Feeds

Three more charged in Anonymous hack spree probe

Trans-Atlantic sweep continues

Security for virtualized datacentres

Federal prosecutors filed charges against three men accused of carrying out website attacks as part of an extended campaign linked to the Anonymous hacking crew.

Cody Kretsinger, 23, of Phoenix was accused of participating in a hack of the Sony Pictures website that exposed the names, email addresses, and passwords of thousands of consumers. He was arrested Thursday morning on charges of conspiracy and the unauthorized impairment of a protected computer. He was scheduled to appear in federal court later in the day.

According to an indictment unsealed in Los Angeles federal court after his arrest, Kretsinger was a member of LulzSec, which is said to be a splinter group of Anonymous. The document alleged that from May 27 to June 2, he and his colleagues made “tens of thousands of requests for confidential data” using SQL injection techniques, which pass powerful database commands to a website's backend system by including them in search boxes and other input fields of poorly secured websites.

Once the gang obtained the data, they posted it online and bragged about the exploit over Twitter, prosecutors said. To cover his tracks, Kretsinger allegedly used the hidemyass.com proxy service, and he completely wiped his hard drive afterward.

Kretsinger's arrest came the same day that federal officials charged two men with participating in distributed denial-of-service attacks on websites belonging to the County of Santa Cruz, about an hour's drive south of San Francisco. According to an indictment filed in federal court in San Jose, California, Christoper Doyon and Joshua John Covelli carried out the attacks in retribution for the enforcement of a law that prohibited the overnight camping within the Santa Cruz city limits. The December 2 DDoS assault took the website offline, prosecutors said.

Covelli, 26, of Fairborn, Ohio, was one of 13 people previously charged with participating in the Anonymous-organized DDoS of PayPal in December. His next court appearance is scheduled for November 1.

Christopher Doyon, 47, of Mountain View, California, and Covelli, allegedly were members of the People's Liberation Front, another Anonymous splinter group. They allegedly used the High Orbit Ion Cannon to bombard the Santa Cruz County servers with more traffic than they could handle, causing damages exceeding $5,000.

In the past few months, dozens of people in North America and Europe have been snared in a trans-Atlantic investigation into a string of attacks attributed to LulzSec and Anonymous. Earlier this month, UK police charged three men and a 17-year-old for various computer offenses, including DDoS attacks in December on PayPal, Amazon, MasterCard, Bank of America, and Visa.

In July, US authorities charged 13 people with participating in the same DDoS campaign, which was waged to punish companies for refusing to process donations to WikiLeaks. Additional arrests have taken place in Spain, the Netherlands, and elsewhere.

Over the past 18 months, Anonymous and its offshoots have engaged in a DDoS and hacking spree that has also hit the Public Broadcasting System, Arizona law enforcement officers and others.

If convicted, Kretsinger faces a maximum sentence of 15 years in prison. Doyon and Covelli face as much as 15 years. ®

Beginner's guide to SSL certificates

More from The Register

next story
FYI: OS X Yosemite's Spotlight tells Apple EVERYTHING you're looking for
It's on by default – didn't you read the small print?
Edward who? GCHQ boss dodges Snowden topic during last speech
UK spies would rather 'walk' than do 'mass surveillance'
Microsoft pulls another dodgy patch
Redmond makes a hash of hashing add-on
NOT OK GOOGLE: Android images can conceal code
It's been fixed, but hordes won't have applied the upgrade
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
'LulzSec leader Aush0k' found to be naughty boy not worthy of jail
15 months home detention leaves egg on feds' faces as they grab for more power
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.