Wrestling Forum banner
1 - 15 of 15 Posts

· Registered
Joined
·
3,535 Posts
Discussion Starter · #1 ·
Just over week after a hacker breached a United Arab Emirates Bank, demanding a $3 million ransom to stop tweeting customers' information, he appears to have dumped tens of thousands of customer files online. The actual data appears to be real. And it's vast. One database analyzed by the Daily Dot includes the sensitive information of around 40,000 customers, including their full names, credit card numbers, and birthdays. One account contained 4,7174,962.38 dirham, or $12,844,589.77. Those accounts' total earnings add up to $110,736,002. One bank executive confirmed the hack to Farooqui, adding that, "This is blackmail."





Story:
http://www.dailydot.com/politics/invest-bank-hacker-buba/



many already laundering through steam/itunes/google/amazon/mmorpg key codes until the credit cards are cancelled.
 

· Registered
Joined
·
9,824 Posts
I wonder how many that are abusing this for their own gain are stupid enough to use their personal accounts. Because once the law gets involved this could come back to bite them in the arse.
 

· Premium Member
Joined
·
6,285 Posts
With those kind of account balances can bet whatever happened after the leak was easily handled and Bank's protected any misuse. After all that dude attempted all that will happen is a failed ransom attempt and Banks enacting Insurance clauses to bail out any account abuse from outsiders.
 

· Registered
Joined
·
3,535 Posts
Discussion Starter · #6 ·
Is there any reason at all for his actions?

maybe a "hacktivist" that's the popular thing nowdays.

It's possible this guy is a script kiddie, and used other real hacker's tools. If so the ransom thing may have been legit, but when he dumped some data before the bank could respond they werent gonna pay that.

there's a google plus with this guy's m.o. and with broken english asking about facebook hack tool. broken english could be red herring as well. but it "sounds" similar.

all sites seem to be stressing ransom. But unless it's really a script kiddie then it was just to fuck with that bank/country/people/etc.





Pastebin is a good place to find occasional "i did it" / "tits or gtfo" / "see proof" / "shopped!" / etc type back and forths over anonymous copy/paste. And for the curious who wish to datamine for little nuggets and have a little fun off other people's work.

[hide=1000]
here's one of those 1 sides convos from while back

his last explains targeting Iran, you are seeing 1 side of the convo. This was 2 hackers from 2 opposing countries duking it out globally :p
Loooooong story about these guys, but it's the "oh them again" types when mentioned in places. Smart in some ways, they read security updates, and server patches, etc, gotta keep current, but in other ways, well, you'll see when ya read. it's smart folks acting like kids.
http://pastebin.com/u/ComodoHacker

most use Tor then post here or use the pastebin version on Tor itself
like a recent brag
http://pastebin.com/fPyLPAwM
need rainbow tables and "john the ripper" to extract goodies :p
http://pastebin.com/qkE1cn4F
ikea
http://pastebin.com/uKaiyk6E

using "operators" when searching or boolean operators you can get in deep to stuff not easily found, and this is just normal web finds. If lucky there's been netflix, wwe network, facebook, web admin, users, paypal, ebay, whatever you can think of gets dumped. Some guy's pc gets virus'd up and he has passwords saved in a password "master application" or in a text file to not forget well it's got, and the info dumped. And there's a regular bunch of porn site hackers, they just get user/pass and not screw with site haha.

The brags are to get renown and a reputation on that nickname. Yes it's like the cheesy part of "hackers" movie. they know your elite by the pseudonym. And if busted but out fast, you're a snitch, a hacker working for feds.

I don't want to post anymore from there, pm me or, you can use google tricks to search the site on google search bar, type:
Code:
site:pastebin.com +searchterm
[/hide]


Here's an old Hactivist to read up. This gives you idea why certain things get targeted by the mass.


A fun read about hactivists vs scientology: When every group of varying skills come together, and several sites kinda linked indirectly but it becomes "Anonymous" sometimes they work together, but only when things kinda "just happen" organically.

here's the "lulz" troll edition with links (use adblock):
Yes ED writing is all like that, but you can get some hilarious shit there and a better idea of how the thinking or how something actually occured:
https://encyclopediadramatica.se/PROJECT_CHANOLOGY
goofy: https://encyclopediadramatica.se/Rules_of_the_Chanology

Wikipedia article on it: https://en.wikipedia.org/wiki/Project_Chanology
Mainstream: http://www.theguardian.com/technology/2008/feb/04/news
old site: http://anonstillalive.com/wp/scientology/
Vice news covered the declaration: http://motherboard.vice.com/blog/the-video-that-made-anonymous

Here's the original video from 7 years ago when that got the media's attention, and attacks went back and forth between anon and church. anon sorta won, dumping thousands of dollars of "tech" or religious teaching to wikileaks. Even south park joined in.

video 7 years ago "shots fired": https://www.youtube.com/watch?v=JCbKv9yiLiQ

that vid started it. And it led to members leaving, celebs doxxed, the whole travolta scandal, docs proving Cruise's wife was not picked by him, but by church, there was a prior woman but she got in trouble with church just before set to marry Tom.
all that got leaked, ex leaders left
then the HBO doc released
So it'd say they pretty much won. :)

but there were 'collateral damage' folks private info, credit cards, passwords etc. several years of constant barrage.




For splinter groups of anon.

this one screwed up got arrested and "leader" turned snitch

final tweet: https://twitter.com/lulzsec
Wikipedia: https://en.wikipedia.org/wiki/LulzSec
real scoop from ED: https://encyclopediadramatica.se/LulzSec

they took down cia, fbi, sony, etc. lot of ddos attacks at first, then actual data dumps. leader got busted, turned snitch and down went the ship :p

Here's the Lulzsec final message: https://www.youtube.com/watch?v=xJYhPrbtqug

before becoming snitch.
 

· Premium Member
Joined
·
9,943 Posts
many already laundering through steam/itunes/google/amazon/mmorpg key codes until the credit cards are cancelled.

No different than looting a store during a riot.
Actually worse because those cards are still tied to their owners and it's racking up debt for them if they haven't cancelled them (and not all will).

I wonder how many that are abusing this for their own gain are stupid enough to use their personal accounts. Because once the law gets involved this could come back to bite them in the arse.
I hope they are all outed for their sheer stupidity.
 

· Registered
Joined
·
3,535 Posts
Discussion Starter · #8 ·
No different than looting a store during a riot.
Actually worse because those cards are still tied to their owners and it's racking up debt for them if they haven't cancelled them (and not all will).



I hope they are all outed for their sheer stupidity.

nope, customer's aren't liable for the debt. Insurance will cover most card companies.


I own a credit card.


https://www.capitalone.com/identity-protection/security/
Remember, you are covered by:

$0 Fraud Liability policy – If your Capital One Credit Card is lost or stolen and used without your authorization, you will not be liable for those charges.
Zero Liability* – When you use your Capital One Platinum Debit Card, you pay only for those purchases which you have authorized.

Most are exactly like this. While some cards are only $50 liability.

I think Discover and AMEX you have up to $50 liability if card illegally used. all fraud charges will be erased. and they eat it, via insurance or recapturing lost funds.
 

· Premium Member
Joined
·
39,714 Posts
With those kind of account balances can bet whatever happened after the leak was easily handled and Bank's protected any misuse. After all that dude attempted all that will happen is a failed ransom attempt and Banks enacting Insurance clauses to bail out any account abuse from outsiders.
If the bank was smart the minute the ransom was asked for, all the account numbers should have been changed on every account in the bank.
 

· Premium Member
Joined
·
39,714 Posts
nope, customer's aren't liable for the debt. Insurance will cover most card companies.


I own a credit card.


https://www.capitalone.com/identity-protection/security/



Most are exactly like this. While some cards are only $50 liability.

I think Discover and AMEX you have up to $50 liability if card illegally used. all fraud charges will be erased. and they eat it, via insurance or recapturing lost funds.
I spent $1500 on my credit card one time online, and my CC called me to make sure I made that purchase to protect me from fraud. It was probably within 15 minutes of me checking out online. That is to cover me and also cover them, so if I didnt authorize that, they could have stopped the payment and the order would have been canceled before it was even fully processed and shipped out
 

· Registered
Joined
·
3,535 Posts
Discussion Starter · #12 ·
I spent $1500 on my credit card one time online, and my CC called me to make sure I made that purchase to protect me from fraud. It was probably within 15 minutes of me checking out online. That is to cover me and also cover them, so if I didnt authorize that, they could have stopped the payment and the order would have been canceled before it was even fully processed and shipped out
yea, I've got my card set to notify me every single authorization, and I have a set amount to call me, do not authorize.

my bank debit card is set to not authorize on any purchase outside my state.



So most the dump is likely useless, but there were bank accounts logins dumped as well from the article. Those could be used for EFT, transfers and stuff.

But if ya have say 10,000 cards, and you run a bot, you can set up a bot to use all 10,000 cards to purchase 1 timecode, or steam key each, if decline skip go to next.

come back later, if ya got 1000 or 10 or nothing well you didn't gain or lose anything.

but then ya dump them on ebay and since it's just key codes as long as you were smart, you could get some cash.


There's been hacked cash given away online to freak streamers out.


here's a video of random GIANT donations to twitch streamers who for some reason they met the anonymous guy's requirement for a really really nice day.

Some hackers are "pseudo nice guys"
https://www.youtube.com/watch?v=SbRtcVrxVH0
donations of $1000 up to insane amounts


here's a good one
https://www.youtube.com/watch?v=SAsaH47ZLDk
2 people were dumped $100,000 dollars donation.
"when ya have to get rid of it, you can't use it, or maybe they can't find a way to get it back to them personally without a paper trail getting them in trouble. So they give people near heart attacks on twitch"
 

· Premium Member
Joined
·
6,285 Posts
If the bank was smart the minute the ransom was asked for, all the account numbers should have been changed on every account in the bank.
Yeah totally, bank's will check for verification first by calling and if that fails they will freeze all account activity and replace with a new card while also being able to provide cops with any tracking of purchase attempts if going for a fraud case.
 
  • Like
Reactions: Pronoss

· From parts unknown
Joined
·
34,156 Posts
I've lost my bank card twice and all I've had to do to cancel anything on it is remember the last transaction which is not that hard to remember.

Plus big balances, big banks = even better service.

This has probably already been taken care of without a single loss penny lost.

It probably ended up costing this asshole and other tax payers money for the law to get involved into fixing this shit if anything.
 

· Premium Member
Joined
·
9,943 Posts
nope, customer's aren't liable for the debt. Insurance will cover most card companies.

I own a credit card.
https://www.capitalone.com/identity-protection/security/
Yes, I own several as well but the fraud alerts aren't foolproof.
Now in this case, maybe they will put it all together because the breached list is out but fraud detection doesn't automatically go off unless it's really weird stuff.

How do they know you aren't buying all sorts of shit of Steam instead of someone else? They really don't unless you call them.

Fraud detection works best if someone makes a clone of your card and uses it out of state. That one actually happened to me and they put a stop to it. I've made legit purchases where they could look like fraud because of repeat high amounts and the detector never went off.

All I'm saying is it's not always 100% foolproof, this will take longer than it should to sort out, and these cyber looters are scum.
 
1 - 15 of 15 Posts
This is an older thread, you may not receive a response, and could be reviving an old thread. Please consider creating a new thread.
Top