Teenagers Becoming Cyberattackers: A Growing Concern

In March of last year, a group of teenagers clad in black and wielding weapons traveled from London to the Suffolk village of Bawdsey, where they broke into a house, intimidated the occupants, and made off with watches and a computer.

Their target was a hacker affiliated with the Community, or Com, a loose affiliation of predominantly young individuals from both Britain and America known for partaking in various cybercrimes, including ransomware attacks and online sexual exploitation. A dispute within the Com had escalated from the digital realm into real-life confrontations. The teenagers were subsequently arrested in a nearby village, with the incident thoroughly discussed on the Telegram messaging platform and reported by 404 Media.

There is a connection between the Com and the recent hacking incidents involving Marks & Spencer and the Co-op, as these attacks are believed to have been executed by a hacking group known as Scattered Spider, which originated within the Community.

The Marks & Spencer hack highlighted the significant threat posed by hackers, with the retailer estimating losses of approximately £300 million. In response, GCHQ’s cyber chief, Richard Horne, has expressed dissatisfaction with organizations disregarding the advice from the National Cyber Security Centre regarding protective measures.

A prominent member of Scattered Spider, Tyler Buchanan, 23, from Dundee, was extradited to the United States last month, facing accusations of hacking into numerous companies. His capture in Spain followed his escape from Scotland after becoming a target of intimidation similar to that which occurred in Bawdsey, involving a rival gang that attacked his home and threatened his family.

Experts observe that the profile of young hackers has evolved since the early to mid-2000s when groups like Anonymous and LulzSec targeted large organizations and governments in pursuits of justice and humor. Nowadays, the landscape is much darker, heavily influenced by cryptocurrency.

One of the most significant transformations in hacking culture is the accessibility of hacking tools, allowing even inexperienced individuals, often referred to as “script kiddies,” to engage in cyberattacks. Professor Thomas Holt from Michigan State University notes that the entry point for aspiring hackers has drastically changed in the last two decades.

According to experts, novice hackers often start their journeys by utilizing freely available tools designed to disrupt websites or services before moving on to more malicious activities.

Julia Davidson, a criminal justice and cybercrime professor at the University of East London, shared insights from a participant in her research, who highlighted that information on hacking is now readily available on the open web, unlike in the past when it was mostly confined to the dark web.

Last week, the FBI and US Justice Department shed light on the extravagant lifestyles of some hackers, charging 12 individuals linked to the Com with the theft of over $263 million (£198 million) in cryptocurrency.

These individuals, primarily aged 19 to 22, allegedly used the stolen funds to lead lavish lifestyles, including spending $4 million on nightlife and $9 million on luxury vehicles. Reports claim they splurged as much as $500,000 in a single club visit.

Numerous luxury watches valued between $100,000 and $500,000 were purchased, along with rentals of upscale homes in exclusive locations like Los Angeles, the Hamptons, and Miami, with travel facilitated by private jets. Even amidst arrests, members of this group continued to buy expensive items.

Helen Rance, deputy director of the National Crime Agency in the UK, stated that there is an alarming increase in teenage boys becoming involved in online communities dedicated to criminal activities.

She noted that these groups engage in a spectrum of criminal acts, including cybercrimes, fraud, and victim exploitation, often collaborating or competing with one another to earn prestige within their circles.

One notable UK figure within the Com is Arion Kurtaj from Oxford, who began his path into online crime at just 11 years old. Diagnosed with autism, he became a notorious hacker in his teenage years, targeting various corporations and causing significant financial damage.

Kurtaj was arrested in September 2022 and, while on bail, was temporarily housed in a Travelodge with police protection due to threats from rival hackers. Despite restrictions on internet use, he managed to conduct major hacks, including incidents involving Rockstar Games and Uber, utilizing an Amazon Firestick.

Although deemed unfit for trial due to his autism, a jury confirmed his participation in the hacks, leading to an indefinite hospital order in December 2023.

The rise of the Com coincides with the decline of major ransomware organizations like LockBit and BlackCat/ALPHV, resulting in a fragmented hacking ecosystem. Recent findings from ransomware recovery firm Coveware suggest that the trend of companies paying ransoms is decreasing, dropping to 27% in early 2023 from a peak of 85% in 2019 as organizations improve their resilience against such attacks.

Experts advise that parents should remain vigilant for signs that their children may be drawn into cybercrime, emphasizing the importance of awareness regarding their children’s online activities and relationships.

Professor Holt emphasizes the necessity for parents to recognize unusual behaviors, such as suddenly acquiring a Bitcoin wallet or using messaging services like Discord or Telegram without clear reasons.