Hacktivism: What is it and which types are there?

The terms hacktivist and hacktivism have become popular in recent years as we move further into the online space. Organizations and governments are becoming more involved with the uses of and intentions behind apps and services, making policy and implementing controls in an attempt to curb cyberattacks. In this article, we will be focusing on what hacktivism is, the different types of hacktivists that exist and the cybersecurity protocols and strategies that can be implemented to prevent an organization from falling victim to a hacktivism attack.

What is hacktivism?

Hacktivism is a combination of the word “hacker” and “activism”. Hacktivism is when a group or individual will use their hacking skills to perform their acts of social or political protest. The perpetrators of these acts are referred to as hacktivists. This is important as they are not hackers; hackers attack their targets oftentimes for financial gain only. The goal of hacktivism is for the individual or group to declare their dissatisfaction for acts they deem unacceptable and make the information about the act available to the public by posting it online for the world to see.

Oftentimes the hacktivists believe what they are doing is the right thing to do and will stop at nothing to ensure they right a wrong. They will either make a public announcement that an organization is up to no good, or they will bring down the organization by hacking into their systems and releasing private information containing any illegal activity the organization is responsible for. They often target governments with plans to violate the rights of their citizens or corporations who are committing acts that violate the ideology of the hacktivists.

The origins of hacktivism can be traced back to the early 1990’s and the act evolved from there, growing and evolving in the early 2000’s due to advancements in technology and societal needs. Hacktivism is the new normal in terms of activism and companies should ensure they have strong cybersecurity protections and plans in place to avoid falling victim to one of the main attack types preferred by hacktivists.

Types of hacktivism: From DDoS to data breaches

Hacktivists use a variety of methods and skills to perform their acts of protest. The most common types of hacktivism have been included below.

• DDoS attacks: This is when a hacktivist sends a continuous stream of requests to the server of a website or network, thereby flooding the server and rendering the website or network useless to users. Register for our free course about DDoS attacks.
• Doxxing: This is when someone shares private information of a different person or organization online, making information such as their full name, address, or organization credentials available to the public.
• Website defacement: This is when the hacktivist uses their skills to hack into a website and put their own message on the website, making it visible to any visitors and spreading the hacker’s message. They will also replace images, text, and links to deface the website.
• Data breaches: This is when the hacktivist gains unauthorized access to confidential information, and they release this information about the organization to prove the hacktivist’s claims and encourage public and media attention. Explore our free course about data breaches.
• Anonymous blogging: This is when the hacktivist has a platform to anonymously share their message or information in a manner that can’t be traced back to them. This is to protect them from any potential blowback from the intended target or the authorities.

Prevent a hacktivism attack: Implement a Risk Management strategy

Due to the variety of ways hacktivists tend to attack any companies they disagree with, there needs to be a thorough and effective cybersecurity strategy to protect an organization from such an attack. The following recommendations can be made:

• Ensure the organization has an effective Risk Management strategy that includes steps to follow in case of unauthorized access, data leaks or hardware/software failure.
• Invest in effective security measures, such as a Security Operations Center (SOC) with team members dedicated to preparing for potential attacks and preventing attacks. They will also be able to stop an attack in progress with swift efficiency.
• Educate staff on the correct processes and procedures involved in managing, storing, and deleting data and information from the network.
• Perform regular audits on the asset inventory. This includes the collective assets (physical and digital) of the organization such as their location, their use, and their status (active or inactive).
• Enable two-factor authentication on critical software and data to ensure it is protected from unauthorized access.

These methods, although effective when implemented correctly, need to be regularly maintained and updated according to the changing needs and goals of the organization. An effective cybersecurity strategy must always be effective and understood by all parties involved to ensure no missteps in the case of an attack; roles must be clearly defined as well as next steps understood.

Broadly speaking, hacktivism brings accountability to companies and governments across the globe, but it also brings danger when sensitive information is released that could affect the lives of many. The ethics of hacktivism are debated among professionals, however it can’t be denied that it is effective, whether for good or for bad.

Conclusion: Hacktivism is growing with the digital age

To conclude, hacktivism is a type of digital activism perpetrated by hacktivists who fight for social and political justice. The popular types of attacks preferred by hacktivists include doxxing, DDoS attacks, anonymous blogging, website defacement and data breaches. Recommendations for ways companies can protect themselves from falling victim to a hacktivism attack include educating staff, investing in effective security measures, implementing a Risk Management strategy, performing regular audits on the asset inventory, and applying two-factor authentication to critical software.

Contact us to ensure your company is protected against acts of hacktivism.