RaidForums gets raided, alleged admin arrested
krebsonsecurity.com
RaidForums gets raided, alleged admin arrested
1–10 of 197 posts
Re: RaidForums gets raided, alleged admin arrested
#2"Coelho landed on the radar of U.S. authorities in June 2018, when he tried to enter the United States at the Hartsfield-Jackson International Airport in Atlanta. The government obtained a warrant to search the electronic devices Coelho had in his luggage and found text messages, files and emails showing he was the RaidForums administrator Omnipotent."
Not really the sharpest knife in the drawer, to do things like this and then to go holidaying in the USA with incriminating stuff on your person...
Story time:
A guy I met who did stuff that may have come to the attention of US authorities was on a plane that got diverted to the USA for a medical emergency. The guy obviously got very upset and needed to go to the bathroom, urgently, on the way there he spotted a mate of his. They didn't like each other much but got to talk for a while and they both agreed that this was the end of the line. They both expected to be arrested upon landing because the passenger manifest was shared with the US authorities because of the overflight. The one remarked to the other: 'spending the rest of my life in jail is bad enough, but now I'm going to have to spend it with you and that is so much worse'.
The person who had the medical emergency was taken off the plane to go to hospital, the flight continued on its way, no disembarkation, no checks, nothing.
Re: RaidForums gets raided, alleged admin arrested
#3"Coelho landed on the radar of U.S. authorities in June 2018, when he tried to enter the United States at the Hartsfield-Jackson International Airport in Atlanta. The government obtained a warrant to search the electronic devices Coelho had in his luggage and found text messages, files and emails showing he was the RaidForums administrator Omnipotent." Not really the sharpest knife in the drawer, to do things like th…
Not to mention the following paragraph:
>“In an attempt to retrieve his items, Coelho called the lead FBI case agent on or around August 2, 2018, and used the email address unrivalled@pm.me to email the agent,” the government’s affidavit states. Investigators found this same address was used to register rf.ws and raid.lol, which Omnipotent announced on the forum would serve as alternative domain names for RaidForums in case the site’s primary domain was seized.
I'm not surprised at all, though. These people tend not to be the brightest. If they were, they'd generally find legitimate employment, where they can still make very good money while also not constantly fearing arrest and imprisonment. Most of the people who operate and use these sites often don't have the ability to get even an entry-level infosec job.
Re: RaidForums gets raided, alleged admin arrested
#4"Coelho landed on the radar of U.S. authorities in June 2018, when he tried to enter the United States at the Hartsfield-Jackson International Airport in Atlanta. The government obtained a warrant to search the electronic devices Coelho had in his luggage and found text messages, files and emails showing he was the RaidForums administrator Omnipotent." Not really the sharpest knife in the drawer, to do things like th…
Not to mention the following paragraph: >“In an attempt to retrieve his items, Coelho called the lead FBI case agent on or around August 2, 2018, and used the email address unrivalled@pm.me to email the agent,” the government’s affidavit states. Investigators found this same address was used to register rf.ws and raid.lol, which Omnipotent announced on the forum would serve as alternative domain names for RaidForums…
There was a big thread there of people trying to hack the EU-DCC using a leaked "signing key". The key was one of the example keys I've been giving non-technical people who are working on it and want to run the software locally.
It was the blind leading the blind but a lot of fun to watch.
Re: RaidForums gets raided, alleged admin arrested
#5I wish the DOJ had a better designer for their domain seizure graphics.
Re: RaidForums gets raided, alleged admin arrested
#6Interesting tweet here[0] saying the site was used to phish credentials since late February this year.
Also, who was hosting these guys? I remember in early 2000s (back when milw0rm was a thing) - a lot of sites like this struggled to stay online because nobody wanted to host them.
Anyways, that's a pretty stupid way to go out. And, not just because he is at fault or whatever, it sounds like they turned that site into a capitalist enterprise and that's going to hurt more than the fact that he engaged in illegal activity in the first place.
[0]: https://twitter.com/NatSecGeek/status/1513875386395987968
Re: RaidForums gets raided, alleged admin arrested
#7I wish the DOJ had a better designer for their domain seizure graphics.
It's meant to be as garish as possible. It's the modern day equivalent of a branding iron. You got pwned!
Re: RaidForums gets raided, alleged admin arrested
#8"Coelho landed on the radar of U.S. authorities in June 2018, when he tried to enter the United States at the Hartsfield-Jackson International Airport in Atlanta. The government obtained a warrant to search the electronic devices Coelho had in his luggage and found text messages, files and emails showing he was the RaidForums administrator Omnipotent." Not really the sharpest knife in the drawer, to do things like th…
Sounds like he was already on their radar if they were able/desired to obtain a warrant to search his devices.
Re: RaidForums gets raided, alleged admin arrested
#9"Coelho landed on the radar of U.S. authorities in June 2018, when he tried to enter the United States at the Hartsfield-Jackson International Airport in Atlanta. The government obtained a warrant to search the electronic devices Coelho had in his luggage and found text messages, files and emails showing he was the RaidForums administrator Omnipotent." Not really the sharpest knife in the drawer, to do things like th…
Sounds like he was already on their radar if they were able/desired to obtain a warrant to search his devices.
...or even just spent the time to do it. But, not too surprising that they don't want to divulge everything that led them to him.
Re: RaidForums gets raided, alleged admin arrested
#10I wish the DOJ had a better designer for their domain seizure graphics.
I enjoy how they incorporate the logo of the seized site on their notice.