NESTA Crime Online - University of Brighton Repository

2.1.1.1 Detecting vulnerabilities
The first activity 127 consists of detecting vulnerabilities. The detection of security
vulnerabilities requires a certain level of technical knowledge and skills and is the main
occupation of hackers and malicious code writers.
Hackers are specialists in gaining unauthorised access to other computers. 128 Hacking is
generally achieved through the application of particular tools, programming skills and
computer knowledge, although it can be as simple as accessing password protected
information.
Malicious code writers evolved from virus writers, but are mostly driven by economic
profit rather than reputation, which will define the shift from the white-hat hacker
motivated by the advance of knowledge to the cracker whose motivation is criminal. 129
Almost all crimeware programs have been written with a financial motive in mind. They
can create zombies (hijacked computers) to launch denial-of-service attacks, phishing
and spam mails. They can also create click and keystroke frauds, and steal application
serial numbers, login IDs, and financial information such as credit card numbers and
bank account information. 130
It is important to note that in certain cases legitimate software tools have been adapted
for crimeware purposes – user innovation will enable the move from legal to illegal
boundaries. Some of the tools frequently used by hackers were designed for legitimate
purposes, such as network administration or security auditing. For instance, the most
widely used freeware hacking tool is Nmap, sophisticated port scanning software that
can detect the services operating in a system, IP addresses and operating systems. This
127 Despite its sequential representation, it is important to note that cybercrime is not a linear activity. While
the three activities can be modelled as linear for ease of understanding, the functions are, more often than
not, going on in parallel by different actors in the value chain, often in different parts of the world.
128 Note the difference between black-hat hackers and white-hat hackers (see glossary). In this report we will
refer to black hat hackers – this is, malicious hackers – as ‘hackers’ or ‘crackers’ interchangeably, since it is
focused on criminal online activities.
129 See glossary. The advent of PayPal is thought to have been an important factor in facilitating the move
from competitive hacking to more remunerative activities.
130 Shih-Yao Dai Sy-Yen Kuo, (2008), MAPMon: A Host-Based Malware Detection Tool, 13th IEEE International
Symposium on Pacific Rim Dependable Computing.
Page 44