T HACKED! HACKED! The week of August 10, 2014 How an Xbox hack became a weapon of war in Syria By Patrick Howell O'Neill he m e ss age s ca m e f rom f r ie n d s t he y t h ou gh t t he y c oul d trust I n 2012, on e y ea r i nto t he ci v i l w a r i n S yr ia , r ebe ls a n d ac t i v i sts bega n to r ecei v e S kyp e m e ss age s f rom c omr ade s a n d c oll eag u e s w h o ur ged t he m to d ownlo ad a n d look a t a s c r ee ns h ott ed c onv e rs a t i on fea tur i n g a m a n p e rson a lly t h r ea t e n i n g t he r ebe ls ’ l i v e s “ The r e i s a p e rson w h o ha t e s you a n d k ee ps t a lk i n g ab out you ,” t he m e ss age , tr a nsl a t ed f rom A r abic , r ead . “ I took a s c r ee ns h ot o f t he c onv e rs a t i on P l ea s e be w a r e o f t hi s p e rson , a s he knows you p e rson a lly .” Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture I n a w a r zon e , w he r e dea t h surroun d s you , i t ’ s ea sy to s ee w h y so m a ny r ebe ls qu ic kly c l ic k ed t he l i nks to try to un de rst a n d t he n e w t h r ea t I nst ead , t he y w e r e hac k ed The w a rn i n g w a s a f r a u d , a n d on ce t he d ownlo ad w a s d on e , t hei r c omput e rs w e r e e ss e nt ia lly own ed b y t he S yr ia n g ov e rnm e nt , be tr a y i n g t hei r e v e ry mov e onl i n e : Thei r m ic rop h on e s ca ptur ed e v e ryt hi n g t he y s aid f or t he e n e my , t hei r k e y b o a r d s ga v e a w a y t he most s e ns i t i v e p a sswor d s a n d m e ss age s t he y typ ed , a n d t hei r p e rson a l acc ounts w e r e stol e n a n d us ed to spr ead t he a tt ac k to t he n e xt unsusp ec t i n g v ic t i m The c r i s i s i n S yr ia sp i ll ed ov e r i nto c y be rsp ace i n m a ny w a ys B ot h s ide s ha v e w aged w ha t c oul d be c ons ide r ed t he first so cia l m edia w a r P r e s ide nt Ba s ha r a l - A ss ad ’ s support e rs st a rt ed w ide ly hac k i n g oppos i t i on a s soon a s v i ol e n ce bega n B loo d y prop aga n da ha s s a tur a t ed Y ou T u be , T w i tt e r , a n d Faceb ook e v e r s i n ce t he first s h ots w e r e fir ed The S yr ia n E l ec tron ic A rmy ha s w aged a g lo ba l w a r agai nst oppon e nts o f A ss ad , s e rv i n g a s a r e m i n de r t ha t w he n a w a r hi ts t he Web , b or de rs m ea n l i ttl e or not hi n g I n fac t , t he B l ac ks hade s Re mot e Acce ss T ool ( RAT ), t he pow e r f ul c y be rw ea pon S yr ia us ed to surr e pt i t i ously e nsl a v e r ebe ls ’ c omput e rs , w a s ac tu a lly b u i lt i n A m e r ica The s a m e pro g r a m r ece ntly l ed to t he a rr e sts o f 90 hac k e rs a roun d t he worl d w h o had bee n us i n g i t to i ll ega lly t a k e ov e r t h ous a n d s c omput e rs f or t hei r own gai n — i n most ca s e s , w i t h out t he c omput e rs ’ own e rs e v e r know i n g t he y ’ d bee n hi t Acc or di n g to t he FBI , B l ac ks hade s ha s ge n e r a t ed $350,000 i n s a l e s a n d i n fec t ed ov e r ha l f a m i ll i on c omput e rs “ The RAT i s i n e xp e ns i v e a n d s i mpl e to us e , b ut i ts ca p abi l i t ie s a r e sop hi st ica t ed a n d i ts i nv a s i v e n e ss b r ea t h t a k i n g ,” U S A ttorn e y P r ee t Bha r a r a s aid ea rl ie r t hi s y ea r w he n sp ea k i n g ab out B l ac ks hade s The r e a r e m a ny r e m a rk ab l e t hi n g s ab out B l ac ks hade s — i t ’ s pot e nt , chea p , a n d i n c r edib ly ea sy to us e — b ut p e r ha ps w ha t ’ s most i n c r edib l e i s j ust h ow unr e m a rk ab l e i ts c r ea tor i s I t ’ s t he work o f a b or ed t ee n age r w h o c oul d not ha v e poss ib ly e nv i s i on ed t he w a y hi s chea p hac k c oul d affec t on e o f t he b loo die st upr i s i n g s o f t he p a st decade Le v e l i n g up I n 2008, Michae l H o g u e w a s s i mply look i n g f or a n edge i n Ha lo 3 , t he h yp e r c omp e t i t i v e Xb ox ga m e The n 17, he w e nt b y t he n a m e x Vi s ce r a l a n d s e t a p e rson a l g o a l to r i s e to t he top r a nk —50— i n each mo de o f ga m e pl a y The d r i v e w a s lon g a n d f ut i l e , e sp ecia lly i n a mo de ca ll ed S qu ad Ba ttl e , i n w hich pl a y e rs r e l ied a s mu ch on ot he rs a s on t he ms e lv e s N o m a tt e r w ha t he tr ied , he c oul d n ’ t s ee m to ge t p a st l e v e l 45. T o t a k e hi s m i n d o ff o f hi s S qu ad Ba ttl e stru gg l e , H o g u e pl a y ed a not he r mo de ca ll ed Tea m S l a y e r Af t e r w i nn i n g a str i n g o f ga m e s , hi s c onsol e w a s f or cef ully di s c onn ec t ed f rom t he I nt e rn e t , putt i n g hi m on los i n g e n d o f a ba ttl e f or t he first t i m e i n r ece nt m e mory O n ce he w a s fin a lly ab l e to r ec onn ec t , H o g u e lo gged bac k i nto Ha lo a n d di s c ov e r ed t ha t a pl a y e r n a m ed HgB R o BeR t had f or cef ully s e v e r ed hi s I nt e rn e t c onn ec t i on C ur i ous , he m e ss aged t he us e r to fin d out h ow he did i t The a nsw e r l a y i n a sm a ll h ost o f hac k i n g tools a n d a l egi on o f b ots , b ot h o f w hich R o BeR t soon e ntrust ed to H o g u e XR H ost b oot e r 1.4 a n d Bi ozom bie , t he two most i mport a nt c r i m e w a r e pro g r a ms H o g u e According to the FBI, Blackshades has generated $350,000 in sales and infected over half a million computers. Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture w a s f r ee ly gi v e n , a llow ed hi m to i n fec t unsusp ec t i n g v ic t i ms ’ c omput e rs w i t h m a lw a r e t ha t turn ed t he m i nto b ots , or sl a v e s O n ce i n fec t ed , he c oul d us e t he m i n w ha t ’ s known a s a di str ib ut ed de n ia l - o f - s e rv ice a tt ac k ( DD o S ), w hich works b y ov e rw he lm i n g a sp eci fi c IP add r e ss w i t h p ac k e ts o f da t a , e v e ntu a lly f or ci n g i t o f fl i n e DD o S a tt ac ks ca n be us ed agai nst i n di v id u a ls , to chea t i n v ide o ga m e s , or a t t he lo gica l e xtr e m e , to t a k e d own e nt i r e w eb s i t e s or n e tworks . “[ R o BeR t ] pro bab ly [ took ov e r my c omput e r a n d ] m ade m e on e o f hi s b ots ,” H o g u e l a t e r wrot e i n a m e mo i r pu b l i s hed on Hac k F orums n e t , t he pr i m a ry sour ce f or t hi s a rt ic l e , “ b ut t ha t w a sn ’ t t he po i nt , I [ now ] c oul d b oot [ my own b ots ] on Xb ox Li v e I st a rt ed d o i n g i t r eg ul a rly .” A s c r ee n g r ab o f Bi ozom bie Whe n Wi n d ows 7 w a s r e l ea s ed i n 2009, H o g u e ’ s two w ea pons o f ch o ice su dde nly stopp ed work i n g B y t he n , h ow e v e r , he ’ d a lr ead y g rown t i r ed o f Ha lo a n d de lv ed dee p e r i nto t he b l ac k - ha t hac k i n g c ommun i ty He sp e nt hi s t i m e c o di n g hi s own v e rs i on o f t he tools t ha t not only work ed w i t h t he n e w op e r a t i n g syst e m b ut a lso m ade t he m ea s ie r to work w i t h a n d t h us mor e acce ss ib l e to mor e p e opl e t ha n e v e r bef or e H o g u e ’ s n e w hac ks i mm edia t e ly f oun d a sm a ll a u die n ce He put up a w eb s i t e a n d Y ou T u be v ide os t eachi n g ot he rs h ow to us e hi s tools to e nsl a v e c omput e rs f or t hei r own n efa r i ous purpos e s S oon , str a n ge rs bega n r i pp i n g hi s v ide os a n d post i n g c op ie s w i t h i n fec t ed l i nks t ha t , i n turn , m ade t he m achi n e s o f t he unsusp ec t i n g d ownlo ade rs sl a v e s t he ms e lv e s H o g u e w a s i nsp i r ed . “ I fi g ur ed I woul d j o i n i n on t he f un .” He bega n sl i pp i n g i n l i nks to hi s hac k i n g pro g r a ms t ha t i n fec t ed us e rs w i t h a RAT t ha t ea s i ly woul d gi v e hi m c ompl e t e c ontrol a n d knowl edge ov e r e v e ryt hi n g t he v ic t i m ’ s c omput e r did S oon , he had a sm a ll a rmy o f sl a v e s a n d a g row i n g fa n ba s e . “ I ’ m not prou d o f t ha t ,” H o g u e r e fl ec t ed l a t e r , “ b ut , w e ll , i t ha pp e n ed .” A d u a l l ife I n 2009, H o g u e ’ s r ea l ed u ca t i on bega n B y da y , he w a s a c omput e r s cie n ce stu de nt a t t he U n i v e rs i ty o f A r i zon a B y n igh t , he w a s lurk i n g i n hac k e r f orums , most not ab ly u N kn 0 wn e u a n d Hac k _ H oun d F or $100, he b ou gh t a pro g r a m ca ll ed D - C rypt t ha t hid m a lw a r e f rom de t ec t i on A ll t he w hi l e , hi s a rmy o f sl a v e s w a s g row i n g e xpon e nt ia lly . “ I woul d put up t he s a m e Ad o be Ph otos h op CS 4 torr e nt e v e ry da y ,” he e xpl ai n ed , “ a n d ge t ov e r 1,000 i n fec t i ons p e r w ee k .” H o g u e sp e nt hi s first s e m e st e r i n c oll ege l ea rn i n g to Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture pro g r a m i n Vi su a l Ba s ic 6 to de v e lop hi s first f ully fea tur ed pro d u c t : x Vi s ce r a l 1.0. Re l ea s ed i n Feb ru a ry 2010, i t w a s a chea p , s i mpl e , a n d pot e nt de n ia l - o f - s e rv ice w ea pon I t sol d f or $15 a t Hac k F orums n e t , a s eed y T oys “ R ” U s f or hac k e rs w h o o f t e n n eed t he k i n d o f tr ai n i n g w hee ls H o g u e sp ecia l i z ed i n X v i s ce r a l v e rs i on 1.0 XVi s ce r a l 1.0, h ow e v e r , w a s a slow s e ll e r I n r e spons e , H o g u e r e l ea s ed a f r ee m i n i v e rs i on o f t he pro g r a m t ha t did not hi n g to he lp hi s s h r i nk i n g ba nk acc ount b ut did gai n hi m a mu ch w ide r f ollow i n g t ha t ca m e to lov e hi s qu ic k r e spons e to b u g s a n d fea tur e r e qu e sts Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture X v i s ce r a l m i n i J ust pr i or to hi s first c omm e r cia l r e l ea s e , H o g u e r egi st e r ed x Vi s ce r a l c om , a mov e m ea nt to he lp b u i l d hi s p e rson a l b r a n d He us ed hi s r ea l n a m e a n d T u c son , A r i z ., add r e ss to b uy t he n e w d om ai n I t woul d ult i m a t e ly prov e hi s d own fa ll The rus h to m a rk e t If H o g u e w a s g o i n g to t a k e hi s hac k i n g to t he n e xt l e v e l , he kn e w he n eeded he lp He f or ged a p a rtn e rs hi p w i t h Ma r ji n Z , t he t a l e nt ed hac k e r w h o had or igi n a lly sol d hi m D - C rypt Lac k i n g t he e xp e r ie n ce a n d know - h ow to b u i l d be tt e r c r i m e w a r e , x Vi s ce r a l a n d Ma r ji nz e nt e r ed i nto a 50/50 dea l to c ont i nu e de v e lopm e nt o f x Vi s ce r a l ’ s work — on t he c on di t i on t ha t t he y cha n ge t he n a m e f rom x Vi s ce r a l to B l ac ks hade s H o g u e c ont i nu ed c o di n g work on v e ry ba s ic fea tur e s t ha t he c oul d ha n d l e w hi l e Ma r ji n Z added mor e c ompl e x , m a rqu ee w ea pons Whi l e Ma r ji n Z w a s mor e t a l e nt ed , H o g u e r e m ai n ed t he pu b l ic face o f B l ac ks hade s , t ha nks to hi s agg r e ss i v e m a rk e t i n g a n d effec t i v e c ustom e r support The p ai r ’ s first pro d u c t , B l ac ks hade s 2.3, hi t t he m a rk e t i n 2010 f or $50, p a y ab l e t h rou gh We st e rn U n i on or Libe rty Re s e rv e , t he l a tt e r o f w hich ha s s i n ce bee n s h ut d own f or mon e y l a un de r i n g B l ac ks hade s a n d pro g r a ms l i k e i t w e r e t ai lor - m ade to c omm i t s e r i ous c y be r c r i m e s C ru cia lly , h ow e v e r , B l ac ks hade s i ts e l f w a s not i ll ega l H o g u e pu b l ic ly ca ll ed B l ac ks hade s “ pro fe ss i on a l c omput e r surv ei ll a n ce ” a n d , on hi s w eb s i t e a n d i n m a rk e t i n g m a t e r ia l a roun d t he I nt e rn e t , he outl i n ed poss ib l e l ega l us e s o f t he tool , su ch a s n e twork m ai nt e n a n ce a n d r e mot e c omput e r r e p ai r The t e rms o f us e e v e n e xpr e ssly pro hibi t ed us i n g B l ac ks hade s to hac k a nyon e a t a ll Th os e pr e t e ns e s w e r e ab ruptly d ropp ed , h ow e v e r , w he n H o g u e m ade B l ac ks hade s a v ai l ab l e on Ca r de r P rofit cc , a b l ac k - ha t s i t e t ha t e xpl ici tly a n d e x c lus i v e ly e n ab l ed c r edi t ca r d f r a u d on a m a ss i v e s ca l e Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture A s c r ee n g r ab o f Ca r de r P rofit U n de r Ma r ji n Z ’ s st e w a r d s hi p , B l ac ks hade s bega n to i n c lu de mor e pot e nt w ea pons l i k e a utom a t ic c r edi t ca r d k e ylo ggi n g A s H o g u e e xpl ai n ed i n hi s p i t ch to t he op e r a tor o f Ca r de r P rofit , a us e r known only a s m 4 v 3 r 1 c k : “[ Y ] ou ca n d ownlo ad f rom a ll a t on ce , or s ca n f or k e ywor d s , or digi ts a n d if i t de t ec ts a C r edi t Ca r d i s bei n g e nt e r ed i t ca n s e n d s c r ee ns h ots to FTP a n d you ca n s ca n f or digi ts t ha t a r e 16 i n a row : P ” De sp i t e c ompl ica t i ons — H o g u e had to n eg ot ia t e w i t h a n d t he n p a y o ff a t a l e nt ed hac k e r w h o k e pt c r ac k i n g t hei r so f tw a r e a n d r e l ea s i n g i t f or f r ee — s a l e s e xplo ded Th rou gh x Vi s ce r a l ’ s m a rk e t i n g a n d Ma r ji n Z ’ s c o di n g , B l ac ks hade s e xp a n ded i nto a w ide sp ec trum o f n e w pro d u c ts t ha t a llow ed us e rs to st ea l p a sswor d s , run e nsl a v ed c omput e rs f rom a lmost a ny de v ice , o bf us ca t e lo ca t i ons , defe n d agai nst m a lw a r e , a n d i nfiltr a t e v i rtu a lly e v e ry c orn e r o f a v ic t i m ’ s c omput e r S oon , H o g u e w a s r ecei v i n g h un d r ed s o f m e ss age s each da y a s t he c omp a ny ’ s de fac to c ustom e r s e rv ice r e p “ I t w a s r idic ulous ,” he s aid , “ a n d I w a s ab out to t ea r my hai r out .” B l ac ks hade s NET I n 2011, H o g u e pu b l ic ly r e s ig n ed f rom hi s pos i t i on a t B l ac ks hade s , b urn ed out a n d r e l ie v ed to be d on e w i t h i t a ll He w a s “ begged ” to st a y b y Ma r ji n Z , H o g u e s aid , b ut he c oul d n ’ t be c onv i n ced He r e turn ed to B l ac ks hade s l e ss t ha n a y ea r l a t e r , look i n g f or mor e mon e y a n d fl ai r B l ac ks hade s ge n e r a t ed ov e r $350,000 i n s a l e s a n d i n fec t ed ov e r ha l f a m i ll i on c omput e rs , acc or di n g to t he FBI , b ut mu ch mor e m a y ha v e bee n stol e n b y i ts us e rs f rom v ic t i ms ac ross t he g lo be Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture B l ac ks hade s had t a k e n on a l ife o f i ts own The S yr ia n upr i s i n g B y Ma y 2012, t he w a r i n S yr ia w a s r eachi n g a b loo d y n e w pl a t ea u A b r ief cea s e fir e e n ded w i t h t he H oul a m a ss ac r e w he n 108 v i ll age rs w e r e summ a r i ly e x ec ut ed , w i tn e ss e s s aid , b y pro - g ov e rnm e nt m i l i t ia s A roun d t ha t t i m e , t he S yr ia n g ov e rnm e nt added B l ac ks hade s to i ts a rs e n a l I t w a s a ttr ac t i v e a n d effec t i v e beca us e i t w a s so g oo d a t a vo idi n g de t ec t i on — a c rypt e r a n d b ot m a rk e tpl ace w a s e m bedded i n t he tool so t ha t a nyon e c oul d ea s i ly b uy a t h ous a n d e nsl a v ed c omput e rs or a c ustom c rypt e r to c lo a k t hei r own a tt ac ks S yr ia ns w ie l ded B l ac ks hade s l i k e a kn ife , s e n di n g S kyp e m e ss age s f rom c omprom i s ed acc ounts to sol die rs i n t he F r ee S yr ia n A rmy , a 50,000- stron g c omm a n d t ha t ’ s oppos ed A ss ad s i n ce 2011. O n ce r ebe ls m i st a k e nly d ownlo aded B l ac ks hade s , i t spurr ed a d om i no effec t : I t d ropp ed fil e s i nto mult i pl e us e r di r ec tor ie s , c r ea t ed r egi stry e ntr ie s i n or de r to acce ss t he I nt e rn e t , a n d b yp a ss ed t he Wi n d ows fir e w a ll i n or de r to c ommun ica t e bac k to i ts m a st e r B l ac ks hade s t he n e st ab l i s hed a n A uto R un k e y i n or de r to st a rt up e v e ry t i m e t he c omput e r w a s turn ed on , unp ac k ed i ts e l f , a n d st a rt ed t a lk i n g to t he S yr ia n g ov e rnm e nt c omm a n d a n d c ontrol Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture Sc r ee n g r ab v ia E l ec tron ic F ront ie r F oun da t i on The a tt ac k fl e w un de r t he r ada r f or w ee ks , un de t ec t ed b y t he v a st m aj or i ty o f a nt i v i rus pro d u c ts on t he m a rk e t I t w a s e v e ntu a lly di s c ov e r ed b y We st e rn ac t i v i st or ga n i z a t i ons l i k e t he E l ec tron ic F ront ie r F oun da t i on , w hich f oun d t ha t B l ac ks hade s ca ll ed bac k to t he s a m e w eb s i t e a s pr e v i ous S yr ia n a tt ac ks — a s ig n , acc or di n g to Ada m K u ja w a o f s ec ur i ty firm Ma lw a r e B yt e s , t ha t t he hac k e rs w e r e n ’ t p a rt ic ul a rly sk i ll ed “ Thi s m ea ns t ha t r ega r d l e ss o f a ll t he o bf us ca t i on us ed b y t he hac k e rs to hide t he i mpl a nt bi n a ry , t he y a r e st i ll us i n g t he a t l ea st som e o f t he defa ult s e tt i n g s f or t he i mpl a nts t he ms e lv e s ,” K u ja w a e xpl ai n ed . “ Thi s i s usu a lly a s ig n o f a l ac k o f e xp e r ie n ce us i n g t hi s k i n d o f tool or a l ac k o f c on ce rn f or us i n g t he tool c orr ec tly .” H o g u e , st i ll t he pu b l ic face o f B l ac ks hade s de sp i t e a l e n g t h y ab s e n ce , ha st i ly di sm i ss ed t he r e ports ab out B l ac ks hade s us e i n S yr ia Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture A l a st i n g l egac y I n l a t e J uly 2012, on e w ee k af t e r t he worl d l ea rn ed ab out S yr ia ’ s us e o f B l ac ks hade s , fede r a l a ut h or i t ie s a rr e st ed H o g u e i n T u c son , A r i z He w a s cha r ged w i t h c onsp i r ac y to c omm i t c omput e r hac k i n g a n d di str ib ut i on o f m a lw a r e , b ot h o f w hich ca rry s e nt e n ce s o f up to 10 y ea rs Ca r de r P rofit cc , i n turn ed out , w a s p a rt o f a n e l ab or a t e FBI st i n g r e sult i n g i n d oz e ns o f a rr e sts i n 13 c ountr ie s , ca ll ed “ t he l a r ge st c oor di n a t ed i nt e rn a t i on a l l a w e n f or ce m e nt ac t i on i n hi story di r ec t ed a t ‘ ca r di n g ’ c r i m e s .” I n hi s or igi n a l m a rk e t i n g p i t ch , H o g u e had op e nly ad m i tt ed hi s c r i m e s — i n c lu di n g us i n g hijac k ed c omput e rs to c omm i t c r edi t ca r d f r a u d — to a fede r a l age nt pos i n g a s t he hac k e r m 4 v 3 r 1 c k O n e y ea r l a t e r , i n t he summ e r o f 2013, Ma r ji n Z — r e v ea l ed to be A l e x Y u ce l , a 24- y ea r - ol d S w edi s h hac k e r — w a s a rr e st ed i n M ol d ov a w hi l e s e ll i n g B l ac ks hade s to un de r c ov e r age nts He now face s 40 y ea rs i n pr i son f or cha r ge s i n c lu di n g c omput e r hac k i n g , acce ss de v ice f r a u d , c onsp i r i n g to c omm i t acce ss de v ice f r a u d , a n d agg r a v a t ed ide nt i ty t hef t I n Ma y 2014, n e ws b rok e t ha t l a w e n f or ce m e nt age n cie s i n 19 c ountr ie s had c oop e r a t ed to a rr e st mor e t ha n 90 mor e B l ac ks hade s us e rs — not ab ly i n c lu di n g 23- y ea r - ol d A m e r ica n B r e n da n J o h nson , w h o w a s b rou gh t i n a s t he c omp a ny ’ s chief m a rk e t e r F ollow i n g t he fa r - r eachi n g FBI - l ed t a k ed own o f B l ac ks hade s , t he hac ks t ha t H o g u e a n d Y u ce l m ade ea s i ly a v ai l ab l e to t he worl d ha v e had a d yn a m ic af t e rl ife I n i t ia lly , worl d w ide B l ac ks hade s i n fec t i ons fe ll to a t hi r d o f t he pr e v i ous l e v e l M or e r ece ntly , h ow e v e r , a tt ac ks b y t he RAT ha v e bee n on t he r i s e on ce agai n , e sp ecia lly agai nst b us i n e ss a n d p e rson a l t a r ge ts Ja r ed Ab r aha ms , a 20- y ea r - ol d c oll ege stu de nt , w a s a rr e st ed af t e r a ll eged ly us i n g B l ac ks hade s to hac k i nto Mi ss Tee n USA Ca ss id y W ol f ’ s c omput e r a n d t he n b l ac km ai l i n g he r a n d eigh t ot he r wom e n Ab r aha ms us ed t he c ompl e t e c ontrol he had ov e r W ol f ’ s c omput e r to s ec r e tly t a k e nu de p h otos o f he r w i t h he r own w ebca m “ The l a r ge num be r o f fea tur e s c om bi n ed w i t h i ts ea s e - o f - us e ha s he lp ed B l ac ks hade s RAT flour i s h a mon g a sp i r i n g c y be r c r i m i n a ls a n d e v e n mor e s ea son ed m a l ici ous ac tors ,” s ec ur i ty firm P rol e x ic e xpl ai n ed i n a r ece nt r e port on B l ac ks hade s . “ I t ha s gai n ed t he i nt e r e st o f m aj or or ga n i z ed c r i m e g roups a n d g ov e rnm e nt e nt i t ie s The FBI ’ s t a k ed own o f t he o f fi cia l w eb p age a n d su b s e qu e nt m a ss a rr e sts a r e a t e st a m e nt to t he popul a r i ty o f t he toolk i t i ts e l f .” P rol e x ic e xp ec ts B l ac ks hade s to be a pot e nt c y be rw ea pon f or t he f or e s eeab l e f utur e I n t he ab yss a l worl d o f c y be r c r i m e , you ca n stop t he hac k e rs e v e ntu a lly , b ut on ce t hei r c o de ha s bee n wr i tt e n , t he r e ’ s no t e ll i n g w he r e i t m igh t e n d up Ph oto v ia bc l i n e sm i t h / F l ic kr ( CC BY 2.0) | Re m i x b y Ja son Reed Syrians wielded Blackshades like a knife, sending Skype messages from compromised accounts to solfiers in the Free Syrian Army. Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture ADVERTISEMENT ALSO IN THIS ISSUE The fall of the FBI’s most-wanted cybercriminal The fall of the FBI’s most-wanted cybercriminal < < > > Go FEB JUN JUL 24 2016 2017 2019 11 captures https://kernelmag.dailydot.com/issue-sections/features-issue-sections/9913/blackshades-rat- 👤 ⍰ ❎ f 🐦 11 Aug 2014 - 29 Jul 2019 ▾ About this capture