations can strengthen defences, embed resilience, and navigate regulatory and human challenges in an increasingly complex digital environment.