background preloader

Anatomy of a Hack

Facebook Twitter

HBGary. HBGary is subsidiary company of ManTech International, focused on technology security.

HBGary

In the past two distinct but affiliated firms had carried the HBGary name: HBGary Federal, which sold its products to the US Federal Government,[3] and HB Gary, Inc.[4] Its other clients included information assurance companies, computer emergency response teams, and computer forensic investigators.[5] On February 29, 2012, HBGary, Inc. announced it was acquired by IT services firm ManTech International.[6] At the same time, HBGary Federal has been reported to be closed.[6] History[edit] The company was founded by Greg Hoglund in 2003.[1] In 2008, it joined the McAfee Security Innovation Alliance.[5] The CEO made presentations at the Black Hat Briefings, the RSA Conference, and other computer security conferences.[7][8] HBGary also analyzed the GhostNet and Operation Aurora events.[3][7] As of 2010, it had offices in Sacramento, California, Washington, D.C., and Bethesda, Maryland.[2] Fallout[edit]

Depth Security: HBGary Incident - Anatomy of the Attack. How one man tracked down Anonymous—and paid a heavy price. Aaron Barr believed he had penetrated Anonymous.

How one man tracked down Anonymous—and paid a heavy price

The loose hacker collective had been responsible for everything from anti-Scientology protests to pro-Wikileaks attacks on MasterCard and Visa, and the FBI was now after them. But matching their online identities to real-world names and locations proved daunting. Barr found a way to crack the code. In a private e-mail to a colleague at his security firm HBGary Federal, which sells digital tools to the US government, the CEO bragged about his research project. "They think I have nothing but a heirarchy based on IRC [Internet Relay Chat] aliases! " But had he? "We are kind of pissed at him right now" Barr's "pwning" meant finding out the names and addresses of the top Anonymous leadership. "At any given time there are probably no more than 20-40 people active, accept during hightened points of activity like Egypt and Tunisia where the numbers swell but mostly by trolls," he wrote in an internal e-mail.

Indeed, publicity was the plan. Anonymous speaks: the inside story of the HBGary hack. It has been an embarrassing week for security firm HBGary and its HBGary Federal offshoot.

Anonymous speaks: the inside story of the HBGary hack

HBGary Federal CEO Aaron Barr thought he had unmasked the hacker hordes of Anonymous and was preparing to name and shame those responsible for co-ordinating the group's actions, including the denial-of-service attacks that hit MasterCard, Visa, and other perceived enemies of WikiLeaks late last year. When Barr told one of those he believed to be an Anonymous ringleader about his forthcoming exposé, the Anonymous response was swift and humiliating. HBGary's servers were broken into, its e-mails pillaged and published to the world, its data destroyed, and its website defaced. As an added bonus, a second site owned and operated by Greg Hoglund, owner of HBGary, was taken offline and the user registration database published. Anonymous: more than kids HBGary and HBGary Federal position themselves as experts in computer security.

Time for an injection.