full-disclosure - Re: New hackers defacing the internets

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 18 Nov 2008 15:56:29 -0600
From: "Fredrick Diggle" <fdiggle@...il.com>
To: adrian.lamo@...hmail.com
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: New hackers defacing the internets

Fredrick would advise you not to trust a mustache at a time like this.

Let's rehash

"This is believed to be linked to terrorism and possibly communism."
- Fredrick Diggle (Nov 18th 2008)

http://www.lazarusrising.com/wp-content/uploads/2007/01/osama.jpg = mustache

http://www.marxists.org/reference/archive/stalin/photo/s1936a.gif = Mustache...

http://www.oxide.org/unix/pics/sysprog-valdis.jpg = MUSTACHE!!!!! DO
NOT TRUST!!!!



On Tue, Nov 18, 2008 at 3:37 PM,  <adrian.lamo@...hmail.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Valdis' mustache and I are skeptical.
>
> - -al
>
> On Tue, 18 Nov 2008 16:32:06 -0500 Fredrick Diggle
> <fdiggle@...il.com> wrote:
>>As a supplement to your revealing md5 hash Fredrick Diggle
>>security
>>has also identified the following encrypted string as paramount to
>>this investigation.
>>
>>Ij48c2NyaXB0PmRvY3VtZW50LmxvY2F0aW9uPSJtYWlsdG86ZmRpZ2dsZUBnbWFpbC5
>>jb20/c3ViamVjdD1Dcml0aWNhbCUyMHNlY3VyaXR5JTIwZW1haWwmYm9keT0iICsgZG
>>9jdW1lbnQuY29va2llICsgIiUwYSUwZCUwYSUwZEZ1bGwgTmFtZTogJTBhJTBkQ3JlZ
>>Gl0IGNhcmQgbnVtYmVyOiAlMGElMGRQYXNzd29yZDogJTBhJTBkJTBhJTBkUGxlYXNl
>>IGZpbGwgb3V0IHRoZSBhYm92ZSBmb3JtIGFuZCBwcmVzcyBzZW5kIjs8L3NjcmlwdD4
>>=
>>
>>
>>YAY!
>>
>>
>>On Tue, Nov 18, 2008 at 2:10 PM,  <adrian.lamo@...hmail.com>
>>wrote:
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA1
>>>
>>> Dear Fred,
>>>
>>> Valdis' mustache and I have been following this group of hackers
>>> for a long time.  As proof I offer a md5 hash[1] and url[2].
>>>
>>> Thanks for your time,
>>> - -al
>>>
>>> [1] abcdefghijklmnopqrstuvwxyz
>>> [2] http://www.zone-h.net/defaced/2007/03/05/www.or-brun.com/
>>>
>>> On Tue, 18 Nov 2008 14:34:33 -0500 Fredrick Diggle
>>> <fdiggle@...il.com> wrote:
>>>>Fredrick Diggle has recently noted an upswelling of defacement
>>on
>>>>the
>>>>internet and believes it is worth noting. Most notably Matasano
>>>>Security has apparently been "owned" and their popular internet
>>>>"blog"
>>>>replaced with a defacement page.
>>>>
>>>>http://www.matasano.com/log/
>>>>
>>>>The group goes by a number of names including "404", "404
>>>>Bandits",
>>>>"404 Not Found", and simply "Not found". This is believed to be
>>>>linked
>>>>to terrorism and possibly communism. Other recent defacements of
>>>>note
>>>>include the following.
>>>>
>>>>http://www.google.com/404bandits
>>>>http://www.foxnews.com/404
>>>>http://icanhascheezburger.com/notfoundbandits
>>>>
>>>>This could be the beginning of something bigger. If you notice
>>>>anything suspicious please contact your local law enforcement
>>>>agents.
>>>>
>>>>YAY! from Brazilia
>>>>
>>>>_______________________________________________
>>>>Full-Disclosure - We believe in it.
>>>>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>>>>Hosted and sponsored by Secunia - http://secunia.com/
>>> -----BEGIN PGP SIGNATURE-----
>>> Charset: UTF8
>>> Note: This signature can be verified at
>>https://www.hushtools.com/verify
>>> Version: Hush 3.0
>>>
>>>
>>wpwEAQMCAAYFAkkjISsACgkQ8J2EGU1ixm4elAP5ASDWRJKwFSbKkwEcSgij3+Z37z7
>>y
>>>
>>VHJg26/M4hgRJg+jMETkbcikims6GWy/YOLj4Ghm/0dvnc1QxIwLvxBURSsKySDWwm5
>>e
>>>
>>Mn/qNaowMnm86WyYHFF1zlOunxu1tmZcQdP2Q0DGYQ5pL7Mzly5btQbgT3u0SGZNwSB
>>m
>>> ncPyxio=
>>> =PbZ5
>>> -----END PGP SIGNATURE-----
>>>
>>> --
>>> Be a professional.  Click here to earn a psychology degree.
>>>
>>http://tagline.hushmail.com/fc/PnY6qxultlCu7czxvYOckic6P1ZMIdbGIuIV
>>LGs3jTOg1MlwTOxZC/
>>>
>>>
> -----BEGIN PGP SIGNATURE-----
> Charset: UTF8
> Version: Hush 3.0
> Note: This signature can be verified at https://www.hushtools.com/verify
>
> wpwEAQMCAAYFAkkjNYgACgkQ8J2EGU1ixm5DcQP7BpBwQ+sib/vm9rAlFvedWHZsHeb0
> ZvoZ97IaQfK1U97Kt+YK74fypQ+BiU/550yIGdhN1L6idqYon4XXkElsX2qsr2zg5yyP
> dPxl/RyN+ieZt2kVqbeMIWpxX7hrGtK0QgLFBeriofHjhn3wlY+NDmadpQvGxvtPEs/W
> EQYyD9I=
> =sHY1
> -----END PGP SIGNATURE-----
>
> --
> Go the extra mile with a new pair of running shoes. Click now!
> http://tagline.hushmail.com/fc/PnY6qxuP7TBg3aNPmRbZrAiO79KhBP60wsC62FEyEwIFCxZLtCYFe/
>
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/