TL;DR: Underground groups typically contain two distinct classes: elites and kiddies as mentioned in this paper, the wizards who understand the inner workings of a proprietary system and are able to make it do things never intended by its developers.
Abstract: Many complicated, proprietary systems attract a community of underground innovators who explore and alter them ? and not always in ways that manufacturers appreciate. These individuals have little regard for the business models that companies have carefully devised to profit from those systems. Instead, they are driven by utility, curiosity and occasionally even anger, bypassing technical and legal safeguards in their drive to explore. Called by different names ? hackers, phreakers, crackers and modders, among them ? these underground innovators have complex and often antagonistic relationships with the companies whose products they modify. Indeed, in many cases the underground innovation triggers a war between the community and the company. But if handled properly, it also can lead to cooperation between the two parties, potentially resulting in new business models and novel products. To achieve that, though, companies first need to understand how underground communities operate.
Underground groups typically contain two distinct classes: elites and kiddies. "Elite" is a term reserved for those who truly innovate ? the wizards who understand the inner workings of a proprietary system and are able to make it do things never intended by its developers. "Kiddie" is short for "script kiddie," signifying someone who does not truly understand a system but merely uses tools created by the elites to exploit the system in some way. Most companies make the mistake of treating elites and kiddies the same way, often alienating those who might make positive contributions. A more effective approach is to nurture the constructive elites, rewarding and even supplying them with tools to encourage their efforts, all while deploying more aggressive means to thwart the destructive kiddies.
TL;DR: This study indicates that methods which have already been used years ago are still preferred methods today, and in ten out of twelve cases the observed characteristics fit within in the stereotype of a Script Kiddie.
Abstract: This paper outlines the results of a case study focusing upon hacking incidents in Germany. This work aims to identify behavioural aspects of hackers and their motives for the development of a Criminal Profile. Therefore cases of hacking incidents have been studied to find commonalities and differences for motives, as well as the Modus Operandi (MO). Cases that have been observed within this study are those in which the perpetrator had been identified in person. All cases have been provided by the Bundeskriminalamt (German Federal Criminal Police Office). A total of 12 cases are analysed, revealing a number of common traits in terms of hacker activity and the methods used. This study indicates that methods which have already been used years ago are still preferred methods today. In ten out of twelve cases the observed characteristics fit within in the stereotype of a Script Kiddie. Only two hackers differed regarding their motives compared to the Script Kiddie hackers, but a significant difference regarding their methods—the MO—could not be noticed. From the twelve cases under investigation a basic principle could be identified: the hackers take the path of the least effort. This reveals a clue for the fact that a different motive does not necessarily lead to different methods.
TL;DR: Four different attacks in GSM networks are presented, using commodity hardware as well as open source and freely available software tools, ranging from sniffing the signaling traffic to tracking and performing denial of service to the subscribers.
Abstract: With the emergence of widely available hardware and software tools for GSM hacking, the security of cellular networks is threatened even by script kiddies. In this paper we present four different attacks in GSM networks, using commodity hardware as well as open source and freely available software tools. All attacks are performed using a common DVB-T TV tuner, which is used as a sniffer for the GSM radio interface, as well as an Arduino combined with a GSM shield that is used as a software programmable mobile phone. The attacks target both mobile users and the network, ranging from sniffing the signaling traffic to tracking and performing denial of service to the subscribers. Despite the script kiddie style of the attacks, their consequences are critical and threaten the normal operation of the cellular networks.
TL;DR: In this paper, the authors focus on non-state actors, those involved in cyber warfare on an individual or small-group scale as well as at the corporate level, and explore their motivations and targets.
Abstract: In warfare—cyber or otherwise—nation states have the advantage of being on the proper legal and ethical side of things, and the potential advantage of having greater access to resources and materials. However, they have the distinct disadvantage of being bound by rules and morals, and are greatly restricted in their actions. Non-state actors take part in cyber warfare, but are not directly part of a nation state. Non-state actors can include script kiddies, scammers, hacktivists, blackhat hackers, criminal organizations, and other individuals or terrorist groups. This chapter focuses on non-state actors—those involved in cyber warfare on an individual or small-group scale as well as at the corporate level. It also discusses the role of cyber terrorists in cyber warfare activities and explores their motivations and targets. The chapter closes with a look at organized cyber criminal groups and how autonomous attack tools are used in cyber activities.