Report: Hacktivists Out-Stole Cybercriminals in 2011

[InfoSec News <alerts () infosecnews org>]

http://www.wired.com/threatlevel/2012/03/hacktivists-beat-cybercriminals/

By Kim Zetter
Threat Level
Wired.com
March 22, 2012

Just two years ago, cybercriminal gangs were behind record-breaking data 
breaches that resulted in the theft of millions of customer records. But 
the year 2011 will be remembered as the year hacktivists out-stole 
cybercriminals to take the top data breach award, according to a new 
report released by Verizon on Thursday.

More than 100 million of the 174 million stolen records Verizon tracked 
in 2011 were stolen by hacktivist groups, according to the authors of 
Verizon’s 2012 Data Breach Investigations Report (.pdf).

Hacktivists have drastically changed their methods and goals since 
groups like milwOrm and G-Force Pakistan first emerged on the scene in 
the late ’90s to deface websites and conduct DDoS attacks for political 
motivation. Last year, activists moved beyond simple website defacements 
into large-scale data theft operations that netted e-mail spools and 
intellectual property from firms like HB Gary and Stratfor, who were 
targeted in high-profile, embarrassing breaches for touting 
anti-WikiLeaks and pro-government stances and services.

“Many, troubled by the shadowy nature of its origins and proclivity to 
embarrass victims, found this trend more frightening than other threats, 
whether real or imagined,” according to the authors of the Verizon 
report. “Doubly concerning for many organizations and executives was 
that target selection by these groups didn’t follow the logical lines of 
who has money and/or valuable information. Enemies are even scarier when 
you can’t predict their behavior.”

[...]

______________________________________________________________________________
CISSP and CEH training with Expanding Security is the fastest, easiest way
to grock the relevant data you need now.   A free class invite is in every
PainPill.  Sign up for the free weekly PainPill .  It's that easy.
http://www.expandingsecurity.com/PainPill