Hacking as a service (HaaS) is the commercialization of hacking skills, in which the hacker serves as a contractor. HaaS makes advanced code-breaking skills available to anyone with a web browser and a credit card. In addition to exploits, HaaS can also be contracted for ethical hacking purposes, such as penetration testing.
While there have been grey markets for HaaS for a long time, there are now purpose-driven websites to hire for the skill. One such site, Hackers List, offers a money back guarantee, formalized reviews, complaint processes and a list of hackers with specified skills. Additionally, there are HaaS tools and platforms like Alienspy that simplify hacking to let a person with no skills carry out an attack themselves.
Some of the services offered in HaaS include:
- Gaining access to the social networking accounts of another person.
- DoS (denial of service) and DDoS (distributed denial of service) attacks on websites
- Telephone DoS.
- Telephone number hijacking and call blocking.
- Network infrastructure attacks to bring down communications.
- Command and control (C&C) of a own huge botnet army (for around $20K).
It should be noted that hiring HaaS to perform illegal act is in itself illegal since inducement to commit a crime is itself a crime under United States law.
