Computer Crime Research Center

etc/8892.jpg

Prison memoir takes holy war into cyberspace

Date: December 18, 2004
Source: SFGate.com
By: Alan Sipress

Jakarta, Indonesia -- After Imam Samudra was charged with engineering the devastating Bali nightclub bombings two years ago, he taunted his police accusers in court, then greeted his death sentence with the cry, "Infidels die!"

So when Samudra published a jailhouse autobiography this fall, it wasn't surprising that it contained virulent justifications for the Bali attacks, which killed 202 people, most of them foreign tourists.

But tucked into the back of the 280-page book is a chapter of an entirely different cast, titled "Hacking, Why Not?" There, Samudra urges fellow Muslim radicals to take the holy war into cyberspace by attacking U.S. computers, with the particular aim of committing credit card fraud, called "carding." The chapter provides an outline on getting started.

The primer on carding is rudimentary, according to U.S. and Indonesian cybercrime experts, but it provides a rare glimpse into the mounting threat posed by terrorists using Internet fraud to finance their operations.

"The worry is that an army of people doing cybercrime could raise a great deal of money for other activities that terrorists are carrying out," said Alan Paller, research director of the Sans Institute, a U.S. Internet-security training company.

Samudra, 34, is among the most technologically savvy members of Jemaah Islamiyah, an underground Islamic radical movement in Southeast Asia linked to al Qaeda. He sought to fund the Bali attacks in part through online credit card fraud, according to Indonesian police. They said Samudra's laptop computer revealed an attempt at carding, but it was unclear whether he had succeeded.

Internet crime experts said Samudra's book seems unprecedented as a tool for recruiting radical Muslims into a campaign of online fraud and building networks of fund raisers.

"This is exactly the kind of advice you would give someone who wanted to get started in cybercrime," said Paller, who reviewed a translation of the chapter. "It doesn't focus on a specific technique, but focuses on how you find techniques and focuses on connecting with other people to act loosely together."

Titled "Me Against the Terrorist!," the book depicts Samudra on the cover in a now-classic pose from last year's trial in Bali. He is clad in a white shirt and white Muslim skullcap, with his right arm outstretched and a single finger raised as he lectures the judges.

A small publisher has issued 4,000 copies in Indonesian, selling for about $4 each in at least seven cities across the islands of Java and Sumatra, said Achmad Michdan, Samudra's attorney, who wrote the foreword. Michdan said the publisher is planning a second run and is considering translating the book into English, French and Arabic. Profits benefit Samudra's wife and children. Samudra remains on death row.

Most of the book is a memoir that tracks Samudra from his early schooling in Java, through his arms training in the Afghan mountains, his exile in Malaysia and his return to Indonesia. It includes arguments for killing Western civilians and bitter critiques of U.S. policy in Israel, Afghanistan and Iraq, including photographs of Muslim civilian casualties.

Toward the end, Samudra informs readers that the United States is not as invincible as they might think.

"It would not be America if the country were secure. It would not be America if its computer network were impenetrable," he writes at the beginning of the hacking chapter.

The chapter is less a how-to manual than a course of study for aspiring hackers and carders. Samudra directs them to Indonesian-language Web sites that provide instruction. For those who find these sites too sophisticated, he counsels first learning computer programming languages, in particular Linux, and suggests several other Web sites, including one run by young Muslims. He advises learning about hacking by finding mentors through online chats and lists six chat rooms as sources.

"This is hacking for dummies," said Evan Kohlmann, a U.S. consultant on international terrorism who also reviewed the chapter. "But in this day and age, you don't have to be an expert hacker to have a tremendous impact."

Kohlmann and other cyberterrorism experts said the kind of online fraud preached by Samudra is becoming increasingly attractive as a source of funding for al Qaeda operatives in several regions of the world.

A chief hazard posed by Samudra's book is that it could direct religious extremists into the company of more accomplished hackers. Indonesian police assert their country now has more online credit card fraud than any other in the world.

"If you succeed at hacking and get into carding, be ready to make more money within three to six hours than the income of a policeman in six months," Samudra tells his readers. "But don't do it just for the sake of money.

"Remember, the main duty of Muslims is jihad in the name of God, to raise arms against the infidels, especially now the United States and its allies."


Add comment  Email to a Friend

Discussion is closed - view comments archieve
2005-09-15 21:13:36 - There are beter blogs out there! Hak angel
2005-09-02 06:26:59 - Good blog Mira
Total 2 comments
Copyright © 2001-2013 Computer Crime Research Center
CCRC logo