Threat actor
threat_actor:crackas_with_attitude
Also: CWA
Hacking group abbreviated CWA, associated with attacks on US government personnel and systems.
Hacking group abbreviated CWA, associated with attacks on US government personnel and systems.
“This stood for Crackas With Attitude”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | social engineering | Explicit | 139 |
| outgoing | USES | Doxxing | Explicit | 139 |
| outgoing | USES | Law Enforcement Enterprise Portal | Explicit | 139 |
| outgoing | USES | Joint Agency Booking System | Explicit | 139 |
| incoming | MEMBER_OF | Default | Derived | 139 |
| incoming | MEMBER_OF | Cracka | Explicit | 139 |
| incoming | INVOLVES | John Brennan account compromise | Attributed | 139 |
Default MEMBER_OF Crackas With Attitude
Default joined Crackas With Attitude’s hacktivist activity and worked with Cracka against government targets.
Derived Confidence 91% · Jack Rhysider EP 139 Details
“he starts hanging out with these folks from CWA and joins in on their hacktivism”
Cracka MEMBER_OF Crackas With Attitude
Cracka is identified as the head of Crackas With Attitude.
Explicit Confidence 99% · Jack Rhysider EP 139 Details
“the head of CWA was a guy named Cracka”
Crackas With Attitude USES social engineering
CWA’s attacks against government personnel primarily used social engineering and information obtained through it.
Explicit Confidence 99% · Default EP 139 Details
“Most of it was just social engineering”
Crackas With Attitude USES Doxxing
CWA obtained and publicly exposed personal information belonging to government officials and police officers.
Explicit Confidence 98% · Default EP 139 Details
“we’re going to show the world this”
“we dropped their dox, pretty much”
John Brennan account compromise INVOLVES Crackas With Attitude
The episode attributes the Brennan account compromise to the CWA hackers, including Default and Cracka.
Attributed Confidence 91% · Jack Rhysider EP 139 Details
“They were gonna call up Verizon, pose as a technician”
“Default and Cracka had it all”
Crackas With Attitude USES Law Enforcement Enterprise Portal
CWA accessed LEEP and downloaded personal information about FBI agents.
Explicit Confidence 99% · Jack Rhysider EP 139 Details
“Default and Cracka got into the LEEP database and downloaded all the information”
Crackas With Attitude USES Joint Agency Booking System
CWA accessed JABS to look up people in the prison system and investigate other hackers.
Explicit Confidence 94% · Default EP 139 Details
“JABS, the Joint Agency Booking System”