im in ur network, hacking ur filez
They say (“they” being “Mac McMillan of CynergisTek Inc.”) that cyber-crime is now the most lucrative form of crime, surpassing even illegal drug sales. Hackers go after large enterprises' networks, and sometimes hold those networks hostage, promising to take companies like E-Bay or Amazon.com offline unless a ransom is paid.
There are different types of hackers, from elite hackers who are considered virtually unstoppable, to ‘script kiddies,’ amateurs who download hacking tools from the internet and inadvertently destroy everything they touch.
Serious attacks, however, often follow this pattern:
Fingerprinting
This involves gathering data from public sources, such as Google and internet registration services. Once a hacker has a piece of real information—a contact in the company, for example—they can begin what is called ‘Social engineering.’ Social engineering can involve calling people and pretending to be someone else in order to get sensitive information. Using this data, hackers can determine the best approach to the target.
Scanning and Enumeration
In this step, hackers begin scanning the target network using tools they either write or download from the internet. There are over 50,000 web sites devoted to hacker tools, so they’re not hard to find.
Attack Preparation
This is where the hacker selects the hacking tools they’ll need to penetrate the network, and determines the exact risk factor they will face. The risk, of course, is that they might be discovered and go to jail.
Exploitation
Using their selected tools, they enter the network and stop to see if they have been detected.
Consolidation
Once inside, the hacker begins closing the security holes that allowed them in. They don’t want anyone else entering the system behind them. They also create ‘back-doors,' or places where they can enter the system without being detected. In attacks on personal computers, this is where the hacker—or a program they create—can embed itself in your system for the purpose of awakening and taking control of your computer at a time they specify.
Removing Evidence
Now that the hacker has control. They will begin clearing their tracks. This includes erasing log files and turning off audit features. At this point, a hacker may confidently make a ransom demand, if they are inclined, or they may simply continue to collect your database information in order to sell it to third parties.
Keith Garner of NAR’s Center for Realtor® Technology demonstrated a few of the tools hackers (and legitimate security analysts) use. In seconds, he identified all of the wireless networks in the area (with the option of hacking their passwords and accessing them), and even identified the names of certain people in the room, announcing what phones they were carrying.
A few points to remember--the best defense against attacks is to know what can hurt you, and how it's done.
