IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

UPDATED: LulzSec leader betrays clan as arrests made

Sabu has reportedly been working undercover for the FBI following an arrest last year.

Hacker

The man alleged to be the leader of LulzSec has reportedly been working with law enforcement, helping them track and charge various people suspected of being top-ranking members of the hacktivist group.

Sources told Fox News that the person ostensibly leading LulzSec, otherwise known as Sabu, was unmasked by the FBI last June but became a cooperating witness to help track down others.

Today five have been charged, with three arrested, according to the report, which claimed two of those charged were from Great Britain, whilst another two were from Ireland.

We're chopping off the head of LulzSec.

An indictment is expected to be unsealed today, with a US man also charged.

"This is devastating to the organisation," an FBI official said. "We're chopping off the head of LulzSec."

Arrest confusion?

However, there is confusion over who has been arrested and who has been charged. Ireland's national police service An Garda Sochna told IT Pro one person had been arrested this morning in relation to the investigation and had not yet been charged.

That person can remain in custody for 24 hours and will then be released unless charges are made, a spokesperson said. There was no information on a second man being charged.

The Metropolitan Police Service (MPS) said no arrests had been made today relating to LulzSec, but one male was being charged. This would apparently contradict the Fox News report, which said two of the men were from London and two from Ireland.

The male charged was a 17-year-old from South London, who has been charged with "two counts of conspiracy to do an unauthorised act with intent to impair or with recklessness impairing of an operation of a computer or computers." He will appear at West London Youth Court on 13 March on bail.

The second is a 25-year-old man, who was arrested in September last year and is due back on bail today. The Met will subsequently make a decision on whether to charge him.

The real Sabu

Fox News identified Sabu as Hector Xavier Monsegur, claiming he admitted to 12 hacking-related charges last year before agreeing to help law enforcement.

An indictment has revealed Monsegur was accused of helping carry out various significant hacks on organisations such as Sony, Visa, MasterCard, PayPal and numerous Governments in the name of Anonymous and LulzSec.

Fox was also a target, the indictment showed.

Just yesterday, Sabu took to his Twitter account to criticise law enforcement.

"The feds at this moment are scouring our lives without warrants. Without judges approval. This needs to change," he said, under his Twitter handle @anonymousSabu.

"The federal government is run by a bunch of [EXPLETIVE DELETIVE] cowards. Don't give in to these people. Fight back. Stay strong," another tweet read.

Believed to be an offshoot of fellow hacktivist group Anonymous, LulzSec has been fairly quiet this year after a busy 2011, which saw it hit numerous big-name organisations.

Members of the group were suspected of attacks on Sony, and claimed hits on News International, Nintendo and the CIA, amongst others.

July saw another male suspected of being a key figure in LulzSec, known as Topiary, captured by police during raids on the Shetland Isles.

One of the men arrested this week was suspected of being behind the hit on US security company Stratfor, which saw millions of emails leaked online. However, that man was allegedly a member of Anonymous, not Lulzsec, and has been charged in a separate indictment.

End of LulzSec?

Some have suggested the end is now nigh for LulzSec, if Sabu has been outed.

Rik Ferguson, director of security research and communication, told IT Pro it "certainly looks like the end game for the splinter group known as LulzSec."

"It should certainly be expected that law enforcement have gathered all evidence they feel is necessary to proceed effectively against those individuals they are currently seeking to arrest," Ferguson added.

As for Anonymous, Ferguson noted how different it was from LulzSec and so would not be as damaged by today's reports.

"Anonymous is a very different organisation to LulzSec and other more closely linked groups," he said.

"Anyone can and does act in the name of Anonymous and their activities do not require individual hacker publicity or disclosure of personally identifiable details. The very fact that Sabu became the 'celebrity' he was illustrates the real difference between LulzSec and Anonymous. LulzSec may be finished, but it would be premature to say the same about Anonymous."

UPDATE The FBI has now named the five people it has charged: Ryan Ackroyd, Jake Davis, Darren Martyn, Donncha O'Cearrbhall and Jeremy Hammond.

Hammond was arrested on suspicion of carrying out the hit on Stratfor as part of the AntiSec movement.

The FBI revealed Monsegur pleaded guilty on August 15, 2011 in U.S. District Court to a 12-count information charging him with computer hacking conspiracies and other crimes.

Akroyd and Davis were interviewed by London's Met police last year in relation to LulzSec attacks, it is believed.

Featured Resources

The Total Economic Impact™ Of Turbonomic Application Resource Management for IBM Cloud® Paks

Business benefits and cost savings enabled by IBM Turbonomic Application Resource Management

Free Download

The Total Economic Impact™ of IBM Watson Assistant

Cost savings and business benefits enabled by Watson Assistant

Free Download

The field guide to application modernisation

Moving forward with your enterprise application portfolio

Free Download

AI for customer service

Discover the industry-leading AI platform that customers and employees want to use

Free Download

Recommended

Anonymous hijacks Russian broadcasts with footage of Ukraine war
hacking

Anonymous hijacks Russian broadcasts with footage of Ukraine war

7 Mar 2022
Hackers could use new Wslink malware in highly targeted cyber attacks
malware

Hackers could use new Wslink malware in highly targeted cyber attacks

1 Nov 2021
FBI raids Chinese POS business following cyber attack claims
malware

FBI raids Chinese POS business following cyber attack claims

27 Oct 2021
Malware developers create malformed code signatures to avoid detection
malware

Malware developers create malformed code signatures to avoid detection

24 Sep 2021

Most Popular

Apple patches 'superpower' zero-days affecting iPhones, iPads, and Macs
zero-day exploit

Apple patches 'superpower' zero-days affecting iPhones, iPads, and Macs

18 Aug 2022
Why convenience is the biggest threat to your security
Sponsored

Why convenience is the biggest threat to your security

8 Aug 2022
The benefits of a hardware update for SMBs
Sponsored

The benefits of a hardware update for SMBs

2 Aug 2022