LulzSec group: catch me if you can!
The LulzSec said in its web site that after hacking hacked Sony Corp., the U.S. Senate, an FBI affiliate, the Public Broadcasting System, gaming sites, and online porn sites, the hack attacks will continue until "we're brought to justice, which we might well be."
The hacking group explained in the site that going public with the accounts and passwords from the sites they breached is better than keeping them private. It gives users a chance to change their passwords, the group says.
LulzSec has gained support from Internet sectors as their attacks make victims aware that their sites are not secure, and, thus allow them to provide more firewalls before valuable information are obtained by other hackers. In one instance, it hacked into the British health system computers but declined to cause damage or publish details, and instead warned admins. that the system was insecure. LulzSec recently twitted after SEGA was hacked that it loved Dreamcast and it wants to help the gaming company to take the hackers down.
However, the group acknowledged that they are releasing private information in full (the passwords) to be entertained on how other people mis-use the accounts that they have released. Just recently, the group posted 62,000 "random" e-mail accounts and passwords from users of Yahoo!, AOL, Comcast, Hotmail, Verizon, and Gmail, among others, that the group has illegally obtained.
"This is the lulz lizard era, where we do things just because we find it entertaining. Watching someone's Facebook picture turn into a penis and seeing their sister's shocked response is priceless. Receiving angry emails from the man you just sent 10 dildos to because he can't secure his Amazon password is priceless. You find it funny to watch havoc unfold, and we find it funny to cause it. We release personal data so that equally evil people can entertain us with what they do with it," Lulz said.
"Most of you reading this love the idea of wrecking someone else's online experience anonymously. It's appealing and unique, there are no two account hijackings that are the same, no two suddenly enraged girlfriends with the same expression when you admit to killing prostitutes from her boyfriend's recently stolen MSN account, and there's certainly no limit to the lulz lizardry that we all partake in on some level."
On June 15 in the afternoon, LulzSec posted an alert on Twitter: "Tango down - cia.gov - for the lulz." The site of the CIA, which engages in covert activities at the request of the President of the United States, was back two hours later. The CIA has not revealed that valuable information was stolen.
The group on June 13, the hackers cracked the U.S. Senate's Web site, saying "We don't like the US government very much. Their boats are weak, their lulz are low, and their sites aren't very secure. In an attempt to help them fix their issues, we've decided to donate additional lulz in the form of owning them some more!" Lulz Security posted a configuration file from the site, but the material suggests sensitive information was not breached.
LulzSec and other hacking groups have shown businesses and government agencies that their online data are vulnerable to breaches. And firms are now spending more to boost online security.
But you don't need to put double locks in your front door, if thieves are put behind bars.