I don't understand how they can keep people in line. It takes one to talk, and the whole organization is at risk.
Online "reputation management" is easy work, it's a very grey area, and it would take a lot of investigation to reveal that someone has actually been targeted and attacked.
But take medication sellers, the covers are great, but it only takes one customer to brag about it and then it's a matter of time until you're done. Anything said online will come under the review of authorities sooner or later.
If we are do delve deeper, real world hits are even riskier. And they don't pay enough! Sure, I guess the people at the top of these organizations make serious dough, but the ones doing the work are paid peanuts.
I guess it takes a special kind of person to do that, someone with a death wish, nothing to lose, and probably a massive hate boner for something.
I've always been fascinated by the criminal "underworld", even though I would never participate in anything, too much risk for too little reward.
depends on where they operate, and who they're paying-off.
In the case of Russia; they might be doing informant work for SVR or GRU. In which case, they can pretty much operate with impunity, as long as they don't attack the wrong Oligarch's operations.
Definitely. As the author wrote, there are some similarities in organizational structure, but:
An APT is literally the instantiation of a nation state’s will. It is not a toolchain.
At that point you can't really think in terms of cybercrime or law enforcement. You're basically up against one or more of a nation's military units (whether or not the particular actors are technically civilian or military personnel).
Negative SEO, planting illegal content and fake evidence, blackmail, smear campaigns, fake reports to the authorities, cutting off income from advertisers by said means, etc.
It's only too much risk if you live in a country that investigates, arrests, and prosecutes the cyber criminal. If you live in a country that does not, there's no risk.
Comments
I don't understand how they can keep people in line. It takes one to talk, and the whole organization is at risk.
Online "reputation management" is easy work, it's a very grey area, and it would take a lot of investigation to reveal that someone has actually been targeted and attacked.
But take medication sellers, the covers are great, but it only takes one customer to brag about it and then it's a matter of time until you're done. Anything said online will come under the review of authorities sooner or later.
If we are do delve deeper, real world hits are even riskier. And they don't pay enough! Sure, I guess the people at the top of these organizations make serious dough, but the ones doing the work are paid peanuts.
I guess it takes a special kind of person to do that, someone with a death wish, nothing to lose, and probably a massive hate boner for something.
I've always been fascinated by the criminal "underworld", even though I would never participate in anything, too much risk for too little reward.
depends on where they operate, and who they're paying-off.
In the case of Russia; they might be doing informant work for SVR or GRU. In which case, they can pretty much operate with impunity, as long as they don't attack the wrong Oligarch's operations.
Being state-sponsored is a whole different league, though.
Definitely. As the author wrote, there are some similarities in organizational structure, but:
At that point you can't really think in terms of cybercrime or law enforcement. You're basically up against one or more of a nation's military units (whether or not the particular actors are technically civilian or military personnel).
By "reputation management", what do you mean exactly? Black hat SEO / framing competitors for black hat SEO?
Negative SEO, planting illegal content and fake evidence, blackmail, smear campaigns, fake reports to the authorities, cutting off income from advertisers by said means, etc.
It's only too much risk if you live in a country that investigates, arrests, and prosecutes the cyber criminal. If you live in a country that does not, there's no risk.