Analysis: WikiLeaks battle: a new amateur face of cyber war?

LONDON Thu Dec 9, 2010 5:55am EST

A screen shot of a web browser displaying the WikiLeaks website with a picture of its founder Julian Assange in Bern December 4, 2010.REUTERS/Pascal Lauener

A screen shot of a web browser displaying the WikiLeaks website with a picture of its founder Julian Assange in Bern December 4, 2010.

Credit: Reuters/Pascal Lauener

Related Topics

LONDON (Reuters) - The website attacks launched by supporters of WikiLeaks show 21st-century cyber warfare evolving into a more amateur and anarchic affair than many predicted.

While most countries have plowed much more attention and resources into cyber security in recent years, most of the debate has focused on the threat from militant groups such as al Qaeda or mainstream state on state conflict.

But attempts to silence WikiLeaks after the leaking of some 250,000 classified State Department cables seem to have produced something rather different -- something of a popular rebellion amongst hundreds or thousands of tech-savvy activists.

"The first serious infowar is now engaged," former Grateful Dead lyricist, founder of the Electronic Frontier Foundation John Perry Barlow told his followers on Twitter last week. "The field of battle is WikiLeaks. You are the troops."

Some of the more militant elements on the Internet clearly took him at his word. A group calling itself Anonymous put the quote at the top of a webpage entitled "Operation Avenge Assange," referring to WikiLeaks founder Julian Assange.

Online collective Anonymous appears to be using social networking site Twitter to coordinate attacks on websites belonging to entities it views as trying to silence WikiLeaks.

Targets have included MasterCard, Visa and a Swiss bank. All blocked payments to Wikileaks on apparent U.S. pressure.

Swedish prosecutors behind Assange's arrest in London for extradition and questioning over sex charges were also hit. Some Wikileaks supporters view the charges are politically motivated.

It looks to have surprised even Barlow, whose "declaration of independence for cyberspace" has been increasingly shared over Twitter by Anonymous supporters. He says he himself opposes distributed denial of service (DDoS) attacks aimed at knocking down sites, viewing them as anti-free-speech.

"I support freedom of expression, no matter whose, so I oppose DDoS attacks regardless of their target," he told Reuters in an email. "They're the poison gas of cyberspace.... All that said, I suspect the attacks may continue until Assange is free and WikiLeaks is not under continuous assault."

The exchange suggests cyber warfare could also become the preserve of small groups attacking each other as state actors.

"POISON GAS OF CYBERSPACE"

Alongside possible financial losses from sites being taken down, the potential reputational damage to firms is massive.

MasterCard has been mocked widely across the net as users lampooned its distinctive advertising slogans: "Freedom of speech: priceless. For everything else, there's MasterCard."

"This proves without question the power at people's fingertips --that there is high risk and vulnerability on the Internet," said John Walker, chief technology officer at cyber security company Secure Bastion.

"If an organization like MasterCard with big computing power can have its site taken down then what about smaller organizations and ordinary people?"

While most denial of service attacks use "botnets" to hijack other computers to overload websites, cyber security experts said Wednesday's attacks were different. Attackers were using their own computers, downloading software from Anonymous.

By midway through Wednesday afternoon, that software had already been downloaded some 6,000 times.

"This whole... episode is causing a snowball effect," said Noa Bar Yosef, senior security strategist from Imperva. "The more attention it is receiving, the more people who are joining the voluntary botnet to cause the DDoS."

WikiLeaks itself has also complained it has been under similar cyber attacks since shortly before it released the documents last week. While it has largely pointed to the United States and other governments, some say those attacks too may have been carried out by third parties.

Russian officials have long said that high profile cyber attacks against Estonia in 2007 and Georgia during its conflict with Russia in 2008 were in fact carried out by independent "patriotic hackers" rather than the government itself.

"I think an interesting development is what we might term the 'Thomas a Becket' syndrome -- hackers deciding to act in ways they think benefit the country without being instructed to by a higher authority," said Nikolas Gvosdev, professor of national security at the US Naval War College.

Becket was the 12th century Archbishop of Canterbury murdered by four knights who reportedly overheard Henry II's complaints over him and took them as a royal wish he be killed -- an alarming historical example of unintended consequences.

(Additional reporting by William Maclean and Georgina Prodhan; Editing by Maria Golovnina)

FILED UNDER:
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Comments (6)
Skispy wrote:
I would ask the tech-activists mentioned to consider what the possible consequences of releasing to the general public on the internet such information might cause. I consider the actions of wikileaks extremely irresponsible.In particular cables indicating that China may side with North Korea. If North Korea believes no-one is on it’s side it may launch attacks on South Korea believing it has nothing to lose. China is supposed to be it’s only ally. North Korea is paranoid don’t forget, it may feel it’s backed into a corner. Another example of wikileaks irresponsibility is detailing all militarily strategic sights in the west. Positively fantastic information to arab extremists don’t you think??? Or any other terorist for that matter. People in these countries must be laughing out loud about how stupid we are!

Dec 09, 2010 6:18am EST  --  Report as abuse
DeerHunter wrote:
You are crazy if you call this cyber warfare. You are making it more than it is. It is a protest of people that support this nutcase. This ‘attack’ was not an industrial attack of one company versus another or a goverment versus a goverment. On a scale of one to ten, with one being low, this was a 1.5. Wake Up!

Dec 09, 2010 9:14am EST  --  Report as abuse
breezinthru wrote:
“Amateur” face of cyber war?

Just remember, it’s not like putting a high school basketball All-Star one-on-one against Lebron James.

Many of these hackers are highly skilled, like the “amateur” athletes who compete in the Olympics.

Dec 09, 2010 9:21am EST  --  Report as abuse
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.