Cyber Guerilla

Description

Much as Che Guevara's book Guerilla Warfare helped define and delineate a new type of warfare in the wake of the Cuban revolution in 1961, Cyber Guerilla will help define the new types of threats and fighters now appearing in the digital landscape. Cyber Guerilla provides valuable insight for infosec professionals and consultants, as well as government, military, and corporate IT strategists who must defend against myriad threats from non-state actors. The authors take readers inside the operations and tactics of cyber guerillas, who are changing the dynamics of cyber warfare and information security through their unconventional strategies and threats. This book draws lessons from the authors' own experiences but also from illustrative hacker groups such as Anonymous, LulzSec and Rebellious Rose. Cover Title Page Copyright Page Contents About the Authors Foreword Preface Introduction Chapter 1 - General principles of cyber guerilla Introduction The essence of cyber guerilla Cyber guerilla strategy Cyber guerilla tactics Cyber warfare on favorable terrain (When to wage guerilla) Cyber warfare on unfavorable terrain Conclusions Chapter 2 - The hacker group Introduction The hacker as social reformer The hacker as combatant The hacker group Disciplines Leadership Infrastructure Hacked infrastructure Shared web server Virtual private server Dedicated servers Physical access infrastructure Infrastructure ordered with stolen credit cards Anonymously purchased infrastructure Other assets Code signing certificates VoIP servers Internal communication The Onion Ring network Internet Relay Chat Levels of trust Forums Mobile phone messengers VPNs and CloudFlare Unconventional means and methods Recruiting Engineering The producer The viral growth engineer The creative hacker/engineer Forensics Command and control Data exfiltration Call backs Proxies Backend server Developers External communication Press relations Conclusions Chapter 3 - Organization of #operations Introduction Intelligence Counterintelligence in general Counterintelligence during operations Operations Cyber kill chain Reconnaissance Organizational aspects Defensive processes and mechanisms Technical aspects—available infrastructure and architecture Infrastructure layer Application layer Additional reconnaissance actions Weaponization Delivery Direct delivery Exploitation of common vulnerabilities Exploitation of uncommon vulnerabilities—zero day Physical delivery Denial-of-service (DOS) Indirect delivery Spear-phishing attacks Watering hole attacks Supply chain attacks Insider help Exploitation, installation, command and control and actions on objectives Advanced persistent threat life cycle Initial compromise Establish foothold Escalate privileges Internal reconnaissance Move laterally Maintain presence Complete mission Considerations during operations Target architectures and network segregation Attacking a network without segregation Attacking a network with limited segregation Attacking a heavily segregated network Dealing with monitoring and defense systems Ad hoc detection Limited monitoring Extensive monitoring Limits of encryption Tools and techniques Evasion techniques Evading signature-based malware detection Evading reputation-based malware detection Evading heuristic-based malware detection Evading network-based malware detection Evading hunting teams Network scanning tools Mapping tools for (internal) reconnaissance Password cracking tools Miscellaneous tools Effects Overview of effects Inform Mislead Cognitively degrade Deny, disrupt, and degrade Destroy Media strategy Media organization within the hacker group Considerations New media Using social media Using mail Using instant messaging Text messages Forums Blogs Multiplayer gamingj Other online capabilities Using conventional media Telephone Television, radio, newspapers/magazines, online news websites Postoperation posturing Chapter 4 - Appendices Introduction Illustrative hacker groups (Rickey Gevers) Anonymous LulzSec Jeremy Hammond—AntiSecurity Cult of the Dead Cow “cDc” Team TESO/ADM/w00w00/LSD-PL Chaos Computer Club Chinese APTs Rebellious Rose Anons Bataclan Future of hacker groups Future of Chapter 1 (Jelle van Haaster) Future of Chapter 2 (Rickey Gevers) Future of Chapter 3 (Martijn Sprengers) Index Back Cover