Live data from Hacker News

How does one get hired by a top cybercrime gang?

krebsonsecurity.com

131–140 of 152 posts

Re: How does one get hired by a top cybercrime gang?

#131
post #114

Not entirely related, but at the end of the 90s, just before the big Y2K, I was living in San Francisco, and interviewed at a residential house with some guy who was in the business of popups. The malware of that time. The job was to basically to do WHATEVER it takes to make those popups pop. No rules, anything goes, dirty tricks and all. Hated popups. Didn't take the job.

Before popunders then?

Re: How does one get hired by a top cybercrime gang?

#132
post #100

Earlier quoted context omitted.

I'm sorry to hear that about your friend. Its never good to hear about how someone threw their life away for temporary rewards. You say they weren't violent, but violence is not the only reason we incarcerate individuals. He broke the law, he knew it, he got caught, and now he's living with those consequences. I hope he learns a lot from this and decides to no longer break the law in the future. I hope others can rea…

I'm not sure why people are down voting you. They disagree with the law? The law exists. He broke it. If you don't like it, work to change the law. I got a speeding ticket - can I get a bunch of up votes because no one likes to get a speeding ticket? As an aside, Americans like to think they live in a bubble. Like their actions are independent from everyone else's and my bad decisions don't impact other people. This…

>"There are HOAs that maintain neighborhoods - because it is good for the neighborhood"

Oh I hate those with all my guts. And no, they're not good for the neighborhood. They're good for destroying whatever little self respect and dignity people have left. I wish those control HOA freaks will go to /dev/null .

Re: How does one get hired by a top cybercrime gang?

#133
post #10
post #4

This reminds me of the story in Freakanomics about the street level drug dealers making basically minimum wage, with the majority of the money going to high level traffickers who are typically firewalled through layers of middlemen.

It doesn't say what these coders make. But, as with the dealers, it's likely tax free, so even "minimum wage" is better than it sounds.

There was a part in the article about cyber criminal gangs having a steady stream of cheap programmers.

Presumably there in cities with "drug problems", there are also a steady stream of relatively young kids with limited options, and no desire to stay in school.

Re: How does one get hired by a top cybercrime gang?

#134
post #47
post #4

This reminds me of the story in Freakanomics about the street level drug dealers making basically minimum wage, with the majority of the money going to high level traffickers who are typically firewalled through layers of middlemen.

It's common in a fair number of places: professional sports, music, book writing (among those doing it for money), acting, law (to a lesser degree). The very top does well, even very very well. Most everyone else scrapes by--if that. Most professional jobs aren't like that. Sure senior execs can make an outsized amount of money but most of the rank and file are still doing OK.

I believe most major US professional sports have players unions, which provides minimum salaries that are livable.

Though I recall ~20 years ago that MLB players on league minimums (~70k/yr) were able to collect state unemployment benefits during the off season.

Re: How does one get hired by a top cybercrime gang?

#135
post #126

In many of Krebs' other articles the criminals are men in their 50s or 60s, but this has never warranted a passing mention or any sympathy. Should she get a lighter sentence for being a woman? Don't we all want equity in software development and elsewhere? Until half of all criminal ransomware developers, and half the prison population, are women, it would seem we have a problem as a society. This is actually a great…

While I'm with you on the weird degree to which he focuses on it, I'm not seeing the sympathy. And where's the mention of lighter sentencing?

It reads instead to me as paternalistic and honestly verging into weirdly misogynistic. More a tone of How did this mere mother manage to get involved in crime?

Re: How does one get hired by a top cybercrime gang?

#136
post #113

Earlier quoted context omitted.

https://en.wikipedia.org/wiki/Legality_of_cannabis_by_U.S._j... Marijuana is legal or decriminalised in most of the developed world, including the USA. It's widely accepted to be relatively harmless, much less harmful than alcohol. This guy? He was an entrepreneur, just another person running a small business with a couple of employees. He didn't deserver a long jail sentence for someone else's fuck up. Just because…

What do we call entrepreneurs that break the law? Criminals.

We who? Depends what law. If you broke the law that prevents harming other people then sure. If however the law is totally unjust (and some of them really are) they might be criminals only from the point of view of the crooks that make our governments and write laws. Me - I would call them victims of fucked up system where some self-righteous POS dictates how people should live their lives.

And yes. Money talk. The less money one has the less chances to get justice.

Re: How does one get hired by a top cybercrime gang?

#137
post #126

In many of Krebs' other articles the criminals are men in their 50s or 60s, but this has never warranted a passing mention or any sympathy. Should she get a lighter sentence for being a woman? Don't we all want equity in software development and elsewhere? Until half of all criminal ransomware developers, and half the prison population, are women, it would seem we have a problem as a society. This is actually a great…

You're extrapolating an elaborate political agenda from an extremely brief description of a criminal.

Re: How does one get hired by a top cybercrime gang?

#138
post #100

Earlier quoted context omitted.

I'm sorry to hear that about your friend. Its never good to hear about how someone threw their life away for temporary rewards. You say they weren't violent, but violence is not the only reason we incarcerate individuals. He broke the law, he knew it, he got caught, and now he's living with those consequences. I hope he learns a lot from this and decides to no longer break the law in the future. I hope others can rea…

I'm not sure why people are down voting you. They disagree with the law? The law exists. He broke it. If you don't like it, work to change the law. I got a speeding ticket - can I get a bunch of up votes because no one likes to get a speeding ticket? As an aside, Americans like to think they live in a bubble. Like their actions are independent from everyone else's and my bad decisions don't impact other people. This…

How many people at Wells Fargo went to jail for their massive fraudulent creation of accounts?

People are allowed to be upset with how the law is unevenly applied.

Re: How does one get hired by a top cybercrime gang?

#139
post #37

Wait hang on, that cliff hanger though >"Multiple security experts quickly zeroed in on how investigators were able to retrieve the funds, which did not represent the total amount Colonial paid (~$4.4 million): The amount seized was roughly what a top DarkSide affiliate would have earned for scoring the initial malware infection that precipitated the ransomware incident." I'm not quite sure what this implies? That th…

>I'm not quite sure what this implies? That the team who did the initial infection was in fact some sort of FBI undercover? I suppose that's one of the many possibilities that are implied, but its not even close to the most likely. I think its more likely that some of the attackers' systems or accounts were compromised (AKA hacked).

why is that more likely that the attackers systems were compromised?

Does it not sound weird that a cybercrime gang would leave a hot wallet on some random VPS? That seems incredibly unlikely.

Re: How does one get hired by a top cybercrime gang?

#140
post #37

Wait hang on, that cliff hanger though >"Multiple security experts quickly zeroed in on how investigators were able to retrieve the funds, which did not represent the total amount Colonial paid (~$4.4 million): The amount seized was roughly what a top DarkSide affiliate would have earned for scoring the initial malware infection that precipitated the ransomware incident." I'm not quite sure what this implies? That th…

>I'm not quite sure what this implies? That the team who did the initial infection was in fact some sort of FBI undercover? I suppose that's one of the many possibilities that are implied, but its not even close to the most likely. I think its more likely that some of the attackers' systems or accounts were compromised (AKA hacked).

US agencies have tried to set up action and had it get away from them. More the CIA than the FBI from memory.
Post reply on HN