Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Alarm Raised On Teenage Hackers

Posted by ScuttleMonkey on Mon Oct 27, 2008 11:44 AM
from the moral-of-the-story-is-don't-get-caught dept.
Arno Igne writes to tell us that the number of underage participants in "high-tech" crimes has risen steeply in recent history. Reporting children as young as 11 swapping credit card details and asking for hacks, many are largely unskilled and thus more likely to get caught and arrested. "Communities and forums spring up where people start to swap malicious programs, knowledge and sometimes stolen data. Some also look for exploits and virus code that can be run against the social networking sites popular with many young people. Some then try to peddle or use the details or accounts they net in this way. Mr Boyd said he spent a lot of time tracking down the creators of many of the nuisance programs written to exploit users of social networking sites and the culprit was often a teenager."
+ -
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by Anonymous Coward on Monday October 27 2008, @11:46AM (#25529317)

    I wish we had a term to describe that... something that notes the fact they are younger, and simple in their skills... Maybe "script kiddies?"

    • by moderatorrater (1095745) on Monday October 27 2008, @12:07PM (#25529687)
      Yeah, but in this case they're doing it for lolz. I suggest lolkiddiez.
        • I think you'll agree that hacking and phreaking is different than some n00b using scripts to commit electronic crimes. Hacking something just for the sake of doing it, to learn how it works and to poke around in forbidden space, is different than stealing credit card numbers so you can buy the latest ecksbawks game.

          Hacking is still illegal, but but it's not necessarily malicious, like stealing and using someone's credit card number.

    • by kdemetter (965669) on Monday October 27 2008, @12:14PM (#25529797)

      Yeah , this is really worth a 'nothing to see here , move along'.

      I mean , this is nothing new . It's been that way for over a century.

      I don't like that they track down the 'creator's of those nuisance programs ' , though . Programming these things is a fun way of learning how it works.

      They should be going after the people who USE it for malicious purpose instead.

      I mean , maybe we should just lock up the creators of the Windows API , because you can really do some damage with that.

        • by Rasperin (1034758) on Monday October 27 2008, @02:12PM (#25531673)
          No reason to go after the guy who makes rifles, hand guns, etc. Go after the guy who used it to murder people.
          No reason to go after the guy who makes vehicles. Go after the guy who used it to run someone off the road.
          No reason to go after the guy who makes whiskey. Go after the guy who used it to beat someone with.
          Your argument goes both ways sir.
          • No reason to go after the guy who makes whiskey. Go after the guy who used it to beat someone with.

            What? Beat him with the whiskey?

            I just accidentally my friend with the whiskey.

        • by jlarocco (851450) on Monday October 27 2008, @07:28PM (#25535619) Homepage

          Oh... and no reason to go after the person who creates the virus. Only the person who uses it against others.
          No reason to go after the guy who makes pipe bombs either. Just the guy who uses them.
          No reason to go after the guy who makes the full-auto conversion kits. Just the guy who applies them to the off-the-shelf weapon.
          No reason to go after the guy who makes the fake passports. Just the guy who uses one.

          Makes sense to me. Most things are legal until you use them to do something stupid.

            • Move to one of the states in the link I provided and you can.

              Step 1. Fill out ATF form 4 (which includes fingerprint card and $200 tax.)
              Step 2. Wait 1 week to 6 months for approval and buy NFA item when the ATF grudgingly accepts that you aren't a felon, insane, or for some other reason not allowed to own Title 2 hardware.
              Step 3. Don't profit (Full auto: nothing makes a paycheck disappear faster.)

    • Re: (Score:3, Informative)

      There was a term for them long before "the internets" were flooded with them.

      In the olden days of BBSs, we used to call them "ruggies" which was short for "rug rats". But "script kiddies" is even more accurate of a description, seeing they are basically just following along a "recipe" for cracking something.
    • Re: (Score:3, Insightful)

      Yeah, I had a friend get caught for credit card fraud in middle school. The days of AOL were full of script kiddies. This stuff is old news.

  • "Underage"? (Score:5, Interesting)

    by Sockatume (732728) on Monday October 27 2008, @11:47AM (#25529343) Homepage
    At what age does high-tech crime become legal then?
  • This is new? (Score:5, Insightful)

    by MindlessAutomata (1282944) on Monday October 27 2008, @11:47AM (#25529349)

    Script kiddies have been around since the AOL days. Hell, I myself got a juvenile laugh out of punters (remember those? God, the AIM clients were so terrible back then) and other "progs".

    Mostly I imagine the vast majority of this stuff nowadays is myspace-related. Probably kids trying to break into someone else's myspace page because they're little drama whores like that.


    • Script kiddies have been around since DOS days ;)
    • Re: (Score:2, Interesting)

      by Anonymous Coward
      I survived the eighties one time already. The early days of the Ma Bell breakup coincided with dialup BBSs. Now, there were any number of long-distance companies (MCI, Sprint, whatever) that had dialup portals (since they could be hard-switched for some reason), and they gave their clients six-digit identifier pins. So basically any kid with a modem and half a brain (yes, half a brain, since a full one would realize the trouble) could commit wire fraud, and some of us did. Once you got on those BBSs, what w
    • Script kiddies have been around since the AOL days.

      I didn't know AOL predated the moon landing.

    • by oatesy (1394967) on Monday October 27 2008, @12:04PM (#25529617)
      I agree...in fact I'm almost ashamed (no I am) to say that my first major experience with "hacking" was on my friends myspace pages. But it doesn't help that great movies like Hackers make young kids think that they can get with Angelina Jolie if they are just good at hacking. I blame society and the movie industry.
    • I used to be one, way back in about 1986 or so on my trusty little Commodore 128. Back in those days there were a few pretty incredible bulletin boards that had vast (dozens!) libraries of little tools and wrappers mostly written in bourne...(I think, this was 22 years and 7,000 joints ago, so pardon the fuzziness with some details)

      I didn't really know a damn thing about shell scripts or programming (remember when they were different things?) in those days, but I knew how to change permissions on a file an
    • yea, what bunch of sensationalized garbage. i'd expect this from FOX news, but not from the BBC.

      teenagers have always been mischievous, and all hackers start as teenagers. most hackers grow out of malicious/immature behavior by adulthood, so naturally most phishers/crackers/virus writers/script kiddies/etc. are going to be teenagers.

      heck, it's our teenage rebelliousness that motivates us to try new things. even though teenagers can be mischievous, it's usually pretty harmless stuff. when i was a in elementa

    • Re: (Score:3, Informative)

      Oh, man. Mentioning AIM punters brings back the old memories of being a script kiddie myself. I had a nice collection of those things as a kid.

      I remember finding out about an exploit where IMing someone a certain 5 digits followed by a semicolon instantly crashed their client. I would go into one of the chat rooms, make grandiose false claims (such claiming to be a "super genius"), and then use it on anyone who disagreed with me. A moment or so after I would do it, everyone would see my target silently wink

  • Using kids (Score:5, Interesting)

    by Ethanol-fueled (1125189) on Monday October 27 2008, @11:52AM (#25529427) Homepage
    There are cases of Immigrant smuggling where the drivers were juveniles because juveniles are much more difficult to prosecute.

    That's how I'd operate if I were a fraudster - have the kids to the dirty work and give them a cut. There are hordes of bored shithead suburban kids who would love to be "elite haxxors" and they would most likely avoid prosecution the first time.
  • I forget the term... (Score:5, Interesting)

    by MyLongNickName (822545) on Monday October 27 2008, @11:52AM (#25529429) Journal

    I forget the term, but there are laws on the books that state that if you are a landlord, and you continually have tenants who engage in criminal activity that the authorities can confiscate the house. It is a slow process, but the point is that if you own the property that you have some responsibility in insuring that it isn't being used for purposes that are harmful to society.

    Apply that to social networking sites and...

    • Re: (Score:3, Insightful)

      Apply to ISPs also. Problem is today that most ISPs actively shield users on their system which engage in malicious activity.

      The answer is always they will not cooperate without a court order. Of course, if the police ask nicely they cooperate without a court order. But after a system is broken into unless there is at least $25,000 in provable damages you aren't going to get anyone in law enforcement interested. And that is just the beginning.

      So if someone is downloading child porn, the police are right

      • Re: (Score:3, Interesting)

        Apply to ISPs also. Problem is today that most ISPs actively shield users on their system which engage in malicious activity.

        This is the real answer. Nobody is going to go for MS Windows being too easy to compromise, and nobody is going to go for Myspace (websites generally are not held to real-company laws). However, ISPs that host computers doing phishing, spaming, DDoSing, botnet herding, or other malicious activity should be shut down. I don't care if the computer doing the malicious activity is a compromised Windows machine or not, if the owner is aware or not, or if the owner approved of the ativity or not. Hit the ISPs, le

    • Re: (Score:3, Insightful)

      Apply that to the internet and... We get exactly what we need right? You may not enjoy social networking sites but what if someone used slashdot in a crime? Or wikileaks? Seriously is that the presendent you want set?
    • by Alarindris (1253418) on Monday October 27 2008, @12:14PM (#25529809)
      I highly doubt that. I used to be a landlord in a rough area of town. We'd see cops there at least once a day. There's no way in hell they can expect a landlord to police. A landlord collects money (only sometimes) and maintains the ground and is in charge of repairs, not law enforcement.
      • Re: (Score:3, Informative)

        Think "Grow Houses" Up here in Canada. If a landlord knowing keeps renting to a grower the house can and will be forcibly cleaned up at considerable expense to the owner and the owner may also be held criminally responsible. Different laws/country though.
  • Ummm... (Score:5, Insightful)

    by Corpuscavernosa (996139) on Monday October 27 2008, @11:54AM (#25529463)

    many are largely unskilled and thus more likely to get caught and arrested.

    Problem solved?

    • by mcgrew (92797) * on Monday October 27 2008, @12:51PM (#25530473) Journal

      Mr Boyd said he spent a lot of time tracking down the creators of many of the nuisance programs written to exploit users of social networking sites and the culprit was often a teenager."

      Get off my law... HEY GIMME MY PANTS BACK!

    • many are largely unskilled and thus more likely to get caught and arrested.

      Problem solved?

      More like problem created. When 16-year-old criminals discover exactly how much less severe the punishment is for them than 18-year-olds, they all have the same thought: "Crap! I've got less than 2 years to get good at this!"

  • Jobs for Kids (Score:4, Interesting)

    by colganc (581174) on Monday October 27 2008, @11:55AM (#25529491)
    I wonder if kids had some kind of job if they would be less likely to steal or break the law.
  • by Viol8 (599362) on Monday October 27 2008, @11:56AM (#25529501)

    The whole of western civilisation is DOOMED!!

    Or at least until the kid stumbles across some p0rn links or pictures of drunk 18 year old girls and quickly forgets all about his l337 hacking attempts.

    • Back when I was a kid, it was those skills that we had to develop to GET the pr0n! When the biggest source was a local BBS with a reasonably vigilant sysop, we had to get creative. It taught me a little about social engineering... like if you registered with a totally unpronounceable foreign name, the sysop would just validate you without a phone call because he didn't want to mispronounce it.

  • 25 (Score:4, Funny)

    by PlusFiveTroll (754249) on Monday October 27 2008, @12:01PM (#25529581) Homepage

    Never trust anybody over 25!

  • "Arno Igne writes to tell us that the number of underage participants in "high-tech" crimes has risen steeply in recent history. Reporting children as young as 11 swapping credit card details and asking for hacks, many are largely unskilled and thus more likely to get caught and arrested."

    Well gosh darn it. We need to send them to some kind of school so they will not get caught.

  • find a flaw in the system, the flaw will be found by someone else

    the nice thing about kids being the perps is that there is no more nefarious purpose than "i did for the lulz". do you really think if these teenagers weren't loudly and clumsily exploiting security holes that someone else with much more nefarious purposes is not expoliting the same security holes quietly and discreetly?

    consider kids hacking websites to be that website's security research division. the flaws are found, the flaws are fixed, everyone makes out better. thank god for loud dumb scrit kiddies

    seriously, script kiddies are a blessing. they provide incentive to harden your website, incentive that some websites don't have and apparently need

    • Re: (Score:3, Interesting)

      A good analogy might be immunisation. The script kiddies present the network with a weakened form of potentially dangerous attacks, so that it can learn to defend itself. I'm not sure where Jenny McCarthy comes in, but I'm sure I'll figure out a way to make that happen.
    • by moderatorrater (1095745) on Monday October 27 2008, @12:43PM (#25530309)
      Yes, trading stolen credit card information is "doing it for the lulz" and has no nefarious purpose.
  • by systematical (1394991) on Monday October 27 2008, @12:09PM (#25529705) Homepage
    I got my first computer when I was 10 around 95-96, within a year I discovered that I could pretend to be someone else by setting up a somewhat legitimate email account and sounding official. My friend and I would email tripod users, geocities users etc... posing as someone who offered free web services. Eventually we would get passwords to their accounts, change the password, and vandalize the web page (eventually we got tired of doing of this, i think we discovered girls around age 12). I didn't learn that this was called phishing until I was in high school. On the plus side it forced me to learn HTML (I wanted my vandalizing to look good), which eventually lead to a career in web development. Hopefully these delinquents can be saved too.
  • by TheMiddleRoad (1153113) on Monday October 27 2008, @12:09PM (#25529711)

    I grew up in Socal. Many people I knew would beige box 900 numbers to get time on a local BBS. Several got all sorts of gear, mostly paintball crap, through credit card numbers gained through dumpster diving. These were mostly 16-17 year olds doing the deed, with some doing it younger, but it's harder when you can't drive.

    The temptation was huge but I managed to not give in. Heck, the temptation still is huge. Why work hard when you can make a few thousand in a few minutes? Oh yeah, because it's wrong. Sigh.

  • Parents? (Score:3, Insightful)

    by rrohbeck (944847) on Monday October 27 2008, @12:25PM (#25529993)

    This probably boils down to parents that are clueless. "But he was only playing on his computer!"
    So parents need to be educated that there's more you can do with a PC and an Internet connection than browse and play WoW.

  • Wargames anybody? (Score:4, Insightful)

    by Todd Knarr (15451) on Monday October 27 2008, @12:32PM (#25530123) Homepage

    Seriously, this has been how it is since the early 80s. 25 years ago it was the teenagers who were war-dialing and breaking into time-sharing systems. They're the ones who've got free time for it. As you get older you get into college or into a job and you've got a lot less free time for messing around like that. It only makes sense, then, that school kids would be one of the two major groups doing this (the other being those adults for whom this kind of crime is their job).

  • by droopycom (470921) on Monday October 27 2008, @12:45PM (#25530339)

    Wow!! This is indeed dangerous:

    "people start to swap malicious programs, knowledge and sometimes stolen data."

    Where did they find the KNOWLEDGE in the first place ?

    We need to fight at the source, find the KNOWLEDGE dealers and arrest them!

    We need to make the fight against KNOWLEDGE a national priority, nominate a KNOWLEDGE tsar or something!

    Will somebody think of the children!!

  • by Phizzle (1109923) on Monday October 27 2008, @01:00PM (#25530649)
    I remember back in late 80s, things were getting out of hand with newbie kiddies just getting into hacking and phreaking and playing with credit card numbers and phone codes. They were creating too much noise that made investigations of bigger fish more difficult. So law enforcement folks got credit companies to bankroll Operation Sundevil, put up a sting BBS (Phoenix Fortress) and captured a tonn of minors, most of who had files with phone codes and credit card numbers because they shotgun downloaded everything that seemed "cool". There are a bunch of honeypot sites and rooms popping up now getting ready to reel in the next crop.
  • Wonderful! (Score:3, Interesting)

    by MrNougat (927651) <ckratsch AT gmail DOT com> on Monday October 27 2008, @02:28PM (#25531869)

    This means that law enforcement will spend all their time going after this low-hanging fruit, and the public's fear will be assuaged because of all the "hackers" that are getting put in juvie - while the real troublemakers are left completely alone.