Hacking group LulzSec has revealed it is joining forces with Anonymous, another hacking group that last December led attacks against companies that had withdrawn payment and hosting services from WikiLeaks, to target the world's governments
I say, may one hack your site?
"Welcome to Operation Anti-Security (#AntiSec)," a statement from LulzSec said. "We encourage any vessel, large or small, to open fire on any government or agency that crosses their path. We fully endorse the flaunting of the word 'AntiSec' on any government website defacement or physical graffiti art."
LulzSec is believed to be an offshoot of Anonymous.
"Top priority is to steal and leak any classified government information, including email spools and documentation," LulzSec said. "Prime targets are banks and other high-ranking establishments."
After the announcement, LulzSex then promptly brought down the Serious Organised Crime Agency (SOCA) website.
"Tango down - soca.gov.uk - in the name of #AntiSec," the group said on its Twitter account.
However, while the page was unaccessible for around 15 minutes, it soon came back online.
LulzSec has claimed responsibility for a large number of recent database breaches and distributed denial-of-service (DDoS) attacks, including against Sony and other gaming companies, the Central Intelligence Agency (CIA) and the US Senate .
One analyst wasn't surprised by the success of LulzSec's attacks.
"There's still a lot of low-hanging fruit out there, plenty to embarrass companies and organisations," said John Pescatore of Gartner. "Unfortunately, it's pretty easy to do."
Pescatore said the rash of hacks and DDoS attacks was a fad, akin to the one 10 years ago when worms were rampant, caused by a disconnect between vulnerabilities and enterprise security.
"Every time we go through one of these phases of rapid business change, it drives a bunch of changes - this time, mobile, the cloud, the log-in-from-anywhere philosophy - that opens up a new range of threats," said Pescatore.
"That dopey little groups can embarrass large organisations shows where we're at now, when vulnerabilities get ahead of security due diligence," Pescatore added.
What worries Pescatore isn't LulzSec and groups like it, but the profit-motivated copycats that will invariably appear. "A whole bunch of other people then see how much money can be made from the same techniques," he said.
One Gartner client - Pescatore would only identify it as a lobbying group for a major religion - reported a concerted, though not intensive DDoS attack. Shortly after, several other clients, all online electronic retailers, told the research firm that they'd received extortion demands to halt similar attacks.
Pescatore said the LulzSec attacks will also have another side effect. "Governments will want to try to help," he said.
According to Reuters, the Obama administration has pressed Congress to double the maximum sentence for hacking government and private networks to 20 years.
Pescatore said other efforts would pay better dividends. "Companies have to protect themselves by minimising the vulnerabilities," he said.
And that's certainly possible.
"You don't see Cisco and Microsoft getting hacked," Pescatore noted. "They've evolved their security. But most companies haven't."