Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Equation Group Cyber Weapons Auction

theshadowbrokers.tumblr.com

Post reply on HN
Print view View original

81–90 of 151 posts

Re: Equation Group Cyber Weapons Auction

#81

Post by objclxt »

ars wrote: post #37
dadver wrote: post #12

Earlier quoted context omitted.

>Everything about this auction is lined up to incentivize a scam. Yes, however the contents of the free sample seems very real. Without having dug into the binaries it's hard to tell, but it's hard to imagine someone wrote this to scam 1 million BTC out of the net.

> Yes, however the contents of the free sample seems very real. The only people who could verify if it's real are the Equation Group themself. For anyone else it's impossible to verify - it's just some names. So: If it's real the Equation Group will bid - probably a lot. If it's fake no one will bid. So it'll be easy to tell which it is.

> If it's real the Equation Group will bid - probably a lot.

Why? You have no guarantee what you're bidding for will remain private, and you don't want to give it legitimacy by bidding. Who's to say if it's real the Equation Group wouldn't bid, under the assumption that it's already out there and you have absolutely no guarantees that anyone you're dealing with would keep their word.

Re: Equation Group Cyber Weapons Auction

#83

Post by heartsucker »

kolme wrote: post #69
heartsucker wrote: post #26

Ha. I was targeted by this auction specifically. The odd thing is whoever is behind this went through the trouble of posting it to the SecureDrop instance behind BerlinLeaks. https://heartsucker.com/blog/children-at-play

Whoever wrote this possibly "made" all the mistakes on purpose, not to be fingerprinted by its writing style (it's a common technique). I wonder if software already exists for this, like, purposely filling a text with random mistakes so that the identity of the writer is safe.

> The message we got was full of both types of errors, and it was either written by someone who wasn't a native English speaker, or it was cleverly crafted to sound so.

Yes, I acknowledged this but for a different reason.

Re: Equation Group Cyber Weapons Auction

#84

Post by justindocanto »

jfktrey wrote: post #19
VMG wrote: post #16

Earlier quoted context omitted.

> Everything about this auction is lined up to incentivize a scam. Actually if they could tie their identity to some positive reputation, the other points wouldn't be so bad (they could still attempt an exit scam). The fact that they are so honest about the refunds actually makes me think it's not a scam, since scammers would probably lie and promise the opposite.

That's what they want you to think.

If somebody tells you "you are not getting you're money back", I think that no longer makes it a scam. You know exactly what you are getting into at that point.

Re: Equation Group Cyber Weapons Auction

#85

Post by corford »

tedmiston wrote: post #60

Does anyone expect GitHub to intervene as the (partial) host here? Does this put them in a legal situation?

Looks like they've already intervened:

"This repository has been disabled.

Access to this repository has been disabled by GitHub staff. Contact support to restore access to this repository. "

Re: Equation Group Cyber Weapons Auction

#86

Post by objclxt »

tedmiston wrote: post #60

Does anyone expect GitHub to intervene as the (partial) host here? Does this put them in a legal situation?

> Does this put them in a legal situation?

Not really. GitHub aren't liable for the initial upload due to safe harbor laws. If the dump is fake, then there's no problem for GitHub. Life goes on.

If the dump is real then potentially the owner could force GitHub to remove it, but in doing so would have proven the legitimacy of those files, which is something you don't usually want to do.

GitHub may, of course, choose to suspend the account for their own reasons (I don't know, for example, what their T&Cs are for running auctions via their site, but it's probably not allowed).

Re: Equation Group Cyber Weapons Auction

#89

Post by acveilleux »

tedmiston wrote: post #51
JosephRedfern wrote: post #38

Earlier quoted context omitted.

That's 6.3% of all Bitcoin currently in circulation. A crazy amount.

1,000,000 Bitcoin == 563,770,000.00 USD https://www.google.com/search?q=1000000+btc+in+usd

Sort of... When trading that large a fraction of the whole pool of BTC, the trade itself would drastically alter the value of a BTC. To the point that I'd be surprised if someone could openly acquire that large number of BTCs before being priced out of the market.

The block chain makes it worse because everyone can see the progress of the buyer and there's no market maker with anywhere near this level of liquidity.

Re: Equation Group Cyber Weapons Auction

#90

Post by NickSharp »

binarymax wrote: post #87

Github just killed it. I managed to read it but refreshed and it was gone. Anyone have a grab and want to post the text? --EDIT-- From heartsuckers thread, the README text is also here: https://heartsucker.com/static/docs/shadow-broker-message.tx...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

From:

bitmessage = BM-NBvAHfp5Y6wBykgbirVLndZtEFCYGht8 i2p-bote = o1uHOkOcMoFEa7O7dbEilzfMvWzo7bDu~td3x9gYz4b4t5OriJ7U6GUWr5GZoWxQ9f2TrIY5RzhpIMVP6hTLXZ

Equation Group Cyber Weapons Auction - Invitation - ------------------------------------------------

!!! Attention government sponsors of cyber warfare and those who profit from it !!!!

How much you pay for enemies cyber weapons? Not malware you find in networks. Both sides, RAT + LP, full state sponsor tool set? We find cyber weapons made by creators of stuxnet, duqu, flame. Kaspersky calls Equation Group. We follow Equation Group traffic. We find Equation Group source range. We hack Equation Group. We find many many Equation Group cyber weapons. You see pictures. We give you some Equation Group files free, you see. This is good proof no? You enjoy!!! You break many things. You find many intrusions. You write many words. But not all, we are auction the best files.

Picture Urls - ------------ http://imgur.com/a/sYpyn https://theshadowbrokers.tumblr.com/ https://github.com/theshadowbrokers/EQGRP-AUCTION

File Urls - ----------

magnet:?xt=urn:btih:40a5f1514514fb67943f137f7fde0a7b5e991f76&tr=http://diftracker.i2p/announce.php

https://mega.nz/#!zEAU1AQL!oWJ63n-D6lCuCQ4AY0Cv_405hX8kn7MEs... https://app.box.com/s/amgkpu1d9ttijyeyw2m4lso3egb4sola https://www.dropbox.com/s/g8kvfl4xtj2vr24/EQGRP-Auction-File... https://ln.sync.com/dl/5bd1916d0#eet5ufvg-tjijei4j-vtadjk6b-... https://yadi.sk/d/QY6smCgTtoNz6

Free Files (Proof) - ------------------ eqgrp-free-file.tar.xz.gpg

sha256sum = b5961eee7cb3eca209b92436ed7bdd74e025bf615b90c408829156d128c7a169

gpg --decrypt --output eqgrp-free-file.tar.xz eqgrp-free-file.tar.xz.gpg

Password = theequationgroup

Auction Files - ------------- eqgrp_auction_file.tar.xz.asc

sha256sum = af1dabd8eceec79409742cc9d9a20b9651058bbb8d2ce60a0edcfa568d91dbea

Password = ????

Auction Instructions - -------------------- We auction best files to highest bidder. Auction files better than stuxnet. Auction files better than free files we already give you. The party which sends most bitcoins to address: 19BY2XCgbDe6WtTVbTyzM9eR3LYr6VitWK before bidding stops is winner, we tell how to decrypt. Very important!!! When you send bitcoin you add additional output to transaction. You add OP_Return output. In Op_Return output you put your (bidder) contact info. We suggest use bitmessage or I2P-bote email address. No other information will be disclosed by us publicly. Do not believe unsigned messages. We will contact winner with decryption instructions. Winner can do with files as they please, we not release files to public.

FAQ - --- Q: Why I want auction files, why send bitcoin? A: If you like free files (proof), you send bitcoin. If you want know your networks hacked, you send bitcoin. If you want hack networks as like equation group, you send bitcoin. If you want reverse, write many words, make big name for self, get many customers, you send bitcoin. If want to know what we take, you send bitcoin.

Q: What is in auction files? A: Is secret. Equation Group not know what lost. We want Equation Group to bid so we keep secret. You bid against Equation Group, win and find out or bid pump price up, piss them off, everyone wins.

Q: What if bid and no win, get bitcoins back? A: Sorry lose bidding war lose bitcoin and files. Lose Lose. Bid to win! But maybe not total loss. Instead to losers we give consolation prize. If our auction raises 1,000,000 (million) btc total, then we dump more Equation Group files, same quality, unencrypted, for free, to everyone.

Q: When does auction end? A: Unknown. When we feel is time to end. Keep bidding until we announce winner.

Q: Why I trust you? A: No trust, risk. You like reward, you take risk, maybe win, maybe not, no guarantees. There could be hack, steal, jail, dead, or war tomorrow. You worry more, protect self from other bidders, trolls, and haters.

Closing Remarks - --------------------------------------------------

!!! Attention Wealthy Elites !!!

We have final message for "Wealthy Elites". We know what is wealthy but what is Elites? Elites is making laws protect self and friends, lie and fuck other peoples. Elites is breaking laws, regular peoples go to jail, life ruin, family ruin, but not Elites. Elites is breaking laws, many peoples know Elites guilty, Elites call top friends at law enforcement and government agencies, offer bribes, make promise future handjobs, (but no blowjobs). Elites top friends announce, no law broken, no crime commit. Reporters (not call journalist) make living say write only nice things about Elites, convince dumb cattle, is just politics, everything is awesome, check out our ads and our prostitutes. Then Elites runs for president. Why run for president when already control country like dictatorship? What this have do with fun Cyber Weapons Auction? We want make sure Wealthy Elite recognizes the danger cyber weapons, this message, our auction, poses to their wealth and control. Let us spell out for Elites. Your wealth and control depends on electronic data. You see what "Equation Group" can do. You see what cryptolockers and stuxnet can do. You see free files we give for free. You see attacks on banks and SWIFT in news. Maybe there is Equation Group version of cryptolocker+stuxnet for banks and financial systems? If Equation Group lose control of cyber weapons, who else lose or find cyber weapons? If electronic data go bye bye where leave Wealthy Elites? Maybe with dumb cattle? "Do you feel in charge?" Wealthy Elites, you send bitcoins, you bid in auction, maybe big advantage for you?

bitmessage = BM-NBvAHfp5Y6wBykgbirVLndZtEFCYGht8 i2p-bote = o1uHOkOcMoFEa7O7dbEilzfMvWzo7bDu~td3x9gYz4b4t5OriJ7U6GUWr5GZoWxQ9f2TrIY5RzhpIMVP6hTLXZ

END MESSAGE

-----BEGIN PGP SIGNATURE----- Version: GnuPG v2

iQIcBAEBCAAGBQJXrr2sAAoJEAQSTyzLXAwbVzwP/jR5sQcS8VzH2jmuRjbE6RLV P3RkY6RWyyTyCtTiyTXK4RtWQoz8CfEjnXdIaR3BIZG4u827iI2fbQMVlWu0jMn4 NYN1I/neBoDaagApRgGQqYXip3IdHsqJennOAxRqr0ZoOgJ3IVtiZK8/6vtEnXRK 03IJvKu0zOVROuP0a9OPX0jko2g3Rl2tvo1ljkU1bqLKHs6xb1VzmdoqlAOYR1Bv 4Kb/Gbr6uc5fG84sM8FzSdiyJgS3U21SqfUENyFLyyP05iCyKCybFMne1JckFre8 gI/nUhdRHJaETYorY49PTQvdBaD30aT1I7efyAAM9uxsF97Au/UEvk0hkzh0YfoR /m+htNKlaP/oclL5GhJEq2O4wWb1KJuyrHU3FZYdUWRA4SlELBb0oR64cw/8kDo+ 6WftSANdlolgQLMbng2/ORGTeXHQ033mX6Op93o2oZUuNNhHvR1PnhWPUA2vMcIs ndo6YuYV2TZR/4GVNiJYQhTcWVNZ7a10FuvWk7yyHkTKXRVHG43G5Rzzm9ZxMUcL DMAExiPnrehGYTcxrrOP28RB+Mw7Is5YwRpc/h0mwDYGijjUzXGLXPWKFLa8ksxR zdaUnAjJzhVwR4IVGmGlU687Ox0FayJz9LAhst5eiittciY0iooz8YLee8hrxD7C XqUIpr4n+QKMYs4AfWd+ =5yni -----END PGP SIGNATURE-----

Post reply on HN