What the Sabu revelation means for hackers

Everyone, no matter who they profess to be, is potentially an informant.

To most observers he seemed unpredictable, dangerous and so highly skilled that he could evade the long arm of the law. But in an astonishing revelation, last week it emerged that Sabu, the notorious figurehead of hacking group LulzSec, had for almost nine months been working secretly as an informant for the FBI.

The identity of 28-year-old Hector Xavier Monsegur, who led a rampage against government websites and multi-national corporations, had been uncovered when he failed to mask his computer's IP address using an internet chat room on just one fateful occasion.

Soon after, FBI agents appeared at the door of his apartment on the sixth floor of a 14-story housing project in Manhattan. The agents reportedly played "good cop bad cop", convincing the infamous hacker - almost immediately, according to court documents - that his only way out was to cooperate with an international investigation into his former comrades.

Monsegur, under his Sabu guise, proceeded to continue operating aggressively online - in some cases encouraging fellow hackers to commit crimes - all while under apparent instruction of the FBI.

Some suspected he had been "turned" - but the hacker world is rife with conspiracy theories and there was no hard evidence to prove it. "Sabu was identified, apprehended by the FBI and turned to an informant," one perceptive group wrote in November last year. Yet the claim never gained substantial traction.

From the perspective of the authorities, it was a tactical masterstroke. They had managed to flip the most notorious, the most feared, and the most accomplished of the LulzSec members. Due to his close ties and wide respect among hacker collective Anonymous and other splinter groups such as AntiSec, Sabu was a goldmine to the FBI. With his help, they were able to level charges against five accused hackers based in Britain, Ireland and America.

There are concerns, however, about how far the Bureau went to pursue its goals.

On 19 June, just 12 days after Sabu had been arrested, LulzSec, the group he commanded, issued a public call to arms. "Top priority is to steal and leak any classified government information, including email spools and documentation," it wrote in a manifesto.

Sabu was quick to proudly point out the manifesto to his 30,000 Twitter followers. "The biggest, unified operation amongst hackers in history," he wrote, possibly from an FBI computer. "All factions welcome. We are one."

Two months later, on 17 August, Sabu disappeared offline for 30 days. We now know that just two days prior, on 15 August, he had secretly pleaded guilty to twelve counts of hacking in a closed hearing at Southern District court, between Manhattan Bridge and Broadway, New York. When he returned, though he reportedly helped call off some attacks, he maintained a hostile front, claiming, "I wasn't owned, arrested, hacked or any of the other rumors [sic]."

In December, he encouraged an offensive against companies manufacturing surveillance technology; he called on hackers to target "with impunity" anyone supporting legislation that would restrict internet freedoms; and played what sources close to him say was a central role in hacking intelligence and security thinktank Stratfor. The attack on Stratfor resulted in 75,000 credit card numbers being posted online, with 5.5m of the thinktank's confidential emails subsequently passed to WikiLeaks.

This trend continued almost right up until 6 March, the day he was "outed" in an exclusive published by Fox News. As recently as two weeks ago Sabu had publicly instructed hackers to "infiltrate" international crime organisation Interpol and to "expose" arms companies. "Hack their servers," he tweeted on 28 February. "Scour their user email/passes. Grab mailspoolz. Grab docs... Leak. Rinse. Repeat."

Sabu's activities while working out of FBI offices, and then later his home under 24-hour surveillance, raise significant legal and ethical questions. Most notably: by encouraging people to commit crimes in such a brazen fashion, did he cross the thin line from informant to agent provocateur?

It has been suggested that the attack on Stratfor and the subsequent dealing with WikiLeaks was allowed - perhaps encouraged - by the FBI, not only to strengthen the US government's case against the hackers, but also to assist in the prosecution of WikiLeaks founder Julian Assange. (This does not seem beyond the realms of possibility, particularly given America's well-documented desire to prosecute Assange for his role in publishing US government secrets.)

It could have been the case, of course, that Sabu on occasion went "rogue" while under FBI direction. But given that he was the most notorious hacker in the world and having his every move monitored, it is doubtful the authorities would have let him out of their sight long enough for him to have the opportunity - repeatedly and over a period of several months - to incite others to commit criminal acts. What appears more likely is that the FBI decided, like the hackers, they too could play dirty.

These are issues that will no doubt be addressed In the months ahead, as the FBI's tactics fall under scrutiny in the courts and elsewhere. The impact of the Sabu revelation, meantime, has unsurprisingly reverberated like an atomic bomb within the Anonymous community.

"I feel for the ones who worked with him and who trusted him with leaks/data," one hacker told New Statesman. "They could never have known."

This sentiment is one shared across online chat rooms frequented by Anonymous, where there are varying degrees of anger, paranoia, fear and sadness.

For many, the large void left by Sabu will provide a defining moment of sobering reality. His silent Twitter page, once a ceaseless stream of anti-establishment rage, is now nothing but a ghostly relic - a symbolic reminder that in the shadowy virtual world hackers inhabit, no one is untouchable, and everyone, no matter who they profess to be, is potentially an informant.

Ryan Gallagher is a freelance journalist based in London. His website is here.

Photo:Getty
Show Hide image

Labour is a pioneer in fighting sexism. That doesn't mean there's no sexism in Labour

While we campaign against misogyny, we must not fall into the trap of thinking Labour is above it; doing so lets women members down and puts the party in danger of not taking them seriously when they report incidents. 

I’m in the Labour party to fight for equality. I cheered when Labour announced that one of its three Budget tests was ensuring the burden of cuts didn’t fall on women. I celebrated the party’s record of winning rights for women on International Women’s Day. And I marched with Labour women to end male violence against women and girls.

I’m proud of the work we’re doing for women across the country. But, as the Labour party fights for me to feel safer in society, I still feel unsafe in the Labour party.

These problems are not unique to the Labour party; misogyny is everywhere in politics. You just have to look on Twitter to see women MPs – and any woman who speaks out – receiving rape and death threats. Women at political events are subject to threatening behaviour and sexual harassment. Sexism and violence against women at its heart is about power and control. And, as we all know, nowhere is power more highly-prized and sought-after than in politics.

While we campaign against misogyny, we must not fall into the trap of thinking Labour is above it; doing so lets women members down and puts the party in danger of not taking them seriously when they report incidents. 

The House of Commons’ women and equalities committee recently stated that political parties should have robust procedures in place to prevent intimidation, bullying or sexual harassment. The committee looked at this thanks to the work of Gavin Shuker, who has helped in taking up this issue since we first started highlighting it. Labour should follow this advice, put its values into action and change its structures and culture if we are to make our party safe for women.

We need thorough and enforced codes of conduct: online, offline and at all levels of the party, from branches to the parliamentary Labour party. These should be made clear to everyone upon joining, include reminders at the start of meetings and be up in every campaign office in the country.

Too many members – particularly new and young members – say they don’t know how to report incidents or what will happen if they do. This information should be given to all members, made easily available on the website and circulated to all local parties.

Too many people – including MPs and local party leaders – still say they wouldn’t know what to do if a local member told them they had been sexually harassed. All staff members and people in positions of responsibility should be given training, so they can support members and feel comfortable responding to issues.

Having a third party organisation or individual to deal with complaints of this nature would be a huge help too. Their contact details should be easy to find on the website. This organisation should, crucially, be independent of influence from elsewhere in the party. This would allow them to perform their role without political pressures or bias. We need a system that gives members confidence that they will be treated fairly, not one where members are worried about reporting incidents because the man in question holds power, has certain political allies or is a friend or colleague of the person you are supposed to complain to.

Giving this third party the resources and access they need to identify issues within our party and recommend further changes to the NEC would help to begin a continuous process of improving both our structures and culture.

Labour should champion a more open culture, where people feel able to report incidents and don't have to worry about ruining their career or facing political repercussions if they do so. Problems should not be brushed under the carpet. It takes bravery to admit your faults. But, until these problems are faced head-on, they will not go away.

Being the party of equality does not mean Labour is immune to misogyny and sexual harassment, but it does mean it should lead the way on tackling it.

Now is the time for Labour to practice what it preaches and prove it is serious about women’s equality.

Bex Bailey was on Labour’s national executive committee from 2014 to 2016.