Cyber Security Notebook

Cyber Security Notebook


  • Category Archives Anonymous
  • gAtO aLmOsT -got hacked

    gAtO aLmOsT -got hacked WHY? after a nice kitty nap I woke up and found my site uscyberlabs.com was suspended. I could not get into my site or get any email so I called my hosting provider. We soon found out that someone was trying to do a brute force trying to get into my admin panel. (see logs—below) To top it off someone called my provider and tried to social engineer them into resetting my password. From my simple SEO plug-ins I could see that it was a ToR connection the IP 72.14.182.266 running a Python-urllib/2.7 script. You can see the timestamp and the delay’s give it away to a ToR connection. Of course my hosting Service is doing some research to see what they can find out but the IP as well as the phone call were non-traceable (or were they).

    gAtOmAlO sAy's

    Since gAto writes about Anonymous I assume at first that the FBI was going to kick down my door but that made no sense since everything I publish is available online Open-Source. I did notice a few days ago a tweet warning of a grayHat that needed a Dox – http://whatismyipaddress.com/ip/72.14.182.226 this is a little info about the IP address it shows Dallas, TX but my internal SEO places it in Newark, NJ.

    Why is the question did I piss someone off, was I getting close. I HAVE a lot of information about Anonymous and the crew(z) that I do not publish, just because “gAtO is No SnItCh”. Maybe @MissRevolution_ got pissed because of her money problems or Xgirlfriend, in Chi-town I could go on and on but The OpCashBack Twitter of Banks that I published was to get the world out. Why so many banks have twitter I still find that interesting. Oh Well back to the SaltMines -

    Ok so is GaTo’s words so powerful that  you want to hack his site…. gAtO feel so important —naw.. just messing.. -gAtO oUt 

    http domain  72.14.182.226 Hostip (subject) more info

    Country: UNITED STATES (US)

    City: Newark, NJ

    IP: 72.14.182.226

    ,

    li45-226.members.linode.com

    Python-urllib/2.7

    February 19, 2012 15:06:44

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:06:43

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:06:42

    /blog/?p=1915

    February 19, 2012 15:06:40

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:06:39

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:06:38

    /blog/?p=1915

    February 19, 2012 15:06:34

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:06:33

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:06:32

    /blog/?p=1915

    February 19, 2012 15:02:53

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:02:53

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:02:51

    /blog/?p=1915

    February 19, 2012 15:02:50

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:02:49

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:02:48

    /blog/?p=1915

    February 19, 2012 15:02:45

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:02:43

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 15:02:42

    /blog/?p=1915

    February 19, 2012 14:59:44

    /blog/2012/02/17/banks-twitter-opcashback/

    February 19, 2012 14:59:44


    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit

  • PennTest Threat Intelligence

    PennTest Threat Intelligence - part-1

    gAtO bEen ThInKiNg - In the hyper connected world we live in Pen-Testers have a lot on their hand, hardware, firmware, OS, web-apps. The facts are that a simple web-app upgrade, may open new holes that off-set the problem they had to begin with. A pen-test, is a method of evaluating the security of a computer system or network by simulating an attack from malicious outsiders. Who are the outsider? How do the outsiders pen-test your system? Non-state actors have played an important part in many international cyber conflicts in the past two years- game changers. With the Anonymous crew(z), China, Russia, India, Iran out in force in cyberspace a company needs to know if they are the target from a political, competition or worse yet a loneWolf or activist.

    Many think that with BackTrack anyone can be a tester, but it’s different today. Companies need to understand the Geo-Political aspect of their company and who are their markets and how does it play out in the real world. Look at Sony, HBGrays these are two different companies but their reputation has been tarnish by what, a bunch of kids, naw, these boy’s and girls are the new breed, smart, educated and connected. These people are System Admin in their day job and Anonymous during off-hours. They know how to work in the box and also see out-of-the-box tips and tricks and have thousands that want to try their game and imitate them. Whatever you think these new boy’s and girls will multiply, it’s a fab, a movement but they all want to be a cool hackers and the next generation of hacktivist will make these people look like amateurs.

    Who knew that a Low Orbit Ion Cannon (LOIC) used to test how many connection your server will handle, would be used by the attackers themselves. A long time ago in cyber years (2-3 years ago) only the geeks had the knowledge and skills to do some of the hacks that we see today. Today Anonymous is not only a social movement but it’s a cause celeb, people want to belong and these social 4chan outcast have started a revolution in cyberspace that governments and corporations now are worried about, and well they should be.

    Break out Backtrack and do some pen-testing and yes you may find misconfigured servers like gAtO hAs -(SCADA systems to boot) and such but if you can see what your enemy is looking at, planning. Nothing is better than threat intelligence to guide you in mitigating your company as to future attacks.

    Look at the RSA and Diginotar APT attacks, the bad guy’s went after the certificate authority how does a typical pen-test tools know that, they don’t if you don’t have your pulse on the game your in, you may be next.

    Remember the technical aspect is one thing but if you have many, many hands trying new things on your site guess what, they will hack you if your connected to the Internet. Your company cannot live in a bubble and so must expose themselves to customers, vendors and business partners your company cannot control all those aspects. When a simple email attachment to the c-Suite boys just like with the Nortel hack they got you big time, in Nortel chase they were inside their network for 10 years. The reputation, the technical all this means nothing if you don’t have good solid threat intelligence to know what’s going on in the world.

    If you don’t have a team to look at threat intelligence for your company, get some people fast. If your connected you can be hacked, learn and be silent – Can’t stop the signal. Everything goes somewhere, and I go everywhere…. -gAtO oUt

    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit

  • Anonymous TimeLine

    gAtO wAnTeD – to see a timeline of these events - gAtO oUt 

    2006-07

    Habbo raids

    A frequent target for organized raids by Anonymous is Habbo, a social networking site designed as a virtual hotel.The raid pre-dates, and was not inspired by, the news of an Alabama amusement park banning a two-year-old toddler affected by AIDS from entering the park’s swimming pool. Users signed up to the Habbo site dressed in avatars of a black man wearing a grey suit and an Afro hairstyle and blocked entry to the pool, declaring that it was “closed due to AIDS,” flooding the site with internet sayings, and forming swastika-like formations. When the raiders were banned, they complained of racism.

    Hal Turner raid

    Main article: Hal Turner

    According to white supremacist radio host Hal Turner, in December 2006 and January 2007 individuals who identified themselves as Anonymous took Turner’s website offline, costing him thousands of dollars in bandwidth bills. As a result, Turner sued 4chan, eBaum’s World, 7chan, and other websites for copyright infringement. He lost his plea for an injunction, however, and failed to receive letters from the court, which caused the lawsuit to lapse.

    Chris Forcand arrest

    On December 7, 2007, the Canada-based Toronto Sun newspaper published a report on the arrest of the alleged Internet predator Chris Forcand. Forcand, 53, was charged with two counts of luring a child under the age of 14, attempt to invite sexual touching, attempted exposure, possessing a dangerous weapon, and carrying a concealed weapon. The report stated that Forcand was already being tracked by “cyber-vigilantes who seek to out anyone who presents with a sexual interest in children” before police investigations commenced.

    A Global Television Network report identified the group responsible for Forcand’s arrest as a “self-described Internet vigilante group called Anonymous” who contacted the police after some members were “propositioned” by Forcand with “disgusting photos of himself.” The report also stated that this is the first time a suspected Internet predator was arrested by the police as a result of Internet vigilantism.

    2008

    Project Chanology

    The group gained worldwide press for Project Chanology, the protest against the Church of Scientology.

    On January 14, 2008, a video produced by the Church featuring an interview with Tom Cruise was leaked to the Internet and uploaded to YouTube. The Church of Scientology issued a copyright violation claim against YouTube requesting the removal of the video.[ In response to this, Anonymous formulated Project Chanology. Calling the action by the Church of Scientology a form of Internet censorship, members of Project Chanology organized a series of denial-of-service attacks against Scientology websites, prank calls, and black faxes to Scientology centers.

    Epilepsy Foundation forum invasion

    On March 28, 2008, Wired News reported that "Internet griefers"—a slang term for people whose only interests are in harassing others—assaulted an epilepsy support forum run by the Epilepsy Foundation of AmericaJavaScript code and flashing computer animations were posted with the intention of triggering migraine headaches and seizures in photosensitive and pattern-sensitive epileptics.[39] According to Wired News, circumstantial evidence suggested that the attack was perpetrated by Anonymous users, with the initial attack posts on the epilepsy forum blaming eBaum’s World. Members of the epilepsy forum claimed they had found a thread in which the attack was being planned at 7chan.org, an imageboard that has been described as a stronghold for Anonymous. The thread, like all old threads eventually do on these types of imageboards, has since cycled to deletion.

    Defacement of SOHH and AllHipHop websites

    In late June 2008, users who identified themselves as Anonymous claimed responsibility for a series of attacks against the SOHH (Support Online Hip Hop) website. The attack was reported to have begun in retaliation for insults made by members of SOHH’s “Just Bugging Out” forum against members of Anonymous.

    2009

    No Cussing Club

    In January 2009 members of Anonymous targeted California teen McKay Hatch who runs the No Cussing Club, a website against profanity. As Hatch’s home address, phone number, and other personal information were leaked on the internet, his family has received hate mail, obscene phone calls, and bogus pizza and pornography deliveries.

    Iranian election protests

    Front page of The Pirate Bay, June 20, 2009. Anonymous, together with The Pirate Bay, launched an Iranian Green Movement Support site.

    Main article: 2009 Iranian election protests

    Following allegations of vote rigging after the results of the June 2009 Iranian presidential election were announced, declaring Iran‘s incumbent President Mahmoud Ahmadinejad as the winner, thousands of Iranians participated in demonstrations. Anonymous, together with The Pirate Bay and various Iranian hackers, launched an Iranian Green Movement Support site called Anonymous Iran.[45] The site has drawn over 22,000 supporters world wide and allows for information exchange between the world and Iran, despite attempts by the Iranian government to censor news about the riots on the internet. The site provides resources and support to Iranians who are protesting.

    Operation Didgeridie

    In September 2009 the group reawakened “in order to protect civil rights” after several governments began to block access to its imageboards. The blacklisting of Krautchan.net in Germany infuriated many, but the tipping point was the Australian government’s plans for ISP-level censorship of the internet. The policy was spearheaded by Stephen Conroy and had been driven aggressively by the Rudd Government since its election in 2007.

    2010

    Operation Titstorm

    Occurred from 8 am, February 10, 2010 as a protest against the Australian Government over the forthcoming internet filtering legislation and the perceived censorship in pornography of small-breasted women (who are perceived to be under age) and female ejaculation. Hours earlier, Anonymous uploaded a video message to YouTube, addressed to Kevin Rudd, and Seven News, presenting a list of demands and threats of further action if they were not met.[

    Oregon Tea Party raid

    In July 2010, this was a reaction to the use of one of Anonymous' slogans by the Oregon Tea Party. The Party's Facebook page was flooded with image macro and flames. Within a few hours, the Tea Party posted a message saying "Anonymous: We appreciate your resources and admire your tactics. You have taught us more than you know.

    Operations Payback, Avenge Assange, and Bradical

    In 2010, several Bollywood companies hired Aiplex Software to launch DDoS attacks on websites that did not respond to software takedown notices.Piracy activists then created Operation Payback in September 2010 in retaliation. The original plan was to attack Aiplex Software directly, but upon finding some hours before the planned DDoS that another individual had taken down the firm's website on their own, Operation Payback moved to launching attacks against the websites of copyright stringent organizations, law firms and other websites. This grew into multiple DDoS attacks against anti-piracy groups and law firms.

    Operations OpSony

    On April 2, 2011 Anonymous launched an attack on the media giant Sony, named #opsony, as a part of Operation Payback. Anonymous claims the attack a success after they took down the PlayStation Network and other related PlayStation Websites. Anonymous' actions also included personal harassment of employees and their families. The PlayStation Network subsequently has had lengthy outages, although Anonymous claims that this is not due to any officially-sanctioned action on their part, but may be due to sub-groups of Anonymous.

    Operation Assange

    In December 2010, the document archive website WikiLeaks (used by whistleblowers) came under intense pressure to stop publishing secret United States diplomatic cables. In response, Anonymous announced its support for WikiLeaks, and Operation Payback changed its focus to support WikiLeaks and launched DDoS attacks against Amazon, PayPal, MasterCard, Visa and the Swiss bank PostFinance, in retaliation for perceived anti-WikiLeaks behavior. This second front in the December offensive was performed under the codename Operation Avenge Assange. Due to the attacks, both MasterCard and Visa's websites were brought down on December 8.

    Operation Leakspin

    Zimbabwe

    The websites of the government of Zimbabwe were targeted by Anonymous due to censorship of the WikiLeaks documents.

    2011

    A member holding an Anonymous flier at Occupy Wall Street, a protest that the group actively supported, September 17, 2011

    Attack on Fine Gael website

    The website for the Irish political party Fine Gael, a centre right party and currently in coalition government with the Labour Party, was hacked by Anonymous during the 2011 general election campaign according to TheJournal.ie. The site was replaced with a page showing the Anonymous logo along with the words "Nothing is safe, you put your faith in this political party and they take no measures to protect you. They offer you free speech yet they censor your voice. WAKE UP! <owned by Raepsauce and Palladium>".

    Arab Spring Activities

    Main articles: Operation Egypt and Operation Tunisia

    The websites of the government of Tunisia were targeted by Anonymous due to censorship of the WikiLeaks documents and the Tunisian Revolution. Tunisians were reported to be assisting in these denial-of-service attacks launched by Anonymous. Anonymous's role in the DDoS attacks on the Tunisian government's websites have led to an upsurge of internet activism among Tunisians against the government. A figure associated with Anonymous released an online message denouncing the government clampdown on recent protests and posted it on the Tunisian government website. Anonymous has named their attacks as "Operation Tunisia". Anonymous successfully performed DDoS attacks on eight Tunisian government websites. The Tunisian government responded by making its websites inaccessible from outside Tunisia. Tunisian police also arrested online activists and bloggers within the country and questioned them on the attacks. Anonymous's website suffered a DDoS attack on January 5.

    During the 2011 Egyptian revolution, Egyptian government websites, along with the website of the ruling National Democratic Party, were hacked into and taken offline by Anonymous. The sites remained offline until President Hosni Mubarak stepped down.

    Anonymous was divided on the 2011 Libyan civil war, while they hacked into Libyan government websites, and persuaded the host of Libyan leader Muammar Gaddafi's personal website to take it down, other members of the group sided with the dictator in what they called "Operation Reasonable Reaction". The pro-Gaddafi attacks were fairly unsuccessful, only managing to take down minor opposition sites for a little while.

    Anonymous also released the names and passwords of the email addresses of Middle Eastern governmental officials, in support of the Arab Spring. Countries targeted included officials from Bahrain, Egypt, Jordan, and Morocco.

    Attack on HBGary Federal

    Wikileaks, Bank of America, Hunton & Williams, and Anonymous

    On the weekend of February 5–6, 2011, Aaron Barr, the chief executive of the security firm HBGary Federal, announced that his firm had successfully infiltrated the Anonymous group, and although he would not hand over details to the police, he would reveal his findings at a later conference in San Francisco. In retaliation for Aaron Barr's claims, members of the group Anonymous hacked the website of HBGary Federal and replaced the welcome page with a message stating that Anonymous should not be messed with, and that the hacking of the website was necessary to defend itself. Using a variety of techniques, including social engineering and SQL injection,[103] Anonymous also went on to take control of the company’s e-mail, dumping 68,000 e-mails from the system, erasing files, and taking down their phone system.[104] The leaked emails revealed the reports and company presentations of other companies in computer security such as Endgame systems who promise high quality offensive software, advertising “subscriptions of $2,500,000 per year for access to 0day exploits“.

    Operation Ouraborus

    On February 16, 2011, the group supposedly wrote an open letter to the Westboro Baptist Church, stating: “Cease & desist your protest campaign in the year 2011 … close your public Web sites. Should you ignore this warning … the propaganda & detestable doctrine that you promote will be eradicated; the damage incurred will be irreversible, and neither your institution nor your congregation will ever be able to fully recover.

    Wisconsin protests

    See also: 2011 Wisconsin budget protests

    On February 27, 2011, Anonymous announced a new attack on Koch Industries[130] as a response to the Wisconsin protests. Between 1997 and 2008, David and Charles Koch collectively gave more than $17 million to groups, such as Americans for Prosperity, Club for Growth and Citizens United, lobbying against unions. The Kochs are one of (Republican) Governor Walker’s largest corporate supporters.Anonymous accused the brothers of attempting “to usurp American Democracy” and called for a boycott of all Koch Industries products.

    2011 Bank of America document release

    On March 14, 2011, the group Anonymous began releasing emails it said were obtained from Bank of America. According to the group, the files show evidence of “corruption and fraud”, and relate to the issue of improper foreclosures. They say that a former employee from Balboa Insurance, a firm which used to be owned by BofA.

    Operation Sony

    See also: Sony Computer Entertainment America v. George Hotz

    Anonymous announced their intent to attack Sony websites in response to Sony’s lawsuit against George Hotz and, specifically due to Sony’s gaining access to the IP addresses of all the people who visited George Hotz’s blog as part of the libel action, terming it an ‘offensive against free speech and internet freedom’[141][142] Although Anonymous admitted responsibility to subsequent attacks on the Sony websites, Anonymous branch AnonOps denied that they were the cause behind a major outage of the Playstation Network in April 2011. However, as Anonymous is a leaderless organization, the possibility remains that another branch of the group is responsible for the outage.

    Spanish Police

    On June 12, 2011, there was a DDoS attack on the website of the Spanish Police, starting at 21:30 GMT. Anonymous claimed responsibility the following day, stating that the attack was a “direct response to the Friday arrests of three individuals alleged to be associated with acts of cyber civil disobedience attributed to Anonymous.” The site was down for approximately an hour as a result of their efforts.

    Indian Anti-corruption movement in cyber space

    The group has come out in support of a civil movement against corruption in India. This cyber movement has been named as ‘Operation India’.

    Operation Malaysia

    On June 15, 2011, the group launched attacks on ninety-one websites of the Malaysian government in response to the blocking of websites like Wikileaks and The Pirate Bay within the country, which the group labels censorship of a basic human right to information.

    Operation Orlando

    On June 20, 2011, members of the group took down the websites of the Orlando, Florida Chamber of Commerce and inserted a message into the website of the Universal Orlando Resort requesting that users “boycott Orlando”. The group did so in response to the arrests of members of Food Not Bombs for feeding the homeless in Lake Eola Park against city ordinances.

    Operation Intifada

    On June 28, 2011, Anonymous announced that within the next 24 hours, it would hack into the website of the Knesset, the legislature of Israel, and knock it offline. It was stated that the planned attacks were a response to alleged hacking attacks by Israeli intelligence such the Stuxnet virus, a computer virus which allegedly was created by Israeli and U.S. intelligence and targeted the Iranian nuclear program.

    Operation Anti-Security

    Main article: Operation AntiSec

    The group colaborated with LulzSec to hack the websites of a number of government and corporate sources and release information from them. As well as targeting American sites, Anonymous also targeted government sites in Tunisia, Anguilla, Brazil, Zimbabwe, Turkey, and Australia. On 21 July, Anonymous released two PDFs allegedly taken from NATO.

    Operation Facebook

    On August 2011, someone created an account on Twitter with the name OP_Facebook and announced the “Operation Facebook”. According to the links on the post, Anonymous will take down Facebook on the fifth of November 2011. The date “November 5″ is believed to be attributed to the comics V for Vendetta, where the character “V” conducts his major plans every fifth of November in memory of Guy Fawkes.

    Operation BART

    In August 2011, in response to Bay Area Rapid Transit‘s shutdown of cell phone service in an attempt to disconnect protesters from assembling non-violently in response to a police shooting, Anonymous sent out a mass email/fax bomb to BART personnel and organized multiple mass physical protests at the network’s Civic Center station.

    Support of Occupy Wall Street

    Several contingents of Anonymous have given support to the Occupy Wall Street movement, with members attending local protests and blogs run by members covering the movement.

    Operation Syria

    In early August, Anonymous hacked the Syrian Defense Ministry website and replaced it with a vector image of the pre-Ba’athist flag, a symbol of the pro-democracy movement in the country, as well as a message supporting the 2011 Syrian uprising and calling on members of the Syrian Army to defect to protect protesters.

    In September, a group tied to Anonymous appeared on Twitter, calling themselves RevolluSec, short for Revolution Security. They made their mission statement clear with a press release posted on Pastebin. They defaced many Syrian websites, including the site of every major city in Syria[168] To view the defaces after they were taken down, Telecomix mirrored them. RevoluSec also defaced The Syrian Central Bank As well as a number of pro-regime sites replacing them with a warped imaged of Bashar al-Assad, accompanied by Nyan Cat.

    Telecomix worked with Anonymous throughout the ongoing operation, Telecomix showing Syrians how to bypass the censorship, and Anonymous hacking the regime any way they can online. Both groups maintain IRC channels dedicated to this operation.

    Operation DarkNet

    In October 2011, the collective campaigned against child pornography protected by anonymous hosting techniques. They took down 40 child porn sites, published the names of over 1500 people frequenting those websites, and invited the FBI and Interpol to follow up.

    Opposition to Los Zetas

    On October 6, 2011, Anonymous released a video stating that Los Zetas had kidnapped one of the group’s members, and threatened that unless the hostage was freed, they would publish personal information about members of the cartel and their collaborators in politics, police, military, and business, which might lead to their prosecution by Mexican authorities, or targeting by rival cartels. The website of Gustavo Rosario Torres, a former Tabasco state prosecutor, was subsequently defaced with a message suggesting his involvement with the organization.

    Operation Brotherhood Takedown

    On November 7th, Anonymous released a warning threat to the Muslim Brotherhood that they would take down major websites belonging to their organization. The Muslim Brotherhood posted an article on their website explaining the dilemma. The following Friday some websites belonging to the Muslim Brotherhood were down for about 6 hours. Another video was released claiming the attack would continue till November 18th.

    Operation Blackout

    In response to the increased recognition of the Stop Online Piracy Act bill, Anonymous decided to take drastic action. It called for Emergency Action from the people as well as mass protests and spreading the word, in a video they released on November 18th. This operation is currently still ongoing. The latest activity occurred on Wednesday, January 18, 2012, where Anonymous, having previously called for a blackout from 8a-8p Eastern time, convinced Google Inc. and Wikipedia itself (albeit indirectly) to participate.

    Operation Mayhem

    On November 18, Anonymous released a video claiming to have released the Guy Fawkes Virus on Facebook and would release it on Twitter. This virus had a number of different reasons for being released; the violence of the police force in Occupy Wall Street, the Stop Online Piracy Act and against anyone who claims to be against Anonymous.

    Attack on Lt. John Pike

    Anonymous released a video with the entirety of Lt. John Pike’s contact information following the incident at Occupy UC Davis, in which the lieutenant pepper sprayed a group of nonviolent student protesters. YouTube has taken the video down, but not quickly enough before people could flood his phone, Skype, email, and mailbox with messages. An investigation into the event is ongoing.

    Attack on Stratfor

    On December 24th, claims were made that Anonymous stole thousands of e-mail addresses and credit card information from security firm Stratfor. Reportedly, Anonymous commented that this is because the data was unencrypted, however Anonymous put out a press-release stating “This hack is most definitely not the work of Anonymous”.

    2012

    Occupy Nigeria

    In solidarity with Occupy Nigeria, Anonymous has joined forces with the People’s Liberation Front and the Naija Cyber Hactivists of Nigeria. Anonymous promised “a relentless and devastating assault upon the web assets of the Nigerian government” in support of Occupy Nigeria. This was in protest to the removal of fuel subsidy that the majority of impoverished Nigerians depend upon for their very existence. As a consequence of the action the price of fuel and transportation has skyrocketed, causing extreme hardship upon the majority of Nigerians. On January 13, the Nigerian Economic and Financial Crimes Commission website was hacked, with a false report of the arrest of people involved in the oil sector replacing the normal page.

    Operation Megaupload

    In retaliation for the shut down of the file sharing service Megaupload and the arrest of four workers,[191] Anonymous DDoSed the websites of UMG (the company responsible for the lawsuit against Megaupload), the United States Department of Justice, the United States Copyright Office, the Federal Bureau of Investigation, the MPAA, Warner Brothers Music and the RIAA, as well as the HADOPI the afternoon of January 19, 2012. [192] The operations by Anonymous are most likely driven further by anger over the House of Representatives’ Stop Online Piracy Act (SOPA) and the Senate’s Protect Intellectual Property Act (PIPA).

    The Polish Revolution and other anti-ACTA activism in Europe

    On January 21st a series of DDoS attacks on Polish government websites took place, for which the Anonymous took responsibility and referred to as “the Polish Revolution”.[194] The group via their Twitter account stated it was a revenge for upcoming signing of ACTA agreement by the Polish government. Starting with sejm.gov.pl, websites of the Polish Prime Minister, President, Ministry of Culture and National Heritage, later on the police, Internal Security Agency (Agencja Bezpiecze?stwa Wewn?trznego) Ministry of Foreign Affairs were also blocked.

    TheAnonSi

    Anonymous Slovenia announced opposition against the Slovenian signing of the ACTA and have posted video threats on various websites against the goverment officials, aswell as against Nova Ljubljanska Banka (commonly known as NLB), accusing the latter of corruption. On 4 February 2012 The NLB was a victim of a cyber attack and was offline for one hour, while public demonstrations were held in the capital of Ljubljana and in Maribor. Some estimated 3000 people gathered in the capital, while around 300 protested in Maribor.

    Operation Russia

    Unidentified hackers cracked email boxes of some prominent pro-Kremlin activists and officials, including Vasily Yakemenko, head of the Federal Agency for Youth Affairs, Kristina Potupchik, press secretary for Nashi youth movement, and Oleg Khorokhordin, deputy head of the Department for Internal Affairs at the Presidential Administration. Since 1 February, links to contents of the mailboxes have been appearing on @OP_Russia Twitter account. The hackers confirmed they consider themselves a part of the Anonymous movement; “We are Anonymous”, they stated in an interview[201][202]. The information discovered enabled many to accuse Yakemenko and his colleagues in paying some influential bloggers, as well as numerous trolls, for publishing stories and commenting in favour of Putin on negative press articles on the Internet[

    Greek Ministry of Justice

    On February the 3rd Anonymous took down the Greek Department of Justice website for their deplorable support of Internet Autocracy and also protesting for the IMF involvement on Greece’s bailout.Anonymous have given a 2 week deadline for Greece to revoke its support on the A.C.T.A bill or else they would unleash an unprecedented attack on all Greek media and Ministries.

    Operation Blitzkrieg

    On February 1st, 2012, AnonOps Communications blog announced the findings of ‘Operation Blitzkrieg’, which targeted the websites of several neo-nazi organizations, publishing email exchanges and personal messages.  A message on one the neo-nazi websites that was shut down claimed links between presidential candidate Ron Paul and his campaign staff, including planning a meeting to be set up at CPAC

    Bashar al-Assad’s Email Hack

    On Feb. 6th, Anonymous broke into the mail server of the Syrian Ministry of Presidential Affairs, accessing some 78 inboxes of Bashar al-Assad’s staffers. One of the email files was a document preparing Assad for his December 2011 interview with ABC’s Barbara Walters. One of the passwords commonly used by Assad’s office accounts was “12345.”

    Operation CIA.gov

    Feb 11,2012 still ongoing

    Reference:

    http://en.wikipedia.org/wiki/Timeline_of_events_involving_Anonymous

     

    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit

  • The LulzSec Boat is Back 4 lulz

    The LulzBoat is back

    gAtO sAy – The boy’s and girls from Lulzboat pirates are back and planning something new. We all remember the 50 days of lulz this crew did some real damage. Now they have come out of retirement and recruiting. First they hack an FBI transmission -http://pastebin.com/8G4jLha8 and we know this is true because (http://s.tt/15wY5 -HACKTIVIST GROUP Anonymous has plundered a conference call from the US Federal Bureau of Investigation (FBI) and posted it on Youtube.) we see the results in the media. This is a major score hacking and FBI communication this groups has grown up and now plays with very dangerous toys.

    We have decided to congregate here :

     via Tor http://4eiruntyxxbgfv7o.onion/snapbbs/76211f31/

    please DM a user/pass you wish to use or one can be provided to you if you so wish :http://twitter.com/lulzfinancial or lulzfinancial@hushmail.com

    This is how brazen this crew(z) has become of course they got it pretty much closed up. Go into Tor and cruise the world of .onion TDL if you can find them. This is the technology that dissidents use from around the world to circumvent governments guess what we can’t hack an onion site. We will eventually but today the LulzSec Pirates can do what they want and plan behind closed doors right out in the open. This must piss some people off. I’m a white hat I get to their meeting room and WAAAA I can’’t get in. break out the Backtrack5 and pounce on that door. In an .onion site things are a little different they can blink on and blink off. Sometimes you see them and sometimes they may come up in 5 minutes. The Tor network is different and new to most of us but to the LulzSec pirates it’s old hat. We have to learn gAtIcO’S -gAtO oUt

     

    Greetings

    By lulzfinancial January 15, 2012 Leave a comment

    Lulz, exciting and new Just login, they’re expecting you and Lulz, a kiss on the lips Let it flow you stupid FBI battleships The Lulz Boat soon will be planning another hack The LulzBoat who is the next one you will attack? set a course for disaster, your database they will trash Lulz, not for [...]

     

    Lulz, exciting and new -

    Just login, they’re expecting you
    and Lulz, a kiss on the lips
    Let it flow you stupid FBI battleships

    The Lulz Boat soon will be planning another hack
    The LulzBoat who is the next one you will attack?
    set a course for disaster, your database they will trash

    Lulz, not for kids anymore
    A Bitcoin account, on a foreign shore
    IT’S LUUUUUULLLZZZZ

    Lulz, defacing a few
    Corporate sites, what’d you think they’d do?
    and Lulz, th3j35t3r wants to be you
    he’s a joke, christ his name means fool

    The LulzBoat soon will be making another run
    THe LulzBoat promising ruin for everyone

    Set a course for X-Factor, Sony and PBS
    Lulz, is gonna hurt like a bitch
    Yeah that gaping wound is gonna need a stitch
    IT’S LUUUULLLLZZZZZ
    OPEN YOUR EYES IT’S LULZ!

    Of course their on Twittwer, FaceBook and WordPress doing the best to look fresh and new.

    http://lulzfinancial.wordpress.com/mission/

    https://www.facebook.com/pages/LulzFinancial

    http://pastebin.com/8G4jLha8

     

    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit

  • Is DDoS a Legitimate Civil Disobedience

    gAtO’s -Digital Sit-insDistributed denial of service (DDOS) is a favorite tactic of Anonymous. While the media likes to call DDOS a form of ‘hacking’, this is at best a technical misunderstanding. DDOS does no permanent damage and doesn’t involve breaking into servers or stealing data. Rather, it simply overwhelms a server with UDP traffic – the online equivalent of fans at a football game yelling so loud that the offensive line can’t hear the quarterback. This XKCD comic explains it best:

    In the US, DDOS has been treated as a felony under the Computer Fraud and Abuse Act punishable by a mandatory 10 years in prison. Given its similarity to long-accepted civil disobdience tactics such as sit-ins and blocking building entrances, this harsh penalty is outrageous and unfair.

    Anonymous is not unanimous, and opinion on DDOS is perhaps more divided than any other tactic. Indeed, this very faction, in consultation with anti-ACTA NGOs, has been calling for a halt to DDOS for the last several days.

    But after this photo of Polish politicians protesting ACTA went viral yesterday, is it time we all re-evaluate the role & legitimacy of DDOS. These Parlimentarians were wearing Anonymous Guy Fawkes mask while the Parliament’s website was down due to DDOS by Anonymous. They can’t emphasize that point enough – this is a game-changer.

     

    DDOS has been a remarkably effective tactic for bringing the world’s attention to injustice, from repression in Tunisia and Egypt to censorship by SOPA and ACTA. A symbolically rich response, DDOS says “If you silence us, we will silence you”. In that respect, it works.

    But DDOS is a single tool in our arsenal of protest, not the only one. Hacktivist need to engage in the mainstream political process as well – and for many of us, deeply frustrated by decades of corruption and unresponsiveness, this will require holding our nose.

    As events in Poland have shown, protesters have allies in unexpected places. There comes a time when dissident must use words to articulate their demands and desires, instead of UDP packets. There are still many ways to protest- in the form of mass emails, fax blasts and overloaded telephone switchboards.

    Protesters everywhere therefore call on dissidents, talkers, Dem, Rep and all freedom loving Internauts to contact your politicians directly;  “No SOPA, No ACTA!

    Hands off the Internet! - YOU CAN’T HAVE IT BACK!

    Europe

    United States

    Global

    -gAtO oUt

    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit

  • Anonymous has a Traitor

    gAtO sAw - Make money off Anonymous – scam supporters out of money-not Anonymous. Anonymous has a core leadership and Arturas T. Rosenbacher knows some of them from the good old days when some of them were hackers making money. It seems that Arturas decided to make a name for himself and make a little money on the side you know ”for the cause-his pocket needs mo-money”. So he created a bunch of Anon sounding names on Twitter: and scammed the Anons:

    1. 4. Arturas T Rosenbacher
    2. Also known as:
    3. Current Acct on twitter: @allanons
    4. Was @ArturasCEO
    5. Was @_Anti_Sec_
    6. Was @AnonIRC_
    7. Was @Antis3c
    8. Was @_Anon_Ops_
    9. Was @AnonDaily
    10. Was @AnonOpsWorld
    11. Was @OfficialAntisec
    12. @AnonOpsWorld on Twitter

    In Occupy Chicago Arturas who was interviewed by the Wall Street Journal. This guy is excellent in self promoting and capitalizing on scams the boy has a future. The Anons like anon2world confronted him on.  1/21/2012 : (he actually admits to be RefRef traitor) The transcript are below:[1]

    The only reason why gAtO cares is it gives me a better feel for the Anonymous movement and how it works. One thing that I found is leadership in a leaderless group. Anonymous claims to be leaderless but there is a core users that really control it all. You could see them when they were DoS’ing the wrong place in Europe last week and this little cat fight opens up the layers to get a look at who are some of it’s main characters. It amazes me that Anonymous does all of the strategic planning and tactical execution all with social media tools in the open, in the wild. If someone was tracking this group they would of seen the riff and exploited this split. If gAtO can see it anyone can, how come the government does nothing.-gAtO oUt 

     

    Proof that Arturas Rosenbacher, using old FB account AnonOps, created the @anonymouSabu fb page. #OpT4Traitor pic.twitter.com/fG2xdBSq

    From AnonOps:Arturas T. Rosenbacher has been up to his games again. It wasn’t enough that he scammed Anonymous supporters out of money under the guise of AnonCMD, and it wasn’t enough that he was posting false information on OccupyChicago’s Facebook profile, and lying to the organizers about his false claims in helping start Wiki leaks, he had to do something to solidify is narcissistic insanity.

     

    On Sunday, November 6th Arturas decided it would be a great idea to release a famous rap star’s cell phone number to the world on twitter. The rap star, known as Lupe Fiasco donated tents, food and water to Occupy Chicago, and is an outspoken supporter of the Anonymous collective.

    Arturas did this under the flag and banner of Anonymous, using Anon Dev Pro as his twitter name, and telling those who listened that he knows high profile anons. The only reason Arturas knows high profile Anons, is because of his past track record with us, which is entrenched with scamming innocent people out of money.


    Arturas wants attention, he wants to be famous. Let us make him famous. Let us all contact each and every Occupy movement and make sure the people know about the traitor T. No Occupy is safe with a traitor in the midst; T must be cataloged and identified by each and every individual within all Occupy movements.

    He must be shamed upon site for the damage he has done to Occupy Chicago, Lupe Fiasco, and the collective of Anonymous.
    Arturas;
    We told you we would come for you T, we warned you, and you did not listen. How did you think we would forget? How did you think we would forgive? Your actions will no longer con the masses into believing you are of any worth. Now everyone will know exactly who and what you are, which is nothing more than a small time con man with psychological problems seeking attention.

    Proof that Arturas Rosenbacher, using old FB account AnonOps, created the @anonymouSabu fb page. #OpT4Traitor pic.twitter.com/fG2xdBSq

    @AllAnons @anon2world @TehWongZ are you talking about this site? AK Enterprises based in Lithuania? #OpT4Traitor pic.twitter.com/JdaFLeQA

    #OpT4Traitor He swindled $355 in donations out of peoples pockets under the guise #OpMegaUpload @AllAnons = scammer pic.twitter.com/inRTJ9PF

    youtube.com/watch?v=FAlkOj…

    1. If you have been scammed by Arturas T. Rosenbacher’s online donations, and are in search of legal counsel
    2. please contact: nlg_lawyer@hushmail.com and help us make him accountable for his actions.
    3. Arturas T Rosenbacher
    4. Also known as:
    5. Current Acct on twitter: @allanons
    6. Was @ArturasCEO
    7. Was @_Anti_Sec_
    8. Was @AnonIRC_
    9. Was @Antis3c
    10. Was @_Anon_Ops_
    11. Was @AnonDaily
    12. Was @AnonOpsWorld
    13. Was @OfficialAntisec
    14. @AnonOpsWorld on Twitter
    15. @only219 on Twitter
    16. Business Web Page: http://ak-enterprises.com/
    17. Social Media etc.
    18. https://twitter.com/#!/blahblah2992
    19. https://plus.google.com/111315707347475154705/posts
    20. http://www.myspace.com/219foc
    21. http://www.myspace.com/560012260
    22. https://twitter.com/#!/Only219
    23. http://twitter.com/#!/AnonOpsWorld
    24. http://en.gravatar.com/rosenbaa29 <– phone numbers, emails etc
    25. http://www.last.fm/user/rosenbaa29
    26. http://www.youtube.com/user/rosenbaa29
    27. http://www.ustream.tv/user/rosenbaa29
    28. http://www.ustream.tv/recorded/14315720 <— in T’s house he filmed hiimself setting up Ustream (idiot).
    29. When doing a spokeo search with this email (ajkrosen@gmail.com) I found this:
    30. http://en.gravatar.com/anoncmd
    31. It states under the Spokeo search results: Real Name: Anon CMD
    32. Bio: We are #AnonOps AnonCMD | #AntiSec #Anon #OpBART | Hacktivist / Supporter of Anonymous, AntiSec, and OP’s. We Leak. #Venture
    33. Bio: We are #AnonOps AnonCMD | #AntiSec #Anon #OpBART | Hacktivist / Supporter of Anonymous, AntiSec, and OP’s. We Leak. #Venture
    34. ^ RefRef Traitor AnonCMD PROOF
    35. http://www.okcupid.com/profile/ajkrosen <— need an acct to view, went private (teee heheheh – troll it peeps)
    36. http://www.linkedin.com/in/arturasr
    37. Skype: aajkr29
    38. AIM: arturasr29
    39. Cellphone: 3125026086
    40. another phone: 3126320401
    41. 219 Electronics Instruction and Repair (This is T’s House)
    42. 21 E. Atwater, Beverly Shores, IN
    43. (219) 873-6115<–home?
    44. http://www.identified.com/wombat/candidates/76652
    45. http://www.formspring.me/aajkr29
    46. All courtesy of the Old Man’s toolz. Thank You! ;)
    47. Previous dox
    48. Dox 1: http://pastebin.com/spN5NL8J
    49. Dox 2: http://pastebin.com/LYeePuQ5
    50. Anonymous Press Release: http://www.youtube.com/watch?v=FAlkOj3KQKo
    51. [1] A LuLzy Skype Chat with the dickhead @AnonDaily on 1/21/2012 : (he actually admits to be RefRef traitor)
    52. [8:45:03 PM] Anon2world: Nice that you scammed all of those people out of money for wepay #OpMegaUpload.
    53. [8:48:25 PM] *** Missed call from Arturas Rosenbacher. ***
    54. [8:48:29 PM] Arturas Rosenbacher: nigger answer
    55. [8:48:47 PM] Arturas Rosenbacher: I don’t need their money clearly, I’m not even running it.
    56. [8:49:29 PM] Arturas Rosenbacher: stop nbeing a bitch and ansswer
    57. [8:49:31 PM] Anon2world: I need to get my VPN up before I even talk on here.  You set up the acct,
    58. you ran the info under anondaily
    59. [8:49:38 PM] *** Missed call from Arturas Rosenbacher. ***
    60. [8:49:55 PM] Anon2world: we are not happy.
    61. [8:50:27 PM] Anon2world: You calling me a nigger, and a bitch doesn’t help your cause.
    62. [8:51:24 PM] Arturas Rosenbacher: that one, sry
    63. [8:51:39 PM] Anon2world: let me get my vpn up
    64. [8:51:43 PM] Anon2world: you can log my IP
    65. [8:51:53 PM] Arturas Rosenbacher: you think im smart enough for htat?
    66. [8:52:22 PM] Anon2world: why take that chance…
    67. [8:52:40 PM] Anon2world: I dox’d you remember? (well with the help of a few others).
    68. [8:53:05 PM] Arturas Rosenbacher: Haha
    69. [8:53:07 PM] Arturas Rosenbacher: I remember!
    70. [8:53:15 PM] Arturas Rosenbacher: Clearly no one gives a shit about your dox
    71. [8:53:26 PM] Anon2world: seems a lot of people did.
    72. [8:53:39 PM] Arturas Rosenbacher: Any clearly, all the money from the first wepay donations were reversed,
    73. [8:53:45 PM] Arturas Rosenbacher: I sent you that remember
    74. [8:53:51 PM] Arturas Rosenbacher: Plus, we both know I dont need money
    75. [8:54:04 PM] Anon2world: one sec
    76. [8:54:15 PM] Arturas Rosenbacher: And also, you come to my house again, I will shoot you.
    77. [8:54:43 PM] Anon2world: LoL – I will warn the Anon that did ;)
    78. [8:54:47 PM] Anon2world: but, it wasn’t me
    79. [8:54:49 PM] Anon2world: :D
    80. [8:54:58 PM] Arturas Rosenbacher: But for real, lets be cool
    81. [8:55:04 PM] Arturas Rosenbacher: Stop with that #opt4traitor shit
    82. [8:55:11 PM] Arturas Rosenbacher: its fucking stupid
    83. [8:55:22 PM] Anon2world: dude, how many scams have we caught you in?
    84. [8:55:31 PM] Arturas Rosenbacher: prove any were scams
    85. [8:55:34 PM] Arturas Rosenbacher: I never got money
    86. [8:55:36 PM] Arturas Rosenbacher: PEriod
    87. [8:55:37 PM] Anon2world: I traced your acct back to anoncmd
    88. [8:55:44 PM] Arturas Rosenbacher: yeah,
    89. [8:55:48 PM] Arturas Rosenbacher: so
    90. [8:55:51 PM] Arturas Rosenbacher: get passed it
    91. [8:56:02 PM] Arturas Rosenbacher: people forgot, shit has changed now,a nd I was on CNN
    92. [8:56:07 PM] Arturas Rosenbacher: Clearly no one gives a fuck anymore
    93. [8:56:15 PM] Arturas Rosenbacher: https://www.facebook.com/anondaily
    94. [8:56:18 PM] Arturas Rosenbacher: look at the fucking about
    95. [8:56:27 PM] Anon2world: I was on CNN too, and in a documentary… doesn’t make me want to run scams
    96. [8:56:41 PM] Arturas Rosenbacher: You mean RefRef?
    97. [8:56:44 PM] Anon2world: yes
    98. [8:56:56 PM] Arturas Rosenbacher: It existed, we all know that, took down pastebin
    99. [8:57:35 PM] Anon2world: you showed deprogrammer9 – you were going to take down the CTA… nothing happened…
    100. [8:57:47 PM] Arturas Rosenbacher: https://twitter.com/#!/pastebin/status/139767795763253248
    101. [8:58:14 PM] Arturas Rosenbacher: CMD was a group twitter
    102. [8:58:15 PM] Anon2world: you can’t prove it was refref that did that
    103. [8:58:45 PM] Arturas Rosenbacher: I tweeted that it would be down before it was
    104. [8:58:49 PM] Arturas Rosenbacher: under ANonCMd
    105. [8:58:58 PM] Arturas Rosenbacher: in the end, it doesnt matter
    106. [8:59:07 PM] Anon2world: you could have used any DDoS client bro
    107. [8:59:17 PM] Arturas Rosenbacher: http://www.examiner.com/anonymous-in-national/refref-hits-pastebin-photo
    108. [8:59:20 PM] Anon2world: I have taken sites down with little or no troubles
    109. [8:59:32 PM] Arturas Rosenbacher: you think LOIC could take down pastebin, on one computer?
    110. [8:59:54 PM] Anon2world: no, but multiple…
    111. [9:00:11 PM] Arturas Rosenbacher: Hah
    112. [9:00:12 PM] Anon2world: i have take out sites with only 2 people using diff techs
    113. [9:00:18 PM] Arturas Rosenbacher: I dont care what you did
    114. [9:00:33 PM] Anon2world: refref, you said was a lie
    115. [9:00:39 PM] Arturas Rosenbacher: refref is over, celarly all you kids could live after you realized it was out,, then gone
    116. [9:00:42 PM] Anon2world: you said there was no refref
    117. [9:00:49 PM] Anon2world: kids?
    118. [9:00:53 PM] Anon2world: you met me.
    119. [9:00:54 PM] Arturas Rosenbacher: everybody has to clearn up a project that anonymous wasnt ready for
    120. [9:01:11 PM] Arturas Rosenbacher: it existed, i made sure everyone thought it was fake
    121. [9:01:18 PM] Arturas Rosenbacher: thats why i got on anoncmd
    122. [9:01:22 PM] Anon2world: dude, no one can believe anything you say.
    123. [9:01:27 PM] Anon2world: let me reboot.
    124. [9:01:28 PM] Arturas Rosenbacher: do you think i give a shit?
    125. [9:01:34 PM] Arturas Rosenbacher: clearly no
    126. [9:01:42 PM] Anon2world: stay online I will talk voice with you in a minute.
    127. [9:01:45 PM] Anon2world: have to reboot
    128. [9:01:54 PM] Anon2world: stay here plz
    129. [9:02:01 PM] Arturas Rosenbacher: no
    130. [9:02:18 PM] Anon2world: fine, then we wont talk voice
    131. [9:02:21 PM] Anon2world: and I wont reboot
    132. [9:02:42 PM] Anon2world: how can you go under “anonymous” and put your real name out there? clearly you’re
    133. not anonymous Arturas

     

    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit

  • Predictive Behavioral Security Analysis part 1:

    Predictive Behavioral Security Analysis part 1:

    gAtO bEeN -watching a mouse hole called Twitter lately, it’s an OSINT Open Source Intelligence source that monitors real events in real time. OSINT – is a form of intelligence collection management that involves finding, selecting, and acquiring information from publicly available sources and analyzing it to produce actionable intelligence.

     

    cool dashboard – internet Storm Center - http://isc.sans.edu/dashboard.html

    gAtO bEeN -watching World Web War (WWW) hacktivismn has jumped started this new year, #OpMegaUpload upset lot’s of people and the organization structure of Anonymous is getting more refine. Things happened in #poland #ireland and during the middle of a DoS attack Anonymous told their warrior on twitter:

     

    http://trendsmap.com/

    @AnonyOps: #DDOS of European Parliament must stop NOW. They’re not the ones #ACTA

    Later they tweeted this:@AnonyOps: europarl.europa.eu back up after #DDOS. Thanks for listening to logic #Anonymous.go persuade the MEPs:

    http://www.msisac.org/apps/dashboard/

    Command and Control in your face and people responded to this organized movement. Each new attack everyone get’s better more coordination Anonymous is growing up. Just look at the causes #SOPA #PIPA  #ACTA #OpMegaUpload #poland #Ireland #SOPAIreland #France #Belgium  #FreeTopiary. The Anonymous thingy has grown up it’s a social conscious mindset created, manipulated, organic, ???? leaderless ????. The evolution of this movement has spawned OWS the Occupy Wall Street political movement has it’s roots in Anonymous, but you can see the worldwide community support for this group that is anyone. This movement will grow and mature.

    http://www.fsisac.com/

    Think about it.

    This Week gAtO Learned mUcHo-mUcHo, we have not only the technical means but now the social monitoring needs that can be used to gather information like no other time before. Of course our governments are getting in on the fun.

    Homeland Security DHS- Human Factors/Behavioral Sciences Projects:

    • Actionable Indicators and Countermeasures Project
    • Biometric Detector Project
    • Community Perceptions of Technology Panel Project
    • Community Resilience Project
    • Enhancing Public Response and Community Resilience Project
    • Future Attribute Screening Technology (FAST) Project
    • Hostile Intent Detection – Automated Prototype Project
    • Hostile Intent Detection – Validation of Observable Indicators of Suspicious Behavior Project
    • Human Systems Engineering Project
    • Human Systems Research Project
    • Insider Threat Detection Project
    • Mobile Biometrics System Project
    • Multi-modal Biometrics Project
    • Passive Methods for Precision Behavioral Screening Project
    • Predictive Screening Project
    • Quantitative Psychosocial Impacts Index Project
    • Rapid DNA Project
    • Risk Prediction Project
    • Violent-Intent Modeling and Simulation Project

    http://www.dhs.gov/files/programs/gc_1218480185439.shtm

    http://k.root-servers.org/

    And the CIA got into the fun[1] way before it was hip to monitor the web. We know the government has all kinds of databases of all kinds of things they collect remember echelon and carnivore the FBI first grab at data. Then we yell at the CHinese for doing the same thing we did, they learned from us about gathering information about people. Now cyberspace ties us in even tighter with SMS, streaming video, encrypted mobile chats for the masses. But as more is piled on more tools are developed. Recorded Future[2] was a little geek company sucking in the data and developing Analytical tools for Intelligence forecasting and the CIA loves them.

    Predictive Behavioral Security Analysis is just monitoring choice which is freedom for it is predictive and can then be manipulated to plant an idea, a spark, a tweet. “Egypt can be free” this little spark is setting the fuel for the flames that will burn in Cairo by it’s people via Twitter, Facebook and any other social media. The Arab Awakening -Arab Spring was an simple idea, manipulated in cyberspace by protester, dissidents and governments in Tunisia, Bahrain, Syria and others, we will see Iraq’s move in March of this years with it’s election, they are closing down their Internet but will the idea of freedom explode anyway. We will be monitoring this – gAtO OuT

     

    References:

    [1] CIA Invest in ‘Future’ of Web Monitorin http://www.wired.com/dangerroom/2010/07/exclusive-google-cia/

    [2] https://www.recordedfuture.com/

     

    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit

  • Underground Cyber War-TangoDown OpMegaupload

    gAtO wItNeSs – LIVE International Underground Cyber War via  Twitter this weekend. #Anonymous #Megaupload #OpMegaupload #TangoDown …

    If you haven’t heard, police in New Zealand raided MegaUpload.com took down the site and confiscated the servers and all the materials, copyrighted or original content. Remember SOPA protest last week this raid was a SOPA raid by the New Zealand government. They used (Low Orbit Ion Canon) and other tools plus  Twitter (Twitter follower could click on a link and that would launch a dDoS attack -live crowd-source enabled TangoDown attack.

    http://pastebin.com/WEydcBVV

    1. Twitter – @AnonymousWiki - January 19th, 2012
    2. Popular file-sharing website megaupload.com gets shutdown by U.S Justice – FBI and charged its founder with violating piracy laws. Four Megaupload members were also arrested. The FBI released a press release on its website which you can view here:

      German Internet millionaire Kim Schmitz (Kim Dotcom) arrives for. a trial at a district court in Munich in these May 27, 2002 file photos. New Zealand police broke through electronic locks and cut their way into a mansion safe room to arrest the alleged kingpin of an international Internet copyright theft case and seize millions of dollars worth of cars, artwork and other goods. German national Schmitz, also known as Kim Dotcom, was one of four men arrested in Auckland on January 20, 2012, in an investigation of the Megaupload.com website led by the U.S. Federal Bureau of Investigation. Reuters

    3. http://www.fbi.gov/news/pressrel/press-releases/justice-department-charges-leaders-of-megaupload-with-widespread-online-copyright-infringement
    4. We Anonymous are launching our largest attack ever on government and music industry sites. Lulz. The FBI didn’t think they would get away with this did they? They should have expected us.

    Anonymous Twitter feeds kept everyone informed, supporters retweeted it,  joined in the attack  and soon you could see the traffic increase 100% over the course of the event. The attack vector was dDoS but they manage to delete sites like cbs.com down to the bone. Another defiance stance from Anonymous and their crew(z) this weekend showing who has bad security. This is a way for Anonymous to be job creators (mEoW), because these companies need more security people fast…  

    **- Will these companies try and hide these attacks? Will these organization disclose if any identifiable USER INFO was compromised? – Will we see unencrypted USER INFO (credit cards -mastercard.com was tango down)in the wild of cyberspace? -**

    When gAtO saw Justice.gov and http://justinbieberweb.com/ got TangoDown gAtO kNeW they meant business. When the .gov took a hit you saw thing start to happened…like Anonymous.action-24.com is a fake forum created by the authorities (FBI).

    “A security expert (name withheld -Tweeted)” *** Is the (fully unsecure) #AnonGroup social network really run by #AnonOps / #Antisec ?

    gAtO sEe- conspiracy theory (FBI vs Anonymous) all around this, but if this was true, or maybe a plant to throw distress amongst the Anons or to capture participants IP address. \I see some links to news Items pop up in pasterBin all the time to a blank post, one way of seeing who is following the #OpMegaupload / I still haven’t found out but I’m sure people are looking into this. Trust in the crowd-sourcing communication and tracking tools coordinating attacks and status is something any dissident groups is concern about, but that the FBI and other’s took notice of these attacks thats for sure Dude:

    GOV TANGO DOWN! #Megaupload. » anonops AnonOps. “The Internet Strikes Back” is TT! » anonops AnonOps. The Internet Strikes Back #Megaupload info

    At the end of the day we see the power of the people in cyber space, a world wide movement like the SOPA, OWS support. Most people don’t have a clue what’s been happening in the underground cyber war to keep it FREE.  |gAtO is no judge as to the protesters wether it’s right or wrong first #SOPA blackout then this massive attack on some major companies -movers and skaters bAbY. I just want these companies to come clean and do the responsible thing, full Disclosure  what happened. Protect my data or else I will not do business with you. Hacktivismn has taken a new turn and people want to belong, they want to be empowered, some are hipsters but the majority are real protesters, the new breed of (hacktivist ) that comes after this one will blow our minds.

     **- 5:17 P.M. Update: RIAA.org is now down.

    5:55 Update 3: Tweets indicate there may be more attacks to come this evening.

    5:55 Update 3: Tweets indicate there may be more attacks to come this evening.

    7:47 Update 4: Anonymous is reporting FBI.gov as down. Some people report being able to get through, but the site is clearly under a lot of stress.

    8:19 Update 5: Now it’s definitely down. FBI.gov, that is. MPAA and RIAA sites are back now though

    - **

     A masked hacker, part of the Anonymous group, hacks the French presidential Elysee Palace website on January 20, 2012 near the eastern city of Lyon. Anonymous, which briefly knocked the FBI and Justice Department websites offline in retaliation for the US shutdown of file-sharing site Megaupload, is a shadowy group of international hackers with no central hierarchy. On the left screen, an Occupy mask is seen. Getty

    Expect Us! is their motto, we better be prepared - gAtO oUt

    Until this mess is clear , I hope you saved copies and can upload them to alternative sites like megaupload.com like Putlocker.comFilebox.com or Depositfiles.com or one of the many other cyberlockers available so that people can continue to enjoy them while Megaupload is not working. 

    References:

    Universal, RIAA, FBI, MPAA and Department of Justice Sites Go Down, Anonymous Claims Responsibility -http://www.geekosystem.com/anon-justice-universal/

    Anonymous deletes CBS: Operation Megaupload continues -http://www.examiner.com/anonymous-in-national/anonymous-deletes-cbs-operation-megaupload-continues?@anonymouspress

    If Megaupload is not working what happens to the files? http://www.examiner.com/video-game-in-honolulu/if-megaupload-is-not-working-what-happens-to-the-files?@anonymouspress

    Anonymous tricked people into joining Web site attacks - http://news.cnet.com/8301-27080_3-57363103-245/anonymous-tricked-people-into-joining-web-site-attacks/

    MegaUpload Photo’s of the Bust  - http://cryptome.org/2012-info/megaupload/0051.htm

    TangoDown 4 opMegaUpload -List

    CBS.com

    http://warnerbros.com

    http://www.vivendi.com/

    mastercard.com

    fightprivacy.com

    universalmusic.com

    http://paidcontent.co.uk/

    http://store.warnerbrosshop.com/

    wando.com.br

    Justice.gov

    http://justinbieberweb.com/

    http://www.europarl.europa.eu/

    http://ms.gov.pl/ Poland

    http://universalmusic.es/

    http://www.brasilia.df.gov.br/

    http://www.fbi.gov/

    Department of Justice http://www.justice.gov/

    http://www.riaa.com/

    http://www.universalmusic.com/

    http://www.wmg.com/

    http://www.BMI.com/

    http://www.mpaa.org/

    Motion Picture Association of America (MPAA.org) Universal Music (UniversalMusic.com) Belgian Anti-Piracy Federation (Anti-piracy.be/nl/) Recording Industry Association of America (RIAA.org) Federal Bureau of Investigation (FBI.gov) HADOPI law site (HADOPI.fr) U.S. Copyright Office (Copyright.gov) Universal Music France (UniversalMusic.fr) Senator Christopher Dodd (ChrisDodd.com) Vivendi France (Vivendi.fr) The White House (Whitehouse.gov) BMI (BMI.com) Warner Music Group (WMG.com)

    Brazil - MEGA TANGO DOWN

    http://pastebin.com/H4NpqCDC -

    Invadimos denovo : http://imgur.com/6bmFe. Havittaja – @Havittaja – www.twitter.com/Havittaja -The evilc0de – @theevilc0de – www.twitter.com/theevilc0de -Todos os servidores foram desligados -MEGA TANGO DOWN -(TODOS DEVEM ESTAR OFFLINE AGORA 22/01/2012 19:47)

    ?antigo.se.df.gov.br (OFFLINE)

    ?brasiliasustentavel.seduma.df.gov.br (OFFLINE)

    ?www.admjardimbotanico.df.gov.br (OFFLINE)

    ?www.agecom.df.gov.br (OFFLINE)

    ?www.agenciabrasilia.df.gov.br (OFFLINE)

    ?www.aguasclaras.df.gov.br (OFFLINE)

    ?www.arpdf.df.gov.br (OFFLINE)

    ?www.bandeirante.df.gov.br (OFFLINE)

    www.brasilia.df.gov.br (OFFLINE)

    www.brasiliatur.df.gov.br (OFFLINE)

    www.brazlandia.df.gov.br (OFFLINE)

    www.candangolandia.df.gov.br (OFFLINE)

    www.capitaldigital.df.gov.br (OFFLINE)

    www.carnaval.df.gov.br (OFFLINE)

    www.cbhparanaiba.seduma.df.gov.br (OFFLINE)

    www.ceasa.df.gov.br (OFFLINE)

    www.ceilandia.df.gov.br (OFFLINE)

    www.cepceilandia.df.gov.br (OFFLINE)

    www.codeplan.df.gov.br (OFFLINE)

    www.codhab.df.gov.br (OFFLINE)

    www.coorsep.seg.df.gov.br (OFFLINE)

    www.cruzeiro.df.gov.br (OFFLINE)

    www.defensoria.df.gov.br (OFFLINE)

    www.defesacivil.df.gov.br (OFFLINE)

    www.der.df.gov.br (OFFLINE)

    www.detran.df.gov.br (OFFLINE)

    www.df.gov.br (OFFLINE)

    www.dfdigital.df.gov.br (OFFLINE)

    www.distritofederal.df.gov.br (OFFLINE)

    www.educacaointegral.df.gov.br (OFFLINE)

    www.emater.df.gov.br (OFFLINE)

    www.escoladegoverno.seplag.df.gov.br (OFFLINE)

    www.esporte.df.gov.br (OFFLINE)

    www.etc.se.df.gov.br (OFFLINE)

    www.etc.sect.df.gov.br (OFFLINE)

    www.fap.df.gov.br (OFFLINE)

    www.fhb.df.gov.br (OFFLINE)

    www.gama.df.gov.br (OFFLINE)

    www.gdf.df.gov.br (OFFLINE)

    www.gdfdireto.df.gov.br (OFFLINE)

    www.governo.df.gov.br (OFFLINE)

    www.guara.df.gov.br (OFFLINE)

    www.hbdf50anos.df.gov.br (OFFLINE)

    www.ibram.df.gov.br (OFFLINE)

    www.inas.df.gov.br (OFFLINE)

    www.iprev.df.gov.br (OFFLINE)

    www.itapoa.df.gov.br (OFFLINE)

    www.jardimbotanico.df.gov.br (OFFLINE)

    www.juventude.df.gov.br (OFFLINE)

    www.lagonorte.df.gov.br (OFFLINE)

    www.lagosul.df.gov.br (OFFLINE)

    www.matricula.df.gov.br (OFFLINE)

    www.metro.df.gov.br (OFFLINE)

    www.nahora.df.gov.br (OFFLINE)

    www.novacap.df.gov.br (OFFLINE)

    www.orgaos.df.gov.br (OFFLINE)

    www.ouvidoriageral.df.gov.br (OFFLINE)

    www.paranoa.df.gov.br (OFFLINE)

    www.parceirosdaescola.df.gov.br (OFFLINE)

    www.parkway.df.gov.br (OFFLINE)

    www.pedala.df.gov.br (OFFLINE)

    www.pg.df.gov.br (OFFLINE)

    www.planaltina.df.gov.br (OFFLINE)

    www.prg.df.gov.br (OFFLINE)

    www.procon.df.gov.br (OFFLINE)

    www.protec.df.gov.br (OFFLINE)

    www.recanto.df.gov.br (OFFLINE)

    www.revista.seduma.df.gov.br (OFFLINE)

    www.riachofundo.df.gov.br (OFFLINE)

    www.riachofundoii.df.gov.br (OFFLINE)

    www.sa.df.gov.br (OFFLINE)

    www.samambaia.df.gov.br (OFFLINE)

    www.santamaria.df.gov.br (OFFLINE)

    www.saosebastiao.df.gov.br (OFFLINE)

    www.saude.df.gov.br (OFFLINE)

    www.scia.df.gov.br (OFFLINE)

    www.scs.df.gov.br (OFFLINE)

    www.sde.df.gov.br (OFFLINE)

    www.sdet.df.gov.br (OFFLINE)

    www.se.df.gov.br (OFFLINE)

    www.seade.df.gov.br (OFFLINE)

    www.seapa.df.gov.br (OFFLINE)

    www.sect.df.gov.br (OFFLINE)

    www.sedest.df.gov.br (OFFLINE)

    www.seduma.df.gov.br (OFFLINE)

    www.sehab.df.gov.br (OFFLINE)

    www.sejus.df.gov.br (OFFLINE)

    www.semarh.df.gov.br (OFFLINE)

    www.seops.df.gov.br (OFFLINE)

    www.seplag.df.gov.br (OFFLINE)

    www.setur.df.gov.br (OFFLINE)

    www.sga.df.gov.br (OFFLINE)

    www.sia.df.gov.br (OFFLINE)

    www.slu.df.gov.br (OFFLINE)

    www.so.df.gov.br (OFFLINE)

    www.sobradinho.df.gov.br (OFFLINE)

    www.sobradinhoii.df.gov.br (OFFLINE)

    www.ssp.df.gov.br (OFFLINE)

    www.st.df.gov.br (OFFLINE)

    www.sudoeste.df.gov.br (OFFLINE)

    www.taguatinga.df.gov.br (OFFLINE)

    www.tcb.df.gov.br (OFFLINE)

    www.varjao.df.gov.br (OFFLINE)

    www.vice.df.gov.br (OFFLINE)

    www.visitbrasilia.df.gov.br (OFFLINE)

    www.vlt.df.gov.br (OFFLINE)

    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit

  • Anon Security -How to be Anonymous

     gAtO FoUnD – the Anon Security data sheet and it gives some great advise on how to be safe and Anonymous when you go online. We can all learn something by looking at some of these methods.

    -gAtO OuT 

    How

    How to secure your computer and surf fully Anonymous BLACK-HAT STYLE http://t.co/QkpF2J1V

    1) Anonymous Surfing

    Any conversation about anonymous browsing should start with Tor(The Onion Router).

    Simply visit: https://www.torproject.org/download/download-easy.html.en

    2) Anonymous Email

    It’s fun: https://www.anonymousspeech.com/default.aspx

    3) Anonymous Funding

    Bitcoin is awesome and anonymous.

    See more: http://www.weusecoins.com/

    4) Anonymous Hosting and Registration:

    Learn more here: https://www.anonymousspeech.com/anonymous_domain.aspx

    5) Anonymous Blogging

    It’s great to blog anonymously and there are several outlets for this.

    read more: http://www.problogger.net/archives/2010/07/04/anonymous-blogging-101-a-quick-and-dirty-primer/

    Ebooks SitesGeneralhttp://www.freebookspot.cchttp://doc.hackbbs.org/

    Private Search Engines: (Recommended)https://ixquick.com/

    Profile Information Websiteshttp://www.pipl.com http://www.anywho.com/http://www.zabasearch.com/

    Governments/business Web siteshttp://www.hoovers.comhttp://finance.yahoo.com http://www.sec.gov/edgar.shtml http://www.uspto.gov

    Background Checks And Other personal informationhttp://www.choisepoint.com http://www.ussearch.comhttp://www.zabasearcg.com

    Whoishttp://centralops.net/co/ http://www.betterwhois.comhttp://www.allwhois.com http://www.whois.net http://www.godaddy.com http://www.dnstools.com    Hacking WebsitesEnglishhttp://www.hackcommunity.com/

    Frenchhttp://www.deathnote55.com/http://www.newbiecontest.org/ http://hackbbs.org/index.php http://www.ouah.org/ http://www.bases-hacking.org/     ProgrammingGeneral Englishhttp://www.java2s.com/

    General French:http://www.siteduzero.com

    http://www.python-forum.org

    http://www.learnpython.org/

    General Chttp://www.cprogramming.com/

    General: C++:

    http://www.cplusplus.com/doc/tutorial/

    General Javascript:http://javascript.about.com/od/learnjavascript/a/tut00.htm

    http://www.w3schools.com/js

    General VBScripthttp://www.w3schools.com/vbscript/default.asp

    General Assemblyhttp://win32assembly.online.fr/tutorials.html

    General Html/CSS:http://www.sitepoint.com/html-css-beginners-guide/ http://www.w3schools.com/html http://www.web-source.net/html_codes_chart.htm http://www.quackit.com/

    General VB/VB.NET:VB/VB.NET:http://www.vbtutor.net/ http://www.vbforums.com/ http://www.pickatutorial.com/ http://vb.net-informations.com/ http://www.vbdotnetforums.com/ http://www.homeandlearn.co.uk/NET/vbNET.htmlhttp://extreme-vb.net http://www.startvbdotnet.com http://www.vbdotnetheaven.comhttp://www.java2s.com/Code/VB/CatalogVB.htm http://www.vbaccelerator.com/http://programmervb.wordpress.com/     General Javahttp://www.javabeginner.com/

    General PHP:http://php.net/

    Online Tools/Etc…:   SMS Senderhttp://www.freesmsbundles.com/http://www.sendmassage.com http://m.websmsonline.com/index.php http://pumpsms.com/index.php

    Fake Mailerhttp://emkei.cz/

    Javascript Debugger/Testerhttp://jslint.com/ http://jsbin.com

    Online Admin Page Finderhttp://sc0rpion.ir/af/

    Online MD5 Hash Crackerhttp://md5.Gromweb.commd5.HashCracking.com

    Anonymous/Disposable emails : http://www.yopmail.com http://www.email-wgwerf.de/wegwerfemail-liste.html

    Virus Online scannerhttp://onlinelinkscan.com/

     

     

    TOR
    Anchor
    HotSpot Shield
    VPN Reactor
    Best Free VPN
    ProXPN
    Hide My IP

    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit

  • Middle East CyberWar has Begun

    gAtO tHiNkInG – a nineteen (19) year old kid named oxOmar has started a cyber war between Israel and Saudi Arabia. oxOmar and his pals from the group-xp a Saudi Arabian hacker team posted on a hacker posting site thousand of Israeli credit cards. A few day later an Israeli named 0xOmer countered by posting Saudi credit cards. This all started about the 6 of January, Today 16 days into the new year we have the Tel Aviv Stock Exchange and El Al Israel’s national airline their websites hacked (dDoS).

    In the muslin world a new cyber empowerment has been born, with it’s history last year of the Arab Spring the ruling parties are worried now about the power of cyberspace. Every country is face with empowering it’s people with the technology they want knowing that these new communication tools can bring down their regimes. The more they continue building their digital infrastructure they become more vulnerable to cyber attacks themselves.

    a 19 year old kid starts a cyber war – It’s a cyber catch 22.

    Israel has great offensive cyber weapons like “Stuxnet and DuQu virus” which are the new cyber weapon framework of covert and overt attacks. These new cyber weapons are like drone airplanes inside an enemies computer system. Uploading new attack vectors as it learns and communicates with it’s command and control centers were the generals use it in tactical operation. But Israel has no real defensive cyber walls because it’s an open free society.

    The cyber tensions in the middle east have escalated with America and Israel joining together and going after Iran and Syria in cyberspace with probes and attacks. Iran is currently building a cyber fortress to keep everyone in and keep everyone else out. Now you add the Saudi’s our friends going after Israel our other friends. -gAtO ThInK iT’S aLl cRaZy

    Now a pro-Palestinian hacker group calling themselves “Nightmare” teamed up with Gaza Hacker Team and Anonymous to go after Israel. Meanwhile conventional groups like Hamas has become a cheerleader on the sidelines. The Israeli Defense Minister is to establish a special cyber warfare administration to support it’s country’s websites.

    What the gAtO doesn’t understand is how do children set the tone for cyber warfare in the middle east- were are the grown ups?  meanwhile back at the ranch Iran is pushing the nuclear agenda, while it play’s with oil disruption. Now people are saying these kids (oxOmar) will bring down our power supplies, our water treatment plants just to scare the population into giving them more money to do. What? Israel as well as other need to learn that the power of the internet cannot be stopped the people will find a way to get their voices heard. Countries that do not treat it’s citizens right can expect more and more hacking by kids, but wait until the grown-ups start then it’s going to be one major cluster-fuck -gAtO OuT  

    References:

    http://www.israelnationalnews.com/News/News.aspx/151713#.TxWPW5gUhnd

    Now you got people like “.oO HANNIBAL Oo.” joining in the fun:

    http://pastebin.com/yArqhA7V

     

     

    Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit



©2012 US Cyber Labs - Blog Entries (RSS) and Comments (RSS)  Raindrops Theme  
gAtO had -15096 visitors