Anonops #9: Get Los(t) Zetas

quote:

Op zondag 25 december 2011 23:25 schreef Bakakame het volgende:
Volgens Tweakers hebben degenen die de data gestolen hebben ook 1 miljoen dollar aan "donaties" opgehaald met die data, maar daarvan zie ik hier niks terug (of ik lees er overheen)
Papier, weet jij of 't waar is of niet? En hoe moet ik "donaties" in het artikel opvatten? Echt gedoneerd aan goede doelen of naar henzelf overgemaakt?

[..]

http://tweakers.net/nieuw(...)nalist-stratfor.html

quote:

Op zondag 25 december 2011 20:04 schreef Papierversnipperaar het volgende:

[..]

quote:

Is Anonymous Squabbling over the Stratfor Hack?

Representatives from the global intelligence company Stratfor awoke to find a lump of coal in their stockings this morning – or, more specifically, their clients' credit card information strewn across the Web. It's the latest cyber-attack being claimed by members of the hacktivist group Anonymous, one that allegedly resulted in the publishing of nearly 4,000 credit card numbers, site passwords, and home addresses for some of the (formerly) confidential clients of the U.S.-based security firm.

The goal? The attackers indicated they were planning to use the stolen credit card information (allegedly stored as unencrypted text) to amass a sum of one million dollars that could then be given to various charities for the holiday season. Images posted alongside the hack's alleged Pastebin-based press release show that some of these charity donations are already underway.

The attackers were also hoping to secure the release of Pfc. Bradley Manning, the U.S. Army soldier who just wrapped up pretrial proceedings this past week related to his alleged involvement in the leak of hundreds of thousands of confidential military documents. Manning is charged with 22 different counts related to the various leaks, and it's expected that he'll face a full court-martial in 2012 – with the possibility of a life sentence as a punishment, if convicted.

"We hereby ask that Bradley Manning be given a delicious meal this Lulzxmas, and no, not the 'holiday special' in the prison chow hall. We want him out on the streets at a fancy restaurant of his choosing, and we want this to happen in less than five hours," reads the statement by the alleged Stratfor attackers.

However, there appears to be a bit of contention among the ranks of Anonymous, as the aforementioned press release conflicts with another release -- allegedly from the "official faction" representing Anonymous – detailing that the Stratfor attack has nothing to do with the organization as a whole.

"Stratfor has been purposefully misrepresented by these so-called Anons and portrayed in false light as a company which engages in activity similar to HBGary. Sabu and his crew are nothing more than opportunistic attention whores who are possibly agent provocateurs. As a media source, Stratfor's work is protected by the freedom of press, a principle which Anonymous values greatly," reads the Pastebin release.

"This hack is most definitely not the work of Anonymous," it adds.

No matter who represents Anonymous officially, the potential implications of the attack remain: The information already made public by the Stratfor hackers is allegedly just a subset of the 200 gigabytes of data allegedly stolen in the attack.

"Stratfor and I take this incident very seriously. Stratfor's relationship with its members and, in particular, the confidentiality of their subscriber information, are very important to Stratfor and me," reads a message posted to the Stratfor Facebook page by CEO George Friedman. "We are working closely with law enforcement in their investigation and will assist them with the identification of the individual(s) who are responsible. "

twitter:

BarrettBrownLOL twitterde op maandag 26-12-2011 om 06:57:42 I've been authorized by @AnonymouSabu and others involved in #Stratfor hack to begin dialog with the firm. We'll see if they agree. reageer retweet

quote:

Austin-based security contractor victim of hacking attack

A Texas man who spent more than a decade dealing with cybercrime at banks is now among the apparent victims of a hacking attack against a security contractor based in Texas.

Hackers with the loosely-affiliated group known as "Anonymous" say they stole emails and credit card data from the company, Stratfor, and that it's the start of a week-long assault on a long list of targets -- inspired by Christmas.

One hacker says the plan is to use the credit card data to steal a million dollars, and give the money away as Christmas donations. Images posted online claimed to show the receipts for the donations.

Allen Barr of Austin -- who recently retired from the Texas Department of Banking -- says he discovered Friday that a total of $700 had been spent from his account. He says five transactions were made, with the money going to charities including the Red Cross, CARE and Save the Children.

The hackers also posted a link on Twitter to a site containing the email, phone number and credit number of a U.S. Homeland Security employee.

twitter:

Anon_Central twitterde op maandag 26-12-2011 om 08:36:03 #Stratfor hack is a desperate attempt to gain attention by anonops. We don't hurt the innocent and steal their creditcards. Ever! #Anonymous reageer retweet

quote:

STRATFOR Hires “leading identity theft protection and monitoring service”

STRATFOR , George Friedman has made another statement via its facebook page that states a few different things.

First of all they have stated they have acquired the help of a “Leading identify theft protection and monitoring service” for its clients and that no later then the 28th of this month will all its effected clients be contacted with the services details.

On a more interesting point they have also stated that the so called private client list is just a list of clients that paid for a subscription service.

One very good strong point comment to the statement is “Why didn’t you encrypt the data? You would think in your industry, this would be the first things you’d do!”

Also they have stated they are working closely with authorities, but infact it should really be them who faces any type of penalty’s for lettings this happen in the first place, just like when a oil tank spills at sea….

See the full statement and comments, here

quote:

Is Twitter Unfollowing People On Your Account?

No matter what your politics are, I'm sure you'll agree that you don't want your cellphone suddenly blocking your ability to call a friend because it's decided that your friend's politics are "undesirable."

Now, I know that anecdotal evidence is an iffy thing, but for the past several days I've been getting multiple stories from multiple sources that something is rotten in the state of Twitter, and that this is exactly what is happening.

Multiple conservative Twitter accounts are complaining that they are spontaneously "unfollowing" other conservative Twitter accounts. I've had it happen to me, where my account has "unfollowed" people without my consent or knowledge. Simple bug? Maybe.

An anonymous source, who claims to be with Twitter, contacted me today claiming that there's a "hacktivist" on Twitter's payroll who's having a little fun at the expense of his ideological opponents. I can't confirm this as just a simple rumor or hoax, since the upper management of Twitter is beyond impossible to contact.

Given that Twitter has had "issues" with censoring conservative accounts in the past, I find this new round of anecdotal stories troubling.

Either Twitter is an uncensored medium that allows all political viewpoints, or it isn't. It claims to be unbiased in this regard, and likens itself to a telephone company -- and prefers to intervene only when threats are made between individual users (just as a telephone company would). It trumpets its efforts in the middle-east to spread news of the Arab Spring, but seems to display an odd behavior when it comes to politics on its own shores.

Now look, if this is true, then this isn't exactly a case of censorship. First, there's no government involved. Secondly, if Twitter doesn't like conservatives on its site, then hey, it's their private property, more power to them. But management should come out and declare its sentiments outright, rather than do it sneakily, behind the scenes.

Bear in mind, there can be other explanations for this new Twitter oddness. The more complex a system, the more apt it is to have weird bugs. The explanation could be entirely innocent. So I'd like to gather evidence on this new behavior, and I'd like enough "noise" to be made for Twitter's management to give us a definitive statement on its neutrality.

It could very well be that this "hacktivist" is doing this without the knowledge or consent of Twitter's management. Sometimes programmers go off the reservation, after all.

So if you can, please leave a comment below through your Twitter account. Let me know if you have noticed this odd "unfollowing" behavior. And please tweet out this article so that the folks who are "still" following you can see it.

Update 9/22/11: Smitty from TheOtherMcCain has a caution which is duly noted here not to go too overboard on a sense of entitlement to Twitter's service. I agree. I simply want to know if it's a bug or something being done on purpose.

Update 9/22/11: A fellow claiming to be from Twitter is trying to figure it out in a helpful and respectful way.

Share it!

quote:

Op maandag 26 december 2011 11:03 schreef Papierversnipperaar het volgende:

twitter:

Anon_Central twitterde op maandag 26-12-2011 om 08:36:03 #Stratfor hack is a desperate attempt to gain attention by anonops. We don't hurt the innocent and steal their creditcards. Ever! #Anonymous reageer retweet

twitter:

AnonymousIRC twitterde op maandag 26-12-2011 om 12:26:26 @Anon_Central The team responsible for #Stratfor is neither located on nor affiliated with #AnonOps. AnonOps was just used for public chan. reageer retweet

quote:

antisec teaser 12/26

#AntiSec

Greetings Global Pirates,

We truly hope that you’ve been enjoying the Lulzxmas festivities so far. The gifts that AnonSanta left under the LulzXmas tree are just the beginning. As we speak, his little helpers at the North Pole are readying his battle sleigh of lulz with more goodies to bring you LulzXmas joy all week long. Joy in the form of over $500,000 being expropriated from the bigshot clients of Stratfor. You didn’t think we’d let 2011 end without a BANG, did you?

However, if you are one of the hundreds of thousands of customers of STRATFOR Global [Un]Intelligence, you probably woke up Christmas morning to find heaps of burning coal in your stocking. But don’t fret. Take comfort in the fact that at least you’re not George Friedman or any of the STRATFOR IT guys right now.

We create chaos. We create mayhem. We curb stomp companies that play fast and loose with their customers’ private and sensitive information. We bring pain to greedy whitehats willing to flip for a dime on government payrolls. And don't worry—there's plenty more havoc in store for the rest of the week. So throw a log on the fire, grab some hot chocolate and settle in for a long week of lulz.

Did you have fun looting and plundering from the pocketbooks of the rich and powerful? How about laughing at the reaction of some of their butthurt customers. We LOL’d hard when poor little Cody Sultenfuss, ranch owner and DHS employee, who asked "Why me?" and when Allen Barr, just retired from the Texas Dept. of Banking, exclaimed, "It made me feel terrible. It made my wife feel terrible.” Let us not forget dear old Victor Gebilaguin, who posted the following on STRATFOR’s Facebook wall in defense of the company: "The hackers ought to be shot then hanged upside down in public." Well since you feel so strongly about it Victor, we went ahead and ran your card up a bit. Hope you don't mind. Really guys, cry us a river. Then go and fill out our all-purpose Butthurt Form, so we can get back to you promptly. Your feedback is important to us. Thanks.

Interestingly, one thing we noticed in the fallout of this catastrophic hack was that STRATFOR hired not one, but two outside consultants to try to bail their sorry asses out of the hellhole of a grave we dug them. Top identity theft protection? Professional security consultant? We'll see how that works out for you, if you ever dare to put your servers back online again. Until then, we’ll be watching and waiting. And laughing, of course.

By the way, now that you have notified your customers of this massive security breach, we might have to pick up the pace of releasing peoples’ credit card information.

Accordingly, we'll start the day after Christmas off right by dropping a third of the damn alphabet. How does a drop of 30,000 additional names, credit cards, addresses, phone numbers, and md5 hashed passwords sound? Sounds like a financial calamity to us. And just as the markets in the US are opening after the holiday weekend? Might be trouble.

But wait! That’s not all folks. 0h hell n0. Tomorrow, we will be dropping another enormous dump on our next target: the entire customer database from an online military and law enforcement supply store. Bring the pain? Shit, we brought the motherfuckin’ ruckus. You really trying to step this this?

Of course, this could all be averted. Have you given our comrade Bradley Manning his holiday feast yet, at a fancy restaurant of his choosing? Better make it happen, captain.

We’ll end today’s LulzXmas festivities by throwing in 25,000 tickets from the it.STRATFOR.com online support database. It's probably not as controversial as the contents of their private mail spools that we'll be dropping later, but perhaps it will shed some light on just how clueless this company really is when it comes to database security.

Stay tuned ...

###

http://ibhg35kgdvnb7jvw.onion/lulzxmas/STRATFOR_full_d_m.txt.gz
https://rapidshare.com/#!download|44tl6|2444489251|STRATFOR_full_d_m.txt.gz|3255|R~7B8842ED6343CEAE67A23C094E131679|0|0
http://depositfiles.com/files/t0hkk2wif
http://www.wupload.com/file/2625986107
http://www.verzend.be/kx1n5oixnqn1/STRATFOR_full_d_m.txt.gz.html

http://ibhg35kgdvnb7jvw.onion/lulzxmas/it.tar.gz
http://www.verzend.be/s8v8ccig12hp/it.tar.gz.html
http://www.wupload.com/file/2626086337
http://depositfiles.com/files/ifnw3s34a
https://rapidshare.com/#!download|418l34|3218055206|it.tar.gz|416|R~0|0|0|You%20need%20RapidPro%20to%20download%20more%20files%20from%20your%20IP%20address.%20%288d5611a9%29

##

SPECIAL NOTICE: We are aware that there has been some confusion as to whether the STRATFOR hack is an "official" Anonymous operation, due to a ridiculous "Emergency Anonymous Press Statement" being circulated, undermining our work while also making baseless accusations that we frequently see perpetrated by agent provocateurs. Whether this is the work of malicious counter-intelligence,, some butthurt pacifists, or stratfor employees themselves is unknown. Unfortunately, some main stream news agencies have picked up on this statement, looking for any reason to highlight and exploit any potential "inner divisions” within Anonymous. However, there has been no such squabble or infighting regarding the STRATFOR target, or any other LulzXmas target for that matter. Anyone can claim to be Anonymous, but because of the inherent decentralized nature of Anonymous, without central top-down leadership, no individual is in a place to speak to the legitimacy of another individual or group’s operation. Furthermore, our history of owning high profile targets as Anonymous has been well documented at the #antisec embassy (http://ibhg35kgdvnb7jvw.onion/) and is well known and respected within all Anon communities. Case closed.

quote:

To Boston DA

- It has recently come to my attention that you have deemed it necessary to issue an Administrative Subpoena for my Twitter account along with a few #hashtags. Not only do I find it funny that you issued subpoenas for hashtags, I find it even funnier that you failed to read Twitters terms of service stating that they inform users of people requesting information on their accounts. Let me just quote that for you.

- " In accordance with our Privacy Policy and Terms of Service, non-public information about Twitter users is not released except as lawfully required by appropriate legal process such as a subpoena, court order, or other valid legal process document. Some information we store is automatically collected, while other information is provided at the user’s discretion. Though we do store this information, it may not be accurate if the user has created a fake or anonymous profile. Twitter doesn’t require email verification or identity authentication. Twitter's policy is to notify users of requests for their information prior to disclosure unless we are prohibited from doing so by statute or court order. "

- And fortunately enough for me, your "administrative subpoena" does not fall under the category of a "Court order" Therefor Twitter notified me of your request and conveniently attached a PDF file of the subpoena. Now as I'm sure you know this document has been spread all over the web. So I ask you, how's the "Confidentiality and integrity" of your "Ongoing criminal investigation" working out? Not so confidential huh?

- Anyways this is just my official statement to you letting you know your subpoenas will not shake me. So do whatever you think you can to try and stop Anonymous, but you will learn fast. One of us is not nearly as harsh as all of us. You cannot arrest an idea. You cannot subpoena a hashtag.

We are Anonymous.
We are Legion.
We do not forgive.
We do not forget.
Don't expect us.
We're already here.

#Anonymous #Antisec #CabinCr3w #doxcak3 #OpPigRoast

quote:

GoDaddy loses 21,000 domains in a day

Domain registrar Go Daddy lost over 21,000 domains yesterday. It could be a coincidence--or it could be the result of the company's PR debacle over its support for the Stop Online Piracy Act.

Yesterday, Go Daddy actually reversed course and dropped its support for the controversial legislation. "Go Daddy will support it when and if the Internet community supports it," Go Daddy CEO Warren Adelman announced in a statement.

SOPA, introduced in Congress this fall, would make it easier for the Justice Department to shut down sites allegedly dedicated to piracy.

An anti-Go Daddy thread on social site Reddit led to the creation of Godaddyboycott.org, a site set up to let people amass their disapproval with the company's support of SOPA.

While 21,054 domains transferred out Friday of Domaincontrol.com--which is managed by Go Daddy--it is only fair to note that 20,034 transferred in the same day, according to domain tracker Dailychanges.com

According to techie site TheNextWeb.com, though, the transfers-out have been building over the course of the week, with 8,800 reported on Monday and 14,500 on Wednesday.

Go Daddy did not immediately respond to CNET's request for comment.

quote:

'Anonymous' plans for 'violent revolution'

The hackers known as "Anonymous," who helped organize and support the Occupy movement's protests, have released an online survivor guide for citizens "in case of a violent revolution in your country."

The guide warns protests can be a "bloody mess." It trains rioters on how to avoid tear gas, rubber bullets and live ammunition.

The 15-page PDF document claims police will not help protesters and may actually be enemies of the revolution while warning that protest groups may be infiltrated by "fake civilians."

The Anonymous survival guide was published just before the hacker group claimed Sunday to have stolen thousands of credit card numbers and other personal information belonging to clients of U.S.-based security think tank Stratfor.

. "Red Army: The Radical Network that must be defeated to save America" exposes the extremists behind Occupy Wall Street along with the radical socialist network that seized political power in Washington over decades, shaped Obama's presidential agenda and threatens the very future of the U.S.

Anonymous has promised more infiltrations and hacker jobs, saying it has "enough targets lined up to extend the fun fun fun of LulzXmas through the entire next week."

The group previously claimed responsibility for attacks on major credit card and Internet companies. It has warned it may try to disrupt the U.S. and global banking infrastructure.

(Story continues below)

Read more: 'Anonymous' plans for 'violent revolution' http://www.wnd.com/?pageId=381477#ixzz1hkyLtA1A

quote:

Mobieltjes zijn eenvoudig te hacken

Vrijwel elke mobiele telefoon kan eenvoudig worden gehackt. Dat meldt Elsevier op basis van een onderzoeksrapport.

Twee beveiligingsdeskundigen hebben 31 aanbieders van mobiele telefoons in verschillende landen onderzocht. Met behulp van goedkope apparatuur en gratis software lukte het de deskundigen om in te breken in andere telefoons.

Ze konden bij telefoonnummers, sms'jes en voicemailberichten. Ook konden de twee gesprekken afluisteren en andere telefoons gebruiken om te bellen. In korte tijd konden de beveiligingsdeskundigen honderdduizenden telefoons hacken.

quote:

Conservatives lining up in opposition to SOPA

Views on copyright law have never broken down cleanly along ideological or partisan lines, but many of the key supporters for the Stop Online Piracy Act have come from the political right. The legislation is sponsored by Rep. Lamar Smith (R-TX) and it enjoys support from right-leaning, corporate-funded organizations like the Chamber of Commerce and Americans for Tax Reform.

But a growing number of right-leaning individuals and organizations have come out against SOPA. Last Wednesday, the Heritage Foundation, one of the nation's largest and most influential conservative think tanks, published an article by senior research fellow James Gattuso warning about the "unintended consequences" of SOPA. And on Thursday, he was joined in opposing SOPA by Erick Erickson, editor of the popular conservative blog RedState.

In his article, Gattuso noted that SOPA would undermine Internet security by delaying the implementation of DNSSEC and by causing Internet users to use offshore DNS servers to circumvent DNS blocks. He also warned that government regulation of search results would be "the first step down a classic slippery slope of government interference that has no clear stopping point."

Gattuso's stance is notable because Heritage has traditionally supported strong enforcement of copyright law. As former US attorney general Edwin Meese put it in a 2005 article for Heritage, "stealing is stealing, and it must stop."

Gattuso agrees with Meese that the "stealing" needs to stop, but he argues Congress should deal with the problem "in a way that does not disrupt the growth of technology, does not weaken Internet security, and respects free speech rights." And he doesn't think SOPA fits the bill.

Erickson also opposes SOPA, and he is taking a more activist approach to the issue. In a Thursday blog post, he pledged to recruit primary challengers to run against conservatives who support SOPA.

"I love Marsha Blackburn (R-TN). She is a delightful lady and a solidly conservative member of Congress," he wrote. However, because Blackburn is a SOPA cosponsor, Erickson pledged to "do everything in my power to defeat her in her 2012 re-election bid."

Erickson proposed that liberals and conservative SOPA opponents make a pact in which each agrees to support primary challenges against SOPA cosponsors in their own parties.

Erickson and Gattuso are jumping on a bandwagon that has long been occupied by the more libertarian sectors of the American right. GOP presidential candidate Ron Paul came out against SOPA last month, and his libertarian-leaning son, Senator Rand Paul has criticized the Senate version of the legislation. Scholars from libertarian think tanks such as the Cato Institute (where I'm an adjunct scholar), the Competitive Enterprise Institute, and the Mercatus Center have all criticized PIPA and SOPA.

In short, the fight over SOPA is less about left versus right than it is about declining industries—Hollywood and major labels—versus the Internet community. Conservative bloggers like Erickson, Matt Drudge, and Glenn "Instapundit" Reynolds are as offended by the legislation as are their liberal and libertarian counterparts. Conversely, even staunch civil libertarians seem to get confused about copyright issues if they're too closely tied to Hollywood.

Speaking to CNET last week, Rep. Darrell Issa (R-CA) predicted that Republican opposition would help kill SOPA. "I think the Republican House leadership will look and say, 'Unless we have the support of the vast majority of Republicans, we're not going to take the bill to the floor,'" he said.

quote:

Op woensdag 28 december 2011 01:11 schreef Mani89 het volgende:
Ik vind jouw mening niet zo rullevant. Bedankt voor de updates Papierversnipperaar.

quote:

https://www.readwriteweb.(...)oena_under_wraps.php

Twitter Ignored Request To Keep Subpoena Under Wraps [UPDATED]

Twitter appears to have forwarded a subpoena requesting user information to at least one of the owners of the accounts in question, despite a request from the Suffolk Massachusetts District Attorney's office that the request not be disclosed "to protect the confidentiality and integrity of the ongoing criminal action" regarding the hackitivist group Anonymous and events surrounding the Occupy Boston protest.

"Haha. Boston PD submitted to Twitter for my information. Lololol? For what? Posting info pulled from public domains? #comeatmebro," said the owner of the Twitter handle @p0isAn0N last week, in a post that included the subpoena. The subpoena also sought user information, including IP addresses for @OccupBoston, Guido Fawkes (there are more than 30 accounts using the name Guido Fawkes on Twitter) and subscriber information for the hash tage #BostonPD.

Requests for comment have been made to both Twitter and the Suffolk County District Attorney's Office. We'll update when they get back to us.
Update: "We can't comment on any specific order or request," Matt Graves, a spokesperson for Twitter said in an email. "However, to help users protect their rights, it is our policy to notify our users about law enforcement and governmental requests for their information, unless we are prevented by law from doing so."

Twitter's guidelines for law enforcement say the company notifies users when information is requested unless forbidden from doing so by statute or court order. It's not clear if Twitter turned over the subpoena to @p0isAn0N and, if so, why it chose to ignore the request made on the second page of the subpoena.

Twitter's guidelines also say that the company will only turn over personal information if presented with a subpoena or a court order. Unlike Facebook, which prohibits users from registering anonymously, Twitter users can use false identities when signing up for an account.

"Never declare war on the young," said Harvey Silverglate, a noted civil libertarian, told the Boston Herald in reference to the less-than-tech-savvy wording of the subpoena. "They'll outlast you. They'll outthink you. They'll outdo you... That may be the lesson the DA's office is about to learn."

In October, at the height of the Occupy Boston protest, hackers claiming to be members of Anonymous broke into the Boston Police Patrolmens' Association and copied members' names, union email addresses and passwords. The information was later posted online.

quote:

Op woensdag 28 december 2011 12:12 schreef chibibo het volgende:

[..]

En dan mijn dagelijkse ergernis missen?

Volgens mij is het NWS-forum bedoeld om te discussiëren over het nieuws, en worden simpele linkdumps en copy/paste-topics hier normaliter geweerd. Wellicht kan de TS het nieuws als submits naar de Frontpage sturen, daar lijkt het me beter op zijn plaats.

Anonymous: Message to SONY on SOPA

SPOILER

Om spoilers te kunnen lezen moet je zijn ingelogd. Je moet je daarvoor eerst gratis Registreren. Ook kun je spoilers niet lezen als je een ban hebt.