5 ms·

No, they’re not elite, they’re just script kiddies with a payout mechanism.

SavantIdiot 5y ago
"Script kiddies" got their name because 20 years ago any kid could download some code and create a DDoS attack by running a pre-written script. Ransomware hacks seem a bit more sophisticated, even with today's highly modular malware. I think it is an interesting proposal: a fake attack as shown by the disparity in savvy between the attack and the payment, or a really dumb screw up. EDIT: as "koheripbal" says below, maybe their tumbler is a boob (paraphrased).
- AJ007 5y ago
  How much sophistication does it take to attack a computer system running software that hasn’t been patched in years?
  - rhodozelia 5y ago
    ./nestea.o
  - icedchai 5y ago
    Many so called "professionals" are still running operations with 5+ year old distributions that haven't been patched in almost as many years, and servers that people are afraid to reboot. I was once contracted by a company that was literally afraid to have any employees reboot a server because they had no idea how it worked, if it would come back up, and what to do if something didn't restart. They wanted an outside guy to take the blame.
    - rm_-rf_slash 5y ago
      Would’ve been a decent opportunity to contract a job paid half up front.
      - icedchai 5y ago
        I took the job on the side. It was literally the equivalent of "set up a couple of static web servers with FTP accounts, and move everything over." It was about 8 hours of work and 100 hours of meetings.
- majormajor 5y ago
  There's been some reporting of basically a new version of that for the modern "as a service" times, like here https://www.zdnet.com/article/darkside-the-ransomware-group-responsible-for-colonial-pipeline-cyberattack-explained/ https://www.zdnet.com/article/darkside-the-ransomware-group-... > According to FireEye, affiliates are required to pay up to 25% of ransom payments under $500,000, and 10% of any successful extortion attempts over $5 million. So the ransomware authors might not always be the people collecting the initial payments. Although according to the press release here, it was siezed from the DarkSide group itself? So it's still a bit confusing.
  - Ekaros 5y ago
    Question really becomes where did that group get the software from? It could be multiple levels of indirection such as people hired to develop the stuff aren't really connected to activities. They might just as well be contractors not so well paid...
- vmception 5y ago
  > "Script kiddies" got their name because 20 years ago any kid could download some code and create a DDoS attack by running a pre-written script. Ransomware hacks seem a bit more sophisticated, even with today's highly modular malware. They're downloadable and leased out. This allows people to focus on choosing targets instead of the entire vertical integration and liability at each step.

"Script kiddies" got their name because 20 years ago any kid could download some code and create a DDoS attack by running a pre-written script. Ransomware hacks seem a bit more sophisticated, even with today's highly modular malware. I think it is an interesting proposal: a fake attack as shown by the disparity in savvy between the attack and the payment, or a really dumb screw up. EDIT: as "koheripbal" says below, maybe their tumbler is a boob (paraphrased).

AJ007 5y ago
How much sophistication does it take to attack a computer system running software that hasn’t been patched in years?
- rhodozelia 5y ago
  ./nestea.o
- icedchai 5y ago
  Many so called "professionals" are still running operations with 5+ year old distributions that haven't been patched in almost as many years, and servers that people are afraid to reboot. I was once contracted by a company that was literally afraid to have any employees reboot a server because they had no idea how it worked, if it would come back up, and what to do if something didn't restart. They wanted an outside guy to take the blame.
  - rm_-rf_slash 5y ago
    Would’ve been a decent opportunity to contract a job paid half up front.
    - icedchai 5y ago
      I took the job on the side. It was literally the equivalent of "set up a couple of static web servers with FTP accounts, and move everything over." It was about 8 hours of work and 100 hours of meetings.
majormajor 5y ago
There's been some reporting of basically a new version of that for the modern "as a service" times, like here https://www.zdnet.com/article/darkside-the-ransomware-group-responsible-for-colonial-pipeline-cyberattack-explained/ https://www.zdnet.com/article/darkside-the-ransomware-group-... > According to FireEye, affiliates are required to pay up to 25% of ransom payments under $500,000, and 10% of any successful extortion attempts over $5 million. So the ransomware authors might not always be the people collecting the initial payments. Although according to the press release here, it was siezed from the DarkSide group itself? So it's still a bit confusing.
- Ekaros 5y ago
  Question really becomes where did that group get the software from? It could be multiple levels of indirection such as people hired to develop the stuff aren't really connected to activities. They might just as well be contractors not so well paid...
vmception 5y ago
> "Script kiddies" got their name because 20 years ago any kid could download some code and create a DDoS attack by running a pre-written script. Ransomware hacks seem a bit more sophisticated, even with today's highly modular malware. They're downloadable and leased out. This allows people to focus on choosing targets instead of the entire vertical integration and liability at each step.