Extremist Hacker Who Defaced Websites and Stole Data Imprisoned

In a significant blow to online security, a Rotherham man has been jailed for 20 months after pleading guilty to nine offences under the Computer Misuse Act of 1990. Al-Tahery Al-Mashriky, 26, was arrested by the National Crime Agency in August 2022, following a tip-off from US authorities regarding his involvement with extremist hacking collectives.

A Trail of Digital Evidence

Investigators linked Al-Mashriky to the Yemen Cyber Army through his social media and email accounts after seizing and analysing a laptop and several mobile devices. The digital evidence revealed that Al-Mashriky had infiltrated numerous websites, injecting hidden webpages with his online monikers and political ideology. "Al-Mashriky's attacks crippled the websites targeted, causing significant disruption to their users and organisations, just so that he could push the political and ideological views of the Yemen Cyber Army," said Paul Foster, deputy director and head of the NCA National Cyber Crime Unit.

A Range of Targets

The court heard how Al-Mashriky had attacked a number of high-profile websites, including Israeli Live News, where he accessed admin pages and downloaded the entire website. He also targeted Yemen's Ministry of Foreign Affairs and Ministry of Security Media, as well as faith-based websites in Canada and the US. Furthermore, the California State Water Board was not spared from his cyber attacks.

The Scale of His Offending

However, the scale of Al-Mashriky's offending did not stop there. The NCA revealed that he may have hacked over 3,000 websites in total in 2022, and took to bragging of his exploits on underground cyber crime forums, where he gained a certain amount of kudos from his peers.

A Treasure Trove of Personal Data

The NCA's forensic investigators found that Al-Mashriky was in possession of the personal data of over four million Facebook users, and had obtained documents containing usernames and login credentials for other online services, including Netflix and PayPal. The NCA warned that this data could have been used to commission further acts of cyber crime and digital fraud.

"A Threat to Millions of People"

Paul Foster added that Al-Mashriky's actions were "a threat to millions of people" and highlighted the importance of online security. He also praised the NCA's technical capability in pursuing and identifying offenders like Al-Mashriky and bringing them to justice.

The Yemen Cyber Army: A Mysterious Group

The Yemen Cyber Army is a somewhat mysterious group that first emerged in the mid-2010s with a series of cyber attacks and threats against Saudi Arabian targets. While its objectives have aligned largely with the Islamist Houthi insurgency, which is backed by the Iranian government, it is thought unlikely that the group has many, if any, actual members located in Yemen itself.

A Front for Iran's State-Backed Cyber Activities?

Most security authorities believe that the group is most likely a front for Iran's state-backed cyber activities. The NCA and other agencies have been working to dismantle these types of groups and bring their leaders to justice.

Conclusion

The case highlights the importance of online security and the need for individuals and organisations to take steps to protect themselves from cyber threats. As the threat landscape continues to evolve, it is essential that we remain vigilant and work together to prevent these types of attacks in the future.