Earlier quoted context omitted.
> Coelho landed on the radar of U.S. authorities in June 2018, when he tried to enter the United States at the Hartsfield-Jackson International Airport in Atlanta. The government obtained a warrant to search the electronic devices Coelho had in his luggage and found text messages, files and emails showing he was the RaidForums administrator Omnipotent I called complete, total and utter bullshit. That's a parallel con…
I think you may have just read the timeline of events incorrectly as what was said makes perfect sense? This was a multi-country investigation. The USA were likely already aware of Coelho so when he entered the US, he was then arrested by US authorities upon landing. It doesn't say his devices were searched there and then. It said a warrant was obtained to search his device, so they would needed to have a valid reaso…
RaidForums gets raided, alleged admin arrested
81–90 of 197 posts
Re: RaidForums gets raided, alleged admin arrested
#82Asking for a friend, of course...
Re: RaidForums gets raided, alleged admin arrested
#83Earlier quoted context omitted.
Not to mention the following paragraph: >“In an attempt to retrieve his items, Coelho called the lead FBI case agent on or around August 2, 2018, and used the email address unrivalled@pm.me to email the agent,” the government’s affidavit states. Investigators found this same address was used to register rf.ws and raid.lol, which Omnipotent announced on the forum would serve as alternative domain names for RaidForums…
> These people tend not to be the brightest. If they were, they'd generally find legitimate employment, A bit of survivorship bias at work here. Criminal activity is more so a function of risk tolerance than intelligence. However getting caught is certainly a function of intelligence. So your impression is that most criminals you read about being apprehended are people that seem to make many stupid mistakes. But this…
Re: RaidForums gets raided, alleged admin arrested
#84Earlier quoted context omitted.
Not to mention the following paragraph: >“In an attempt to retrieve his items, Coelho called the lead FBI case agent on or around August 2, 2018, and used the email address unrivalled@pm.me to email the agent,” the government’s affidavit states. Investigators found this same address was used to register rf.ws and raid.lol, which Omnipotent announced on the forum would serve as alternative domain names for RaidForums…
I'm not so sure about it. Did you listen to the interview of Lex Fridman with Brett Johnson? He seems like an intelligent person who could easily get an infosec job and be extremely good at it from UX/social engineering point of view, but he was socialized from being a kid to disregard authority and steal from other people in every possible way. I'm sure he wouldn't let Coinbase get away with SMS 2nd factor authentic…
Be very careful about taking infosec celebrities at face value.
Social engineering is and always has been a core feature of black hat activities. When these people graduate from criminal activities to being keynote speakers and consultants, they take their social engineering skills and use them to build a personal brand.
In other words: You were getting socially engineered through that podcast. Building an aura around himself is his business now ( https://www.anglerphish.com/speaking-consulting ).
His story is interesting and you can't deny that he's become a great storyteller. But even he admitted that he wasn't the strongest on the technical side of things.
Re: RaidForums gets raided, alleged admin arrested
#85Interesting tweet here[0] saying the site was used to phish credentials since late February this year. Also, who was hosting these guys? I remember in early 2000s (back when milw0rm was a thing) - a lot of sites like this struggled to stay online because nobody wanted to host them. Anyways, that's a pretty stupid way to go out. And, not just because he is at fault or whatever, it sounds like they turned that site int…
Epik?
Re: RaidForums gets raided, alleged admin arrested
#86Re: RaidForums gets raided, alleged admin arrested
#87Earlier quoted context omitted.
I don't care about the US perspective, I care about his perspective, and for the life of me I can't imagine someone so incredibly convinced of their own ability to hide their tracks that they'd be involved in a multi-year effort like that and think it's smart to go visit the United States. It's not like that would be the first time someone got arrested on entry. If it can happen to the CEO of a large multinational it…
He was running one of the most 'successful' illegal forums for what 7 years? When you get away with something for so long, especially in an 'industry' where you know every law enforcement in the world is after you, I can see why you would easily think you're invincible and never getting caught. He was incredibly convinced of his own ability to hide his tracks because technically up to that point, his ability to hide…
The indictment documents a pretty lengthy sting operation.
Re: RaidForums gets raided, alleged admin arrested
#88Earlier quoted context omitted.
He knew what he was doing was illegal. You don't go through all the steps he did to stop authorities taking down the website without knowing what you're doing is illegal.
What steps were those? How are they distinguishable from the steps you would take to protect your website from being taken down because of abuse reports from upset people? Trading in hacked data might not be illegal unless it’s credit card information, but your average hosting provider probably isn’t going to care about such nuances.
Dangerous nonsense. Trafficking in stolen data is illegal, please read the full indictment.
Re: RaidForums gets raided, alleged admin arrested
#89Earlier quoted context omitted.
Indeed. But that doesn't really matter in the eyes of the law, he's no longer a minor. If he had been a bit more clever he would have stopped doing any of that the day he turned 18.
It is not about law enforcement either. It's about debating whether he's the sharpest tool in the shed or not. I contend that running such a criminal enterprise is no easy feat for a teenager despite the rookie mistakes he committed.
Re: RaidForums gets raided, alleged admin arrested
#90What are the legal implications of having registered on this forum once with a personal email account but not having ever engaged in any transaction or downloading any leaked data, just lurking a few threads of nothing interesting at most. Asking for a friend, of course...
Such lists can be queried by those that are properly connected, typically LE/three (and in some countries four) letter agencies if your name ever turns up in some other context and then it might be given some weight, but other than that I wouldn't expect anything to come of it assuming that you are telling the truth. Such inter-service requests for information on particular individuals are pretty regular but someone first has to ask for you by name, and in a country with proper privacy protections typically a judge would have to sign off on such a broad request, but these mechanisms are not always perfect.
Reading threads isn't a crime, but hanging out in places where lots of criminals hang out doesn't help you in the association department.