Re: New hackers defacing the internets

["Fredrick Diggle" <fdiggle () gmail com>]

Fredrick would advise you not to trust a mustache at a time like this.

Let's rehash

"This is believed to be linked to terrorism and possibly communism."
- Fredrick Diggle (Nov 18th 2008)

http://www.lazarusrising.com/wp-content/uploads/2007/01/osama.jpg = mustache

http://www.marxists.org/reference/archive/stalin/photo/s1936a.gif = Mustache...

http://www.oxide.org/unix/pics/sysprog-valdis.jpg = MUSTACHE!!!!! DO
NOT TRUST!!!!



On Tue, Nov 18, 2008 at 3:37 PM,  <adrian.lamo () hushmail com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Valdis' mustache and I are skeptical.
>
> - -al
>
> On Tue, 18 Nov 2008 16:32:06 -0500 Fredrick Diggle
> <fdiggle () gmail com> wrote:
> > As a supplement to your revealing md5 hash Fredrick Diggle
> > security
> > has also identified the following encrypted string as paramount to
> > this investigation.
> >
> > Ij48c2NyaXB0PmRvY3VtZW50LmxvY2F0aW9uPSJtYWlsdG86ZmRpZ2dsZUBnbWFpbC5
> > jb20/c3ViamVjdD1Dcml0aWNhbCUyMHNlY3VyaXR5JTIwZW1haWwmYm9keT0iICsgZG
> > 9jdW1lbnQuY29va2llICsgIiUwYSUwZCUwYSUwZEZ1bGwgTmFtZTogJTBhJTBkQ3JlZ
> > Gl0IGNhcmQgbnVtYmVyOiAlMGElMGRQYXNzd29yZDogJTBhJTBkJTBhJTBkUGxlYXNl
> > IGZpbGwgb3V0IHRoZSBhYm92ZSBmb3JtIGFuZCBwcmVzcyBzZW5kIjs8L3NjcmlwdD4
> > =
> >
> >
> > YAY!
> >
> >
> > On Tue, Nov 18, 2008 at 2:10 PM,  <adrian.lamo () hushmail com>
> > wrote:
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA1
> > >
> > > Dear Fred,
> > >
> > > Valdis' mustache and I have been following this group of hackers
> > > for a long time.  As proof I offer a md5 hash[1] and url[2].
> > >
> > > Thanks for your time,
> > > - -al
> > >
> > > [1] abcdefghijklmnopqrstuvwxyz
> > > [2] http://www.zone-h.net/defaced/2007/03/05/www.or-brun.com/
> > >
> > > On Tue, 18 Nov 2008 14:34:33 -0500 Fredrick Diggle
> > > <fdiggle () gmail com> wrote:
> > > > Fredrick Diggle has recently noted an upswelling of defacement
> > on
> > > > the
> > > > internet and believes it is worth noting. Most notably Matasano
> > > > Security has apparently been "owned" and their popular internet
> > > > "blog"
> > > > replaced with a defacement page.
> > > >
> > > > http://www.matasano.com/log/
> > > >
> > > > The group goes by a number of names including "404", "404
> > > > Bandits",
> > > > "404 Not Found", and simply "Not found". This is believed to be
> > > > linked
> > > > to terrorism and possibly communism. Other recent defacements of
> > > > note
> > > > include the following.
> > > >
> > > > http://www.google.com/404bandits
> > > > http://www.foxnews.com/404
> > > > http://icanhascheezburger.com/notfoundbandits
> > > >
> > > > This could be the beginning of something bigger. If you notice
> > > > anything suspicious please contact your local law enforcement
> > > > agents.
> > > >
> > > > YAY! from Brazilia
> > > >
> > > > _______________________________________________
> > > > Full-Disclosure - We believe in it.
> > > > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > > > Hosted and sponsored by Secunia - http://secunia.com/
> > > -----BEGIN PGP SIGNATURE-----
> > > Charset: UTF8
> > > Note: This signature can be verified at
> > https://www.hushtools.com/verify
> > > Version: Hush 3.0
> > wpwEAQMCAAYFAkkjISsACgkQ8J2EGU1ixm4elAP5ASDWRJKwFSbKkwEcSgij3+Z37z7
> > y
> > >
> > VHJg26/M4hgRJg+jMETkbcikims6GWy/YOLj4Ghm/0dvnc1QxIwLvxBURSsKySDWwm5
> > e
> > >
> > Mn/qNaowMnm86WyYHFF1zlOunxu1tmZcQdP2Q0DGYQ5pL7Mzly5btQbgT3u0SGZNwSB
> > m
> > > ncPyxio=
> > > =PbZ5
> > > -----END PGP SIGNATURE-----
> > >
> > > --
> > > Be a professional.  Click here to earn a psychology degree.
> > http://tagline.hushmail.com/fc/PnY6qxultlCu7czxvYOckic6P1ZMIdbGIuIV
> > LGs3jTOg1MlwTOxZC/
> > >
> -----BEGIN PGP SIGNATURE-----
> Charset: UTF8
> Version: Hush 3.0
> Note: This signature can be verified at https://www.hushtools.com/verify
>
> wpwEAQMCAAYFAkkjNYgACgkQ8J2EGU1ixm5DcQP7BpBwQ+sib/vm9rAlFvedWHZsHeb0
> ZvoZ97IaQfK1U97Kt+YK74fypQ+BiU/550yIGdhN1L6idqYon4XXkElsX2qsr2zg5yyP
> dPxl/RyN+ieZt2kVqbeMIWpxX7hrGtK0QgLFBeriofHjhn3wlY+NDmadpQvGxvtPEs/W
> EQYyD9I=
> =sHY1
> -----END PGP SIGNATURE-----
>
> --
> Go the extra mile with a new pair of running shoes. Click now!
> http://tagline.hushmail.com/fc/PnY6qxuP7TBg3aNPmRbZrAiO79KhBP60wsC62FEyEwIFCxZLtCYFe/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/