The Accidental Terrorist – Anonymous’ Stooges Stage Attacks

Numerous people may unwittingly be assisting Anonymous in its current campaign against the US Department of Justice (DoJ) and various Websites owned by film and music tycoons.

The hacker group has been peppering the sites with DDoS attacks to protest at the downing of the Megaupload file storage site. An international crimebusting team, headed by the DoJ’s Federal Bureau of Investigation (FBI), took over the Megaupload site and arrested many of its organisers.

Expect the unexpected

Anonymous posted the following message: “We Anonymous are launching our largest attack ever on government and music industry sites. Lulz. The FBI didn’t think they would get away with this did they? They should have expected us.”

What nobody expected is the means by which the attacks are being mounted. Apart from Anonymous’ usual tactic of botnet Command and Control (C&C) networks firing spurious data at the targeted servers, the group has found a simple way of covertly enrolling other attackers.

According to Graham Clueley, a Sophos’ Naked Security blogger and senior technology consultant, the group has been relying on natural curiosity to entrap “helpers”. By seeding Twitter with links in tweets, in a number of languages, the inquisitive reader is led to comments on the Pastehtml.com Website. The unsuspecting visitors may not realise it but they have been tricked into allowing their PCs to be used as DDoS bots.

Visitors who arrive at the site with JavaScript enabled will instantly be hit with a script that ties their machine into the botnet. No user interaction is involved and the script runs without the user being aware. The computer is then forced to flood a target of Anonymous’ choosing with network traffic.

Current targets appear to be the Recording Industry Association of America (RIAA) and Universal Music Group which have ceased to operate, but it has also aimed its guns at the DoJ site and several other digital rights supporters. A new assault on Whitehouse.gov has also been released.

A wall of noise

The trick is aimed at obscuring the Anonymous group’s activities following several arrests of key members last year. Anyone arrested for the current attacks will claim to be unwitting stooges – an argument that has succeeded in the past.

In an attempt to sue various habitual music downloaders, the music industry convinced the courts that IP addresses never lie and that the owners of these addresses must be the guilty party. In May last year, a US judge ruled that an IP address did not equate to a person and the RIAA cases started to fall apart.

At the end of the year the RIAA was embarrassed when its IP addresses were found to be cruising illegal download sites and the organisation had to use the “it was not me, it was a spoofer” defence.

The problem for the involuntary attackers is that DDoS attacks on US government sites are being viewed as terrorist attacks. Anyone caught doing so is liable to prosecution, even UK citizens are likely to be extradited. The accidental terrorist argument may not prove to be sufficient defence.

Eric Doyle, ChannelBiz

Eric is a veteran British tech journalist, currently editing ChannelBiz for NetMediaEurope. With expertise in security, the channel, and Britain's startup culture, through his TechBritannia initiative

View Comments

Recent Posts

Apple Sales Rise 6 Percent After Early iPhone 16 Demand

Fourth quarter results beat Wall Street expectations, as overall sales rise 6 percent, but EU…

24 hours ago

X’s Community Notes Fails To Stem US Election Misinformation – Report

Hate speech non-profit that defeated Elon Musk's lawsuit, warns X's Community Notes is failing to…

1 day ago

Google Fined More Than World’s GDP By Russia

Good luck. Russia demands Google pay a fine worth more than the world's total GDP,…

1 day ago

Spotify, Paramount Sign Up To Use Google Cloud ARM Chips

Google Cloud signs up Spotify, Paramount Global as early customers of its first ARM-based cloud…

2 days ago

Meta Warns Of Accelerating AI Infrastructure Costs

Facebook parent Meta warns of 'significant acceleration' in expenditures on AI infrastructure as revenue, profits…

2 days ago

AI Helps Boost Microsoft Cloud Revenues By 33 Percent

Microsoft says Azure cloud revenues up 33 percent for September quarter as capital expenditures surge…

2 days ago