If you say, hack stratfor, all of a sudden the NSA is making you its bitch in a back room while the rest of the law enforcement community cheers. If you make a mistake and get attention from state level entities though. TOR is probably enough if you're just defacing some websites with slurs and some really low quality porn. A proxy in a difficult country is probably enough if you're just hacking schools and changing a few grades. This creates a feedback loop where police are not really incentivized to fight those tools, and badguys don't bother with the effort to employ highly effective anonymization OPSEC. 99% of the time, standard detective stuff gets the bad guys, not elite counterhacking and tracing. They buy stuff with bitcoin gained from selling loot in an attack and then have the sweet gainz mailed to their home address. They use their credit card (or their moms) to buy a URL and then use it to serve malware on accident. They directly connect to an email they're using to taunt the victim through their home connection. As a result many hackers cut corners and/or make mistakes. Very few people are doing hacking or other illegal activities that are worth the difficulty of obfuscating their presence this much. When you combine this with tor and SSL tunneling it can get stupidly hard to figure out where the attacker is. This becomes especially true if the attacker sets the logs to regularly wipe when they're in your systems.
The same with corporations, if you're knees deep in bribes and blackmail you don't want the feds poking around. It's difficult to get Iran, Venezuela, Russia, or China let you into their servers for forensics. The only 2 things that together are fairly effective are hacked servers in unfriendly countries and TOR.
0 kommentar(er)
