Brian Krebs Gets SWATted
RedLeg writes "ArsTechnica reports that Brian Krebs, of KrebsOnSecurity.com, formerly of the Washington Post, recently got SWATted. For those not familiar with the term, SWATting is the practice of spoofing a call to emergency responders (911 in the U.S.) to induce an overwhelming and potentially devastating response from law enforcement and/or other first responders to the home or residence of the victim. Brian's first-person account of the incident and what he believes to be related events are chronicled here.
Krebs has been prominent in the takedown of several cyber-criminal groups in the past, and has been subject to retaliation. I guess this time he poked the wrong bear."
This wouldn't be nearly as dangerous if we didn't live in a society where a significant portion of our law-enforcement feel like above-the-law gung-ho cowboys looking to shoot now and ask questions later that respond to "large black ex-military man in a green truck" by shooting asian women in a blue van. Cops are trained to approach every incident as a potentially dangerous or life-threatening one and it's pretty much to the point where citizens need to treat every encounter with the police as a potentially deadly one.
Does reporting about criminal groups really count as poking the wrong bear? Or do you think he deserves everything he gets?
SWATting is the practice of spoofing a call to emergency responders (911 in the U.S.) to induce an overwhelming and potentially devastating response from law enforcement and/or other first responders to the home or residence of the victim.
Seriously, what the fuck is wrong with people? I'm not sure what is worse; that someone came up with doing this, the fact that this happens enough that there's a term for it, or the caviler way the summary reports it. "I guess this time he poked the wrong bear."
This morning, Dan Goodin, a good friend and colleague at Ars Technica, published a story about my ordeal after a late night phone interview. This morning, Ars Technica found itself on the receiving end of a nearly identical attack that was launched against my site on Thursday. Turns out, the records at booter.tw show clearly that a customer named Starfall using that same Gmail address also paid for an attack on Arstechnica.com, beginning at approximately 11:54 a.m. ET. A snippet of the logs from booter.tw showing the attack on Ars Technica.com (a.k.a. ‘http://50.31.151.33‘ in the logs) is here.
According to Eric Bangeman, Ars Technica’s managing editor, their site was indeed attacked starting earlier this morning with a denial-of-service flood that briefly knocked the site offline.
“We’ve been up and down all morning, and the [content management system] was basically inaccessible for 2 hours,” Bangeman said, adding that he wasn’t aware of an attack of similar size that knocked the site offline. “If it did, it wasn’t enough to be registering in my memory, and I’ve been around for 10 years.”
For those that say "anonymity on the Internet is not important", look no further than this story for proof that you're wrong.
Sometimes good guys should be both permitted and encouraged to guard their anonymity and privacy online. It is not just for those doing wrong.
I want to know how people can call 911 and report something like this without being discovered. Every 911 call is traced immediately, and mobile calls automatically get GPS fixed. Are they using a stolen mobile from a car or something like that?
All that ended when we went to the Interwbz for phone. Now I have no idea how phone calls can be made unspoofable.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
I was worried that EA was doing it in response to the bad reviews SimCity was getting.
A popular product with always-online DRM could create a heck of a botnet.
The threat implied here is that people get shot during SWAT raids.
Either because an officer "accidentally" discharges his weapon or because a resident defends themselves against an apparent home invasion or because they thought they saw a gun.
Property is also often damaged.