CCM BAU HACKER PROFILING EXERCISE

CMP 120
FOUNDATIONS OF INFORMATION SECURITY

You will choose a type of hacker to profile.

You can choose from:

White Hat
Black Hat
Red Hat
Grey Hat
Cyber Mercenaries
Nationalist Hackers
Hactivists
Nation State Actors
Script Kiddies
Insider Threats
Spy Hackers

You will create a profile of the hacker.

Your profile will be comprehensive.
Your profile will include:
MO – (Modus Operandi Methods, Tools, Tactics)
MEANS
MOTIVE

Identify any current hackers or hacker groups that fit

this profile.

What countermeasures exist to identify hackers before

they strike?
What type of countermeasures do you suggest?

Document your sources.

Hacker Type: Grey Hat

MO: Grey hat hackers are a little bit black and a little
white. They live their lives in the grey areas of
cyberspace. They utilize methods from both the white and
black hat side.

MEANS: Grey hats will attack companies, programs, and

organizations for two reasons. They will either attack
these people to help show their vulnerabilities without
their knowledge, or they will attack to let others exploit
the victims. They do not hack for profit which is the main
difference between white and black hat hackers.

MOTIVE: Motives are different for every grey hat. Some

hack to help others but do it in a way that is deemed
illegal. And others do it to hurt others by attacking and
then leaking how to hack the victims on the internet, etc.

EXAMPLES OF GREY HATS: Notable Grey hats include

“{}” and “Hardbeat”.

COUNTERMEASURES THAT EXIST: The counter

measures that exist for grey hat hackers are like that for
black hat hackers, because grey hats gain access to
systems just like black hats do, the difference is what they
do after they gain access.

COUNTERMEASURES I SUGGEST: I suggest we

implement the same strategies we do for black hats, like
utilizing white hats for pen-testing and employ grey hats,
to become white hats.