http://www.guardian.co.uk/technology/2012/mar/07/lulzsec-sabu-informer
LulzSec's Sabu: 'ask me about the CIA'
When the Guardian spoke to the hacker last year, he was keen to discuss claims he worked for the authorities
guardian.co.uk, Wednesday 7 March 2012 09.27 EST
Hector Xavier Monsegur, AKA Sabu. An unemployed man from
Last July the Guardian was investigating the elusive, mysterious individuals behind LulzSec and Anonymous – the loose hacker groups who had suddenly become front page news, as they led a wave of cyber attacks against a range major corporations and law enforcement. One individual, or one hacker name, stood out: Sabu, a proflic hacker often referred to as the leader of the groups.
Getting to Sabu was not easy; he was well aware of the illegal nature of his activities. But that month, the Guardian had a stroke of luck. Sabu objected violently to a piece we had carried, examining – and shooting down – allegations from a rival pro-US hacker that Sabu was using Anonymous and Lulzsec to push an extreme Islamic agenda.
He asked me to join him in an off-the-record internet chat – a conversation that happened seven weeks after Sabu, now unmasked as Hector Xavier Monsegur, had already been picked up by the FBI.
Given the latest revelations about Sabu's activities, that he worked as an informer from after his arrest on 7 June until just a few days ago, I think it is appropriate to publish a few extracts from our conversation.
Sabu – and we cannot even be sure that our correspondant was the real Monsegur and not a
Less than three weeks later, Monsegur pleaded guilty to 12 counts relating to computer hacking in secret, which carry a maximum sentence of 124 years and six months. But there is no sign in the logs of a man under pressure.
Sabu began by denouncing the Guardian's publication of the vague allegations of the supposed Islamic links of the hacker community. Then he switched tack, asking why the paper hadn't published rumours linking him to the CIA, arguing that would amount to an equivalent and equally inaccurate allegation. Given what we know now, the swerve is particularly noteworthy.
In case it is not obvious, my online name is <jamesrbuk>.
<SABU> OK. I'm waiting for the article discussing the potential of me being the leader of a CIA blackops operation and me denying it.
<SABU> can we work on it now?
<SABU> I'll begin my message
<SABU> <jamesrbuk> : I thank you for brining up this serious allegation but I deny being part of the CIA or any black operations unit/organization.
<SABU> I am an activist and security researcher. Not a CIA operative
Moments later, I strayed even closer to what had become Sabu's emerging double life (remember, the indictments released yesterday refer to Monsegur only being a member of Anonymous until 7 June 2011, the day of his arrest). I linked a recent Guardian story – unaware of any ironies – suggesting the FBI had managed to recruit a full quarter of all
<SABU> The CIA has done more blackops and terror operations than al-qaeda could ever do
<SABU> so, lets be realistic
<jamesrbuk> Something we covered: http://www.guardian.co.uk/technology/2011/jun/06/us-hackers-fbi-informer
<SABU> That has literally nothing to do with what I'm talking about
<SABU> and I must say if your article is correct - the FBI is doin a very bad job at recruiting informants.
<jamesrbuk> Well, you were mentioning CIA blackops/etc. It's related.
<SABU> No it is not
At the time, I was bemused if not baffled by our exchange – and totally unable to see any motivation for Sabu's keenness that we start publishing what seemed to amount to little more than conspiracy theories about the operations of Anonymous and Lulzsec.
With hindsight, I wonder whether Sabu was trying in some way to set out a warning, or red flag to other hackers. Or perhaps he was goading me to see if I actually believed he might be a turncoat. Either way, these were signals I missed at that the time.
My other thought, looking back on the logs, is whether Sabu was thinking aloud as to why he was being asked to become an FBI informant rather than being publicly prosecuted. Here's more; here Sabu says some are claiming he had been working "with the CIA" although having closely followed the debate at the time this is not an allegation I can recall having seen aired:
<SABU> When can I expect an article discussing the idea of me being with the CIA and my denial?
<SABU> I'm eager to see this happen.
<jamesrbuk> So I see. May I ask why?
<SABU> Hmm...? is it not obvious?
<jamesrbuk> Not totally. And I'd prefer to hear rather than jump to wrong conclusions
<SABU> There is no wrong conclusion if you have been a part of this conversation
<SABU> You just said there was a claim that I may be a terrorist. You "researched" it and wrote the article
<SABU> There re claims I am with the CIA pushing to get tighter / stricter cyber-laws passed
<SABU> its literally the same shit, two different extremes.
Then, intriguingly, he goes onto say that
<SABU> The people are aware that our governments in the
<SABU> you're telling me thats not worse than some random jihadist who barely knows how to use a computer in the first place, "hacking"/
<SABU> Also heres where your entire point is flawed into oblivion
<SABU> why would a terrorist release and dump 90,000 INTELLIGENCE COMMUNITY MILITARY PERSONELL PASSWORDS AND EMAILS when they can just intercept military intelligence communications for the next year using this data ?
<SABU> Why would osama bin laden go through all the work of hacking booz allan [a
<SABU> Be realistic.
<SABU> Think.
Even as an FBI informer, Sabu would not be in a position to have evidence to back up his theories that the CIA were angling for a tightening of US cyber laws. Those co-operating with the authorities to mitigate their sentancing are rarely handed US government secrets. Instead, what's interesting is Sabu's internal reasoning for why – hypothetically at least – a compromised organisation (as we know now LulzSec was) might be allowed to continue.
One factor in the decision to make some of this public was an unusual comment towards the end of the conversation, in which Sabu advised me to make sure I kept a log, or transcript, of the chat for later use:
<SABU> AS FOR THE LOG I don't do interviews or usually paste chatlogs so I'm keeping it privately
<SABU> so I suggest you do the same
At this stage, surely Sabu would have known, or at least suspected, that his agreement to turn evidence against other members of Lulzsec would eventually become public. Re-reading this now, one wonders if he was hoping that some of our conversation would eventually become public too - an interview, in effect, at the point when he couldn't speak for himself.
Just over a fortnight after these published exchanges, we now know that Monsegur – aka Sabu – secretly pleaded guilty to 12 counts of computer hacking.
From June to March this year, he – and his FBI handlers – were party to details, often in advance, of hacking attacks including the interception of an FBI conference call, and the seizure of 5m emails from the servers of
On Tuesday, charges were lain against five individuals alleged to be core members of Anonymous and Lulzsec – and the man behind Sabu was finally publicly unmasked as a 28-year-old unemployed Puerto Rican living in
© 2012 Guardian News and Media Limited or its affiliated companies. All rights reserved.
LulzSec's Sabu: 'ask me about the CIA'
This article was published on guardian.co.uk at 09.27 EST on Wednesday 7 March 2012. It was last modified at 13.24 EST on Wednesday 7 March 2012.
Donations can be sent to the
"The master class has always declared the wars; the subject class has always fought the battles. The master class has had all to gain and nothing to lose, while the subject class has had nothing to gain and everything to lose--especially their lives." Eugene Victor Debs
No comments:
Post a Comment