{"id":298,"date":"2011-06-26T10:00:00","date_gmt":"2011-06-26T10:00:00","guid":{"rendered":"https:\/\/blog.alexanderhiggins.com\/?p=298"},"modified":"2024-04-24T14:16:27","modified_gmt":"2024-04-24T14:16:27","slug":"ateam-hacker-group-leaks-alleged-identities-lulzsec-anonymous-hacker-group-members-31251","status":"publish","type":"post","link":"https:\/\/blog.alexanderhiggins.com\/uncategorized\/ateam-hacker-group-leaks-alleged-identities-lulzsec-anonymous-hacker-group-members-31251\/","title":{"rendered":"A-Team Hacker Group Leaks Alleged Identities Of 10 LulzSec And Anonymous Members"},"content":{"rendered":"
\n
\n<\/p>\n
\n
\n<\/div>\n<\/div>\n
<\/div>\n

<\/p>\n


\n
\n
\n<\/p>\n

\n<\/div>\n
\n<\/div>\n

A hacker group known as the A-Team claims to have discovered the identity of all members of the LulzSec Hacker group, releasing identifying information on 10 members of the LulzSec and Anonymous.<\/h3>\n

What remains to be revealed however, if the leaked identities are indeed correct, is if the A-TEAM is a hacker group as they claim.\u00a0 There remains another, and more likely possibility. The FEDS maybe in fact releasing the data in this manner, after recently arresting an alleged member of the group, based on data that was illegally sucked up and stored in the FBI and NSA vaccuum cleaner monitoring of the internet. Or perhaps, the hackers ISP\u2019s may have be\u00a0 storing the internet conversations of\u00a0 all online users and turned it over to the Feds.<\/p>\n

To sidestep any issues of constitutionality or lawsuits, the Feds would indeed turn over any illegally captured data in this manner because it seems highly odd that after 50 days of trying to catch LulzSec and after years of trying to catch Anonymous members the data with past IRC chat logs and attachments ousting the group is suddenly unvieled and released.<\/p>\n

\u00a0<\/p>\n

The release begins by revealing the background information on the group in relation to the time-line in the graphic below.<\/p>\n

\"Timeline<\/a><\/div>\n<\/p>\n

Timeline of The Anonymous Hacker Attacks<\/p>\n<\/div>\n

Specifically it begins<\/p>\n

\n

\u00a0<\/p>\n

\"Identities<\/a><\/div>\n<\/p>\n

Identities Of Entire LulzSec Hacker Group Along With Anonymous Members Revealed<\/p>\n

\u00a0<\/p>\n

To understand who\/what lulzsec\/gn0sis are\/is you need to understand where they came from. Everything originates from the *chan (4chan\/711chan\/etc.) culture. This internet subculture is pretty much the dregs of the internet. It\u2019s a culture built around the anonymity of the internet. If your anonymous no one can find you. No one can hurt you, so your invincable. The problem with this idealogy, is it\u2019s on the internet. The internet by definition is not anonymous. Computers have to have attribution. If you trace something back far enough you can find its origins. So let\u2019s give a brief event timeline on how these groups got together:<\/p>\n

    \n
  1. Anonymous rises up from 4chan against CoS.<\/li>\n
  2. Anonymous starts DDoSing stuff.<\/li>\n
  3. Various lower level hacking groups get involved.<\/li>\n
  4. Anonymous stagnates for a while.<\/li>\n
  5. Uprisings in the world Attract Anonymous.<\/li>\n
  6. ProjectPM Looser Barrett Brown becomes mouth piece of Anon.<\/li>\n
  7. Anonymous shifts focus toward \u201cWorldy\u201d Affairs.<\/li>\n
  8. Aaron Barr desides he\u2019s tired of his job and targets Anon.<\/li>\n
  9. gn0sis (Uncommon) comes out of no where and releases the Gawker data.<\/li>\n
  10. gn0sis teams up with anon hackers with all the OP<INSERT SOMETHING HERE> crap.<\/li>\n
  11. gn0sis (nigg, eekdacat, uncommon, kayla, lauralie) and sabu (from OP Anon shit) hack HBGary.<\/li>\n
  12. This is where Topiary comes in. They all form lulzsec to be \u201chacktivists\u201d.<\/li>\n
  13. Lulzsec (now a mix of gn0sis and opanon people) hack SONY and other stuff.<\/li>\n<\/ol>\n

    The problem with Lulzsec\/gn0sis\u2019s \u201cHacktivist\u201d mantra is that they lack the skills to keep it going. As such after SONY they couldn\u2019t get into anything. So they switched their focus to just releasing random crap that didn\u2019t mean anything. Then they started running out of things they could hack. So they put out requests for people to join them. That got them a few hits, and now they\u2019ve switched their gears again to be \u201cANTI-SEC\u201d. Whether or not this was an attempt at bring other groups out of the shadows (el8, h0no, zf0, etc), you can only speculate. But as of this writing: 6\/24\/2011 Sabu and Topiary are the only two people updating the twitter and releasing shit. Kayla is MIA. The gn0sis kids are gone in hiding somewhere.<\/p>\n

    From what we\u2019ve seen these lulzsec\/gn0sis kids aren\u2019t really that good at hacking. They troll the internet and search for sqlinjection vulnerabilities as well as Remote File Include\/Local File Include bugs. Once found they try to download databases or pull down usernames and passwords. Their releases have nothing to do with their goals or their lulz. It\u2019s purely based on whatever they find with their \u201cgoogle hacking\u201d queries and then release it.<\/p>\n

    What\u2019s funny to us is that these kids are all \u201cAnti-Sec\u201d yet by releasing their hacks they are forcing these companies to have to hire security professionals which keeps the Security Industry that they are trying to expose and shut down, in business. I guess they will realise that later in life when they get out of skid school.<\/p>\n

    So we\u2019ve been tracking and infiltrating these kids since the gawker hack. We have the D0x (as they call it) on everyone except Sabu and Kayla. First we\u2019ll go with the kid who did the gawker hack: Uncommon.<\/p>\n<\/blockquote>\n

    The Release ends:<\/p>\n

    \n

    Now we know that some other people have passed some stuff (senate.gov) to lulzsec (you will be owned soon mindwar). We think that with these kid\u2019s exposed as long as other people stop passing lulzsec hacks that it will eventually die off. Kayla and sabu lack the skill to do anything more then go after the low hanging fruit. <\/p>\n

    Now keep in mind lulzsec will try to claim that gn0sis isn\u2019t part of lulzsec or that no one is lulzsec. They will also try to claim that these d0x are corrent. If you look at these attacks demonstrated here, this is all the stuff that lulzsec hasn\u2019t released yet and probably wont release because as of this writing gn0sis has split from lulzsec. <\/p>\n

    Which is why lulzsec is request help from outside sources. Because Sabu and Kayla lack the skills to hack anything on their own. Sabu and Kayla are the ones responsible for HBGary (gn0sis found the vulnerability vector though). This is evident in kayla\u2019s dumping part of the shadow file to our spies:<\/p>\n

    (08:03:13 PM) kayla: root:$1$XvkHbOb.$hEB8k8G\/YXcQadaGFCcsS0:15011:0:99999:7:::
    \n(08:03:13 PM) kayla: jussi:$1$N0aKf9ao$.AZNp8UbP2JXDpaes64iG.:13378:0:99999:7:::
    \n(08:03:14 PM) kayla: hoglund:$1$rfGprb5A$7hpSt9DW82ihOZEk3L3px.:15011:0:99999:7:::
    \n(08:03:14 PM) kayla: dateach:$1$LNORLcjK$IB1elonAPmGJLdwCOQoR0\/:13225:0:99999:7:::
    \n(08:03:14 PM) kayla: pedram:$1$4oKzMX1n$IL36cXiKvnW4S8HpgmOS91:13208:0:99999:7:::
    \n(08:03:14 PM) kayla: darawk:$1$pDY\/ltrQ$sGPmCZqOU509g36CwctkD\/:13217:0:99999:7:::<\/p>\n

    If any law enforcment agency would like all the raw logs of everything please feel free to email THE A-TEAM!<\/p>\n

    ALPHA MIKE FOXTROT,<\/p>\n

    THE A-TEAM<\/p>\n<\/blockquote>\n

    And in between it identifies the following members of the group<\/p>\n