FBI Tries To Send Message With Hacker Arrests

Jul 20, 2011
Originally published on July 21, 2011 8:30 am

The 14 people arrested Tuesday in a crackdown on the Anonymous hacking group are not suspected of having links to criminal gangs, terrorist networks or foreign governments. They are alleged only to have participated in attacks on PayPal's website, after that company cut off payments to WikiLeaks.

But the FBI was determined to go after them anyway.

"We want to send a message that chaos on the Internet is unacceptable," Steven Chabinsky, deputy assistant FBI director, said in an interview with NPR. "[Even if] hackers can be believed to have social causes, it's entirely unacceptable to break into websites and commit unlawful acts."

That view is apparently shared by other governments as well. In addition to the U.S. arrests, one person was arrested by Scotland Yard in Britain, and the Dutch National Police arrested four individuals, also for illegal cyberactivities.

"The investigative opportunities that present themselves in this area are transnational," Chabinsky, deputy head of the FBI's cyber division, said. "The resolution of these cases will involve international cooperation. The Internet has become so important to so many people that we have to ensure that the World Wide Web does not become the Wild Wild West."

In addition, Chabinsky said, law enforcement agencies have to worry that politically motivated "hacktivism" could evolve into more dangerous cyberactivity, should organized crime or terrorist groups become interested in the hacking capabilities demonstrated by Anonymous or its offshoot group, LulzSec.

"There has not been a large-scale trend toward using hacking to actually destroy websites, [but] that could be appealing to both criminals or terrorists," Chabinsky said. "That's where the 'hacktivism,' even if currently viewed by some as a nuisance, shows the potential to be destabilizing."

One scenario is that hackers could be tempted to sell their services to organized criminal or terrorist groups. Another is that outside actors could infiltrate a loose hacking group and steer its activities in a malevolent direction.

"Most of the folks who are on these chat boards don't know each other," said Hugh Thompson, chief executive of PeopleSecurity, a private cybersecurity firm. "They have never met in person. So when someone has a dominant voice, you're not quite sure what their personal motivations are. One concern is that they may be able to influence the group to do something that the group never intended to do."

The outside player, for example, may sway the hacking group to attack a company that a criminal gang has identified as a possible target. The penetration of the company's website could offer the gang an opportunity to see a weakness that could be exploited for criminal purposes.

The pursuit of cybercriminals is complicated by the fact that the Internet affords considerable anonymity to its users. This week's crackdown on the Anonymous group was made possible in part by "good old-fashioned investigative work," according to the FBI's Chabinsky.

"That includes getting out, trying to work with victims, finding out what they're seeing, finding out in the hacker community who knows someone that [has concluded], 'This just went too far,' even for their views. They don't agree with it," he said. "Slowly but surely you end up getting the leads that result in the kind of arrests we saw [Tuesday]."

It remains unclear, however, whether the individuals arrested were key players in the Anonymous hacking operation or just careless in what they were doing.

"I'd say many of those folks are not the people who are pulling the strings here," Thompson said. "A lot of these people may just have been enamored by the cause [and] downloaded a tool [for attacking a website]. Some of them may not have even known that they were doing something illegal," he said. "So I think we need to have an air of caution here to make sure the right people get appropriately prosecuted."

Law enforcement officials point out that Tuesday's operation was part of a continuing investigation. FBI agents also executed 35 search warrants, and more arrests could follow.

For its part, Anonymous is showing defiance. "We continue moving forward," one alleged LulzSec member said in a tweet after the arrests, along with the group's standard slogan: "We are Anonymous. We are Legion. We don't forget. We don't forgive. Expect us."

Copyright 2018 NPR. To see more, visit http://www.npr.org/.

ROBERT SIEGEL, host:

The informal group of hackers known as Anonymous is vowing to continue moving forward even after the arrest yesterday of 14 suspected members. One self-described member of the group said in a Twitter message: We are legion. We don't forget. We don't forgive. Defenders of the hackers say they are merely engaged in civil protest, but FBI officials worry the disruptive cyber-attacks could more in a more dangerous direction.

NPR's Tom Gjelten reports.

TOM GJELTEN: Yesterday's arrests were a major operation, carried out in nine states and here in the District of Columbia. On one level, it was meant to send a message. Just as demonstrations are permitted but rioting is not, hacking a website crosses a line: it's like throwing a brick through a window.

Steven Chabinsky is the deputy assistant FBI director in charge of the bureau's cyber division.

Mr. STEVEN CHABINSKY (Deputy Assistant FBI Director, Cyber Division): So, to the extent that hackers even can be believed to have social causes, it's entirely unacceptable to break into websites and commit other unlawful acts. There are obviously proper ways to register a voice in the United States, and unlawful activity is not one of them.

GJELTEN: Until now, the Anonymous group has generally hit targets against whom it holds some kind of grudge. The people arrested yesterday were suspected of attacking PayPal's website after the company shut off payments to WikiLeaks. The hackers have not been linked to unfriendly governments or criminal gangs, much less to terrorist networks. But they have shown considerable skill in their penetration of websites.

And the FBI's Chabinsky says that's an expertise that could impress some real bad guys.

Mr. CHABINSKY: There has not been a large-scale trend towards using hacking to actually destroy websites, to bring them down for the sake of showing that raw power. That could be appealing to both criminals and terrorists.

GJELTEN: One danger is that hackers at some point could be tempted to sell their services to other groups. Cyber-security expert Hugh Thompson, chief executive of PeopleSecurity, sees another scenario: A bad actor could infiltrate the hackers and influence them to do something on behalf of organized crime.

Mr. HUGH THOMPSON (Chief Executive, PeopleSecurity): Most of the folks who are on these chat boards don't know each other. They've never met in person. And so when someone has a dominant voice, you're not quite sure what their personal motivations are.

GJELTEN: That dominant player, for example, could get the hackers not simply to shut down a company's website but to leave it vulnerable to theft. Going after hackers or cyber-criminals is not easy because the Internet is such a good place to hide.

The FBI's Steven Chabinsky said yesterday's operation reflected what he calls good old-fashioned investigative work.

Mr. CHABINSKY: Getting out, trying to work with victims, finding out what they're seeing, finding out in the hacker community who knows someone that this just went too far, even for their views, they don't agree with it, and slowly but surely you end up getting the leads that result in the types of arrests we saw yesterday.

GJELTEN: The individuals rounded up yesterday may have been key players in the Anonymous hacking operation or maybe they were just careless in what they were doing. Hugh Thompson is not so sure.

Mr. THOMPSON: A lot of these people may have just been enamored by the cause, downloaded a tool, and some of them may have not even known that they were doing something illegal.

GJELTEN: Law enforcement officials point out that yesterday's operation was part of a continuing investigation. FBI agents also executed 35 search warrants and more arrests could follow.

Tom Gjelten, NPR News, Washington. Transcript provided by NPR, Copyright NPR.