Live data from Hacker News

Hacking Team hacked, attackers claim 400GB in dumped data

csoonline.com

71–80 of 240 posts

Re: Hacking Team hacked, attackers claim 400GB in dumped data

#71
post #21

magnet link: magnet:?xt=urn:btih:51603bff88e0a1b3bad3962614978929c9d26955

I'm on windows trying to download this. qBittorent gives an error message on import, utorrent does nothing (0% metadata loaded) and transmission loads metadata to 100 % and then starts over. In the logfile it says: "[ERROR] Hacked Team: Invalid metadata entry "path"". Transmission version is 2.84 (14386). Is there anyone loading this torrent on windows?

Re: Hacking Team hacked, attackers claim 400GB in dumped data

#73
post #65

https://twitter.com/hackingteam/status/617951037954125824 "Our network security staff hard at work while 5 MB/s is transferred out of our internal network through his computer." along with presumably is a screenshot of said staff watching youtube and reading facebook.

His personal twitter got compromised as well http://i.imgur.com/OojV7zc.png Also, various content: https://github.com/hackedteam (repo with their malware source code) https://twitter.com/Viss/status/617950211239837696 http://i.imgur.com/26jLFmH.png (torrent content) http://i.imgur.com/XtVUiI8.png (torrent content) http://i.imgur.com/W4mzsHa.png (emails) http://i.imgur.com/tdAKXFD.jpg (emails) http://i.imgur.com/3ALTF…

He tweeted

> The torrent contains a virus, it's best to let the authorities examine the evidence and stop seeding and spreading false info.

Yes, the hackers fabricated 400GB of lies and please don't look at them.

Re: Hacking Team hacked, attackers claim 400GB in dumped data

#74

Damn, this hack is massive. This seems to include all their deals/financial data, the full source code to everything (including some novel things like EFI malware and possibly some Office/Flash 0days), all their mail, badges of every employee, personal screenshots/porn habits etc etc. It's not possible to get hacked harder than this.

What if it was a deliberate effort from Hacking Team itself to fake a breach, produce a torrent file to be downloaded and compromise whoever is downloading it? The size would need to be large enough that whoever trying to download it will have to stay a relatively long time.

It's very easy to spin up rTorrent on some machine not attached to you so this doesn't seem like a very good plan, especially considering the PR damage. Maybe if they managed to embed malware in some commonly trusted file format but that again doesn't seem likely since there are too many viewers, and security researchers will generally be careful.

Re: Hacking Team hacked, attackers claim 400GB in dumped data

#76
post #65

https://twitter.com/hackingteam/status/617951037954125824 "Our network security staff hard at work while 5 MB/s is transferred out of our internal network through his computer." along with presumably is a screenshot of said staff watching youtube and reading facebook.

His personal twitter got compromised as well http://i.imgur.com/OojV7zc.png Also, various content: https://github.com/hackedteam (repo with their malware source code) https://twitter.com/Viss/status/617950211239837696 http://i.imgur.com/26jLFmH.png (torrent content) http://i.imgur.com/XtVUiI8.png (torrent content) http://i.imgur.com/W4mzsHa.png (emails) http://i.imgur.com/tdAKXFD.jpg (emails) http://i.imgur.com/3ALTF…

That Outlook window has a header labeled 'product activation failed'.

http://i.imgur.com/tdAKXFD.jpg

Re: Hacking Team hacked, attackers claim 400GB in dumped data

#77

Damn, this hack is massive. This seems to include all their deals/financial data, the full source code to everything (including some novel things like EFI malware and possibly some Office/Flash 0days), all their mail, badges of every employee, personal screenshots/porn habits etc etc. It's not possible to get hacked harder than this.

What if it was a deliberate effort from Hacking Team itself to fake a breach, produce a torrent file to be downloaded and compromise whoever is downloading it? The size would need to be large enough that whoever trying to download it will have to stay a relatively long time.

The massive PR hit they're taking means their company will most likely die. And "compromising" someone merely by letting one download stuff is at best a gamble, any decent infosec professional will examine this stuff with the same precautions as when analyzing malware.

Re: Hacking Team hacked, attackers claim 400GB in dumped data

#78
post #21

magnet link: magnet:?xt=urn:btih:51603bff88e0a1b3bad3962614978929c9d26955

I'm on windows trying to download this. qBittorent gives an error message on import, utorrent does nothing (0% metadata loaded) and transmission loads metadata to 100 % and then starts over. In the logfile it says: "[ERROR] Hacked Team: Invalid metadata entry "path"". Transmission version is 2.84 (14386). Is there anyone loading this torrent on windows?

Tixati on Windows, Transmission on Linux.

Re: Hacking Team hacked, attackers claim 400GB in dumped data

#79

Earlier quoted context omitted.

Looks like they're double dealing, too. Invoices to Egypt and other oppressive governments have already been found in the torrent dump. Christopher Soghoian on Twitter: "Just from Torrent File listing, Hacking Team's customers includes South Korea, Kazakhstan, Saudi Arabia, Oman, Lebanon, and Mongolia." https://mobile.twitter.com/csoghoian/status/6178628794050641... Edit - just read Christopher Soghoian's entire Twit…

I posted a link to his stream with the rest on Schneier's blog. The stream is... Hacking Team's own answer to Failblog. I only wish I had 400GB of storage handy with a good network in case it gets taken down or something. Hope people are copying the shit out of it. Note: There torrent is so big and has so much stuff that this laptop I'm using (few years old) was lagging on scrollbar with fan on full blast. Had to clo…

[deleted]
Post reply on HN