What the Sabu revelation means for hackers

Everyone, no matter who they profess to be, is potentially an informant.

To most observers he seemed unpredictable, dangerous and so highly skilled that he could evade the long arm of the law. But in an astonishing revelation, last week it emerged that Sabu, the notorious figurehead of hacking group LulzSec, had for almost nine months been working secretly as an informant for the FBI.

The identity of 28-year-old Hector Xavier Monsegur, who led a rampage against government websites and multi-national corporations, had been uncovered when he failed to mask his computer's IP address using an internet chat room on just one fateful occasion.

Soon after, FBI agents appeared at the door of his apartment on the sixth floor of a 14-story housing project in Manhattan. The agents reportedly played "good cop bad cop", convincing the infamous hacker - almost immediately, according to court documents - that his only way out was to cooperate with an international investigation into his former comrades.

Monsegur, under his Sabu guise, proceeded to continue operating aggressively online - in some cases encouraging fellow hackers to commit crimes - all while under apparent instruction of the FBI.

Some suspected he had been "turned" - but the hacker world is rife with conspiracy theories and there was no hard evidence to prove it. "Sabu was identified, apprehended by the FBI and turned to an informant," one perceptive group wrote in November last year. Yet the claim never gained substantial traction.

From the perspective of the authorities, it was a tactical masterstroke. They had managed to flip the most notorious, the most feared, and the most accomplished of the LulzSec members. Due to his close ties and wide respect among hacker collective Anonymous and other splinter groups such as AntiSec, Sabu was a goldmine to the FBI. With his help, they were able to level charges against five accused hackers based in Britain, Ireland and America.

There are concerns, however, about how far the Bureau went to pursue its goals.

On 19 June, just 12 days after Sabu had been arrested, LulzSec, the group he commanded, issued a public call to arms. "Top priority is to steal and leak any classified government information, including email spools and documentation," it wrote in a manifesto.

Sabu was quick to proudly point out the manifesto to his 30,000 Twitter followers. "The biggest, unified operation amongst hackers in history," he wrote, possibly from an FBI computer. "All factions welcome. We are one."

Two months later, on 17 August, Sabu disappeared offline for 30 days. We now know that just two days prior, on 15 August, he had secretly pleaded guilty to twelve counts of hacking in a closed hearing at Southern District court, between Manhattan Bridge and Broadway, New York. When he returned, though he reportedly helped call off some attacks, he maintained a hostile front, claiming, "I wasn't owned, arrested, hacked or any of the other rumors [sic]."

In December, he encouraged an offensive against companies manufacturing surveillance technology; he called on hackers to target "with impunity" anyone supporting legislation that would restrict internet freedoms; and played what sources close to him say was a central role in hacking intelligence and security thinktank Stratfor. The attack on Stratfor resulted in 75,000 credit card numbers being posted online, with 5.5m of the thinktank's confidential emails subsequently passed to WikiLeaks.

This trend continued almost right up until 6 March, the day he was "outed" in an exclusive published by Fox News. As recently as two weeks ago Sabu had publicly instructed hackers to "infiltrate" international crime organisation Interpol and to "expose" arms companies. "Hack their servers," he tweeted on 28 February. "Scour their user email/passes. Grab mailspoolz. Grab docs... Leak. Rinse. Repeat."

Sabu's activities while working out of FBI offices, and then later his home under 24-hour surveillance, raise significant legal and ethical questions. Most notably: by encouraging people to commit crimes in such a brazen fashion, did he cross the thin line from informant to agent provocateur?

It has been suggested that the attack on Stratfor and the subsequent dealing with WikiLeaks was allowed - perhaps encouraged - by the FBI, not only to strengthen the US government's case against the hackers, but also to assist in the prosecution of WikiLeaks founder Julian Assange. (This does not seem beyond the realms of possibility, particularly given America's well-documented desire to prosecute Assange for his role in publishing US government secrets.)

It could have been the case, of course, that Sabu on occasion went "rogue" while under FBI direction. But given that he was the most notorious hacker in the world and having his every move monitored, it is doubtful the authorities would have let him out of their sight long enough for him to have the opportunity - repeatedly and over a period of several months - to incite others to commit criminal acts. What appears more likely is that the FBI decided, like the hackers, they too could play dirty.

These are issues that will no doubt be addressed In the months ahead, as the FBI's tactics fall under scrutiny in the courts and elsewhere. The impact of the Sabu revelation, meantime, has unsurprisingly reverberated like an atomic bomb within the Anonymous community.

"I feel for the ones who worked with him and who trusted him with leaks/data," one hacker told New Statesman. "They could never have known."

This sentiment is one shared across online chat rooms frequented by Anonymous, where there are varying degrees of anger, paranoia, fear and sadness.

For many, the large void left by Sabu will provide a defining moment of sobering reality. His silent Twitter page, once a ceaseless stream of anti-establishment rage, is now nothing but a ghostly relic - a symbolic reminder that in the shadowy virtual world hackers inhabit, no one is untouchable, and everyone, no matter who they profess to be, is potentially an informant.

Ryan Gallagher is a freelance journalist based in London. His website is here.

Photo: Getty
Show Hide image

Like it or hate it, it doesn't matter: Brexit is happening, and we've got to make a success of it

It's time to stop complaining and start campaigning, says Stella Creasy.

A shortage of Marmite, arguments over exporting jam and angry Belgians. And that’s just this month.  As the Canadian trade deal stalls, and the government decides which cottage industry its will pick next as saviour for the nation, the British people are still no clearer getting an answer to what Brexit actually means. And they are also no clearer as to how they can have a say in how that question is answered.

To date there have been three stages to Brexit. The first was ideological: an ever-rising euroscepticism, rooted in a feeling that the costs the compromises working with others require were not comparable to the benefits. It oozed out, almost unnoticed, from its dormant home deep in the Labour left and the Tory right, stoked by Ukip to devastating effect.

The second stage was the campaign of that referendum itself: a focus on immigration over-riding a wider debate about free trade, and underpinned by the tempting and vague claim that, in an unstable, unfair world, control could be taken back. With any deal dependent on the agreement of twenty eight other countries, it has already proved a hollow victory.

For the last few months, these consequences of these two stages have dominated discussion, generating heat, but not light about what happens next. Neither has anything helped to bring back together those who feel their lives are increasingly at the mercy of a political and economic elite and those who fear Britain is retreating from being a world leader to a back water.

Little wonder the analogy most commonly and easily reached for by commentators has been that of a divorce. They speculate our coming separation from our EU partners is going to be messy, combative and rancorous. Trash talk from some - including those in charge of negotiating -  further feeds this perception. That’s why it is time for all sides to push onto Brexit part three: the practical stage. How and when is it actually going to happen?

A more constructive framework to use than marriage is one of a changing business, rather than a changing relationship. Whatever the solid economic benefits of EU membership, the British people decided the social and democratic costs had become too great. So now we must adapt.

Brexit should be as much about innovating in what we make and create as it is about seeking to renew our trading deals with the world. New products must be sought alongside new markets. This doesn’t have to mean cutting corners or cutting jobs, but it does mean being prepared to learn new skills and invest in helping those in industries that are struggling to make this leap to move on. The UK has an incredible and varied set of services and products to offer the world, but will need to focus on what we do well and uniquely here to thrive. This is easier said than done, but can also offer hope. Specialising and skilling up also means we can resist those who want us to jettison hard-won environmental and social protections as an alternative. 

Most accept such a transition will take time. But what is contested is that it will require openness. However, handing the public a done deal - however well mediated - will do little to address the division within our country. Ensuring the best deal in a way that can garner the public support it needs to work requires strong feedback channels. That is why transparency about the government's plans for Brexit is so important. Of course, a balance needs to be struck with the need to protect negotiating positions, but scrutiny by parliament- and by extension the public- will be vital. With so many differing factors at stake and choices to be made, MPs have to be able and willing to bring their constituents into the discussion not just about what Brexit actually entails, but also what kind of country Britain will be during and after the result - and their role in making it happen. 

Those who want to claim the engagement of parliament and the public undermines the referendum result are still in stages one and two of this debate, looking for someone to blame for past injustices, not building a better future for all. Our Marmite may be safe for the moment, but Brexit can’t remain a love it or hate it phenomenon. It’s time for everyone to get practical.