### Nixon’s Visionary Approach to Cybersecurity
Nixon’s unique ability to anticipate the movements of hackers has defined her career in cybersecurity. Time and again, she has showcased an exceptional knack for identifying hackers or groups using innovative methods in seemingly minor operations. By monitoring their online presence—through posts and chats—Nixon adeptly positions herself to predict their future activities. This innate skill allowed her to build a foundation of knowledge that would prove invaluable when these individuals later executed more impactful operations.
### Tracking Emerging Threats
The dynamic nature of cybersecurity means that hackers can often appear as if out of nowhere, launching high-profile operations that make headlines. When this happens, researchers and law enforcement scramble to identify and understand these cyber actors. However, Nixon approaches this chaos with foresight. Take the infamous Lizard Squad, for example. This group gained notoriety in 2014 and 2015 with a series of bold Distributed Denial of Service (DDoS) attacks. While the public was taken aback by their sudden emergence, Nixon and her colleagues had been tracking the group and compiling dossiers on its members long before they became household names. This foresight gained them attention from the FBI, who turned to Nixon for assistance in identifying the members of the group.
### The Waiting Game in Cyber Intelligence
Nixon reflects on the nature of young hackers, noting that their activities continue until they inevitably face arrest—a process that can take years. “A huge aspect of my career is just sitting on information that has not been actioned [yet],” she states. This patience is crucial, as the intelligence collected during these periods is often key for law enforcement later on.
### Innovating Online Scraping Tools
During her tenure tracking Lizard Squad, Nixon began developing innovative tools to scrape and archive hacker communications from online platforms. Recognizing that a wealth of potential intelligence existed within amateur chatrooms and forums, she sought to create a more structured way to gather data. Although this information might appear trivial during a hacker’s early days, it has later proved essential when law enforcement begins their investigations—especially given the ephemeral nature of many online conversations.
### Engaging with Cyber Actors
A standout feature of Nixon’s approach is her proactive engagement with individuals involved in hacker communities. Brogan from the FBI emphasizes the value of Nixon’s methodology, stating that her interactions with these actors yield information that would remain hidden otherwise. By cultivating relationships in these chat spaces, Nixon extracts insights that enhance the intelligence landscape.
### Building the eWitness Platform
In 2020, Nixon transitioned to Unit 221B, where she capitalized on her experiences to launch the eWitness platform. This community-driven, invitation-only tool was designed as a comprehensive database for researchers and law enforcement. Initially, it housed data Nixon gathered, but it has since expanded to include contributions from other users. The collaborative nature of eWitness facilitates a robust sharing of intelligence, providing a rich resource that would not be available in public forums.
### Timeliness and Expanding Threats
The timing of Nixon’s preservation project could not have been better. Coinciding with the COVID-19 pandemic, eWitness experienced an influx of new cybercriminal activity, particularly with the emergence of unsettling offshoots of existing hacker communities—CVLT and 764. As both groups began to form, Nixon leveraged her tools to capture their communications. When law enforcement subsequently took action against the leadership of these groups, much of the material Nixon had preserved became critical for understanding their operations.
### The Rise of CVLT and 764
CVLT, emerging around 2019, focused on heinous activities such as sextortion and child sexual abuse material. Meanwhile, 764, birthing from CVLT, was notably led by a youthful figure named Bradley Cadenhead. This 15-year-old from Texas named his group after the first digits of his zip code and concentrated on themes of extremism and violence. The contrast between their foundational goals and the nature of their operations highlights the evolving landscape of online threats, making Nixon’s work all the more crucial.
Inspired by: Source
