11 ms·

Quite impressive. You know your blog is good when folks will try to take down a CDN to supress what's on it. He's also had heroin mailed to him in combination w

Quite impressive. You know your blog is good when folks will try to take down a CDN to supress what's on it. He's also had heroin mailed to him in combination with a swatting attempt before: http://webcache.googleusercontent.com/search?q=cache:gEjqPfcbtlgJ:krebsonsecurity.com/2015/10/hacker-who-sent-me-heroin-faces-charges-in-u-s/&num=1&hl=en&gl=us&strip=1&vwsrc=0 http://webcache.googleusercontent.com/search?q=cache:gEjqPfc...

gnarbarian 10y ago
holy shit. that is terrifying.
- ddorian43 10y ago
  Normal game streamers get swatted and sending heroin would be easy with the silkroad-alternative market online.
  - untog 10y ago
    Does that in any way negate the fact that it is terrifying?
    - ddorian43 10y ago
      No.
- 1ris 10y ago
  Could have been child porn.
  - BinaryIdiot 10y ago
    An almost horrible, related story: When I was in middle school and the internet was still fairly new (we had just gotten it) a classmate of mine hatched a terrible plan to get rid of a teacher he hated. He waited until the teacher was out sick one day then during the substitute's typical teaching pattern of having us "read these 3 chapters, answer questions then keep your head down until class is over" he jumped on the teacher's computer. After reassuring the substitute that he was allowed to he tried desperately to find child porn. His plan was to save it into semi hidden folders onto the computer then later on turn the teacher in for having child porn. Fortunately this classmate wasn't able to find any and eventually gave up. But I've always remembered his plan. It's terrifyingly believable that if someone managed to get into your computer and download child porn, there is likely little recourse or way to prove you did not do it.
    - mixedbit 10y ago
      In this case such prove should be possible. Files creation dates would show that the files were downloaded when the teacher was absent. The dates would make it easy to associate this accident with your class and then, after asking a few questions, with your classmate.
      - breakingcups 10y ago
        Those dates can easily be altered by someone knowledgeable though.
        dangero 10y ago
        And easily sold to a jury as proof positive after they were altered. I've feared for a lot time that this type of thing is currently in the government arsenal of threats and weapons.
      - lutusp 10y ago
        > Files creation dates would show that the files were downloaded when the teacher was absent. But file creation dates are easily changed by a skilled hacker.
        coldtea 10y ago
        And also by the teacher. So maybe he altered them? That's what the DA would sell to the jury...
      - coldtea 10y ago
        >Files creation dates would show that the files were downloaded when the teacher was absent. And what if the teacher was not on leave or sick, but just in the school's cafeteria, or briefly in another class, etc? Good luck proving anything with the dates, especially after several months, where nobody remembers who was where at that random day in the past.
        10y ago
  - thecatspaw 10y ago
    that reminds me of randomRambo's story. On stream he was searching for a file on his computer, and a file with a name containing CP. Long story short, police was called, "he molests his kid on stream" (totally untrue), police came, arrested him on stream. took more than half a year for him to get declared innocent. here is him talking about it: https://www.youtube.com/watch?v=CzdFOpRTvyU https://www.youtube.com/watch?v=CzdFOpRTvyU
    - draugadrotten 10y ago
      > took more than half a year for him to get declared innocent. Even if declared innocent, being charged on suspicion of possession of such porn is a life-long stigma that never wears off. For example, it will be impossible for a foreign citizen to obtain a US 'ESTA' visa waiver after such suspicions.
DSMan195276 10y ago
The google-cache page doesn't seem to be loading right for me - It's still trying to pull off extra content like css and images from the regular site. That said, I found the article in way.archive.org, and it has images and formatting intact: https://web.archive.org/web/20151115154842/http://krebsonsecurity.com/2015/10/hacker-who-sent-me-heroin-faces-charges-in-u-s/ https://web.archive.org/web/20151115154842/http://krebsonsec... Thanks for giving a link to this post!
- parshimers 10y ago
  Oh, that's a much better version! Thank you. I thought I linked to the text-only google cache, but perhaps not.
- imaginenore 10y ago
  Another good mirror: http://archive.is/CVSm3 http://archive.is/CVSm3
- spyder 10y ago
  Google cache: you have to click Text-only version which isn't trying to load anything from the original site: http://webcache.googleusercontent.com/search?q=cache:kaymYsbcGc8J:krebsonsecurity.com/2016/09/israeli-online-attack-service-vdos-earned-600000-in-two-years/&num=1&strip=1&vwsrc=0 http://webcache.googleusercontent.com/search?q=cache:kaymYsb... (it's the "strip=1" parameter in the URL)
superuser2 10y ago
Wow. Imagine if he hadn't gotten access to the forum and preempted the police call.
- woodpanel 10y ago
  I wonder: Is he fluent in Russian? I doubt google translate could help you out with that.
  - runn1ng 10y ago
    Actually yes, he taught himself some Russian, from what I remember.
  - acveilleux 10y ago
    If you're going to be reporting on his beat, you have to be at least somewhat fluent.
YeGoblynQueenne 10y ago
That's an interesting read but I'm really not sure why Krebs posted the real name of "Fly's" wife. She doesn't seem to be involved in her husband's activities at all, so what's up with that?
- woodpanel 10y ago
  "fair game"? The Russian hacker did the same with him as he posted copies of Krebs' credit report, directions to Krebs' home and pictures of Krebs' front door. Plus, threatening to kill Krebs' wife. But since we're talking about ethics here: Sure, now that the hacker faces 30 years in prison, he's not short of probably sincere apologies. I could really believe that he now has changed his view and accepted his guilt. It makes me ponder the thought of if I were Krebs' to not only feel sorry for the guy but (if it were legally possible) to dismiss the charges against him. Consider the much more likely outcome of the hackers' plan: That it worked. Would the hacker had the same sense of guilt then? Or the same sense of forgiveness as Krebs or me seems to have? Maybe. We'd never know unless he did. It's more likely, he would have enjoyed Krebs' ruined live. Maybe even continued to threaten his wife and family. Just for the fun of it. Because doing that in the anonymity of the web makes it easy to misbehave in ways no one ever would in front of the public eye and even less in the eye of his family and friends.
  - mannykannot 10y ago
    I tend to be a bit skeptical of the sincerity of apologies first made after the perp is caught.
  - striking 10y ago
    If you ever press charges against a criminal, follow through with it. If you forgive them, they might just do it again. I don't think he deserves 30 years either, but he should still go to prison.
  - hoorayimhelping 10y ago
    Of course he's not going to get the charges dropped against this guy. Krebs should be pushing for the most harsh penalty possible against this guy so he can continually point to him as an example of what happens when you threaten him or his wife. I think thirty years is extreme, but I think the hope is that this will serve as an effective deterrent against this kind of crap.

gnarbarian 10y ago

holy shit. that is terrifying.

ddorian43 10y ago
Normal game streamers get swatted and sending heroin would be easy with the silkroad-alternative market online.
- untog 10y ago
  Does that in any way negate the fact that it is terrifying?
  - ddorian43 10y ago
    No.
1ris 10y ago
Could have been child porn.
- BinaryIdiot 10y ago
  An almost horrible, related story: When I was in middle school and the internet was still fairly new (we had just gotten it) a classmate of mine hatched a terrible plan to get rid of a teacher he hated. He waited until the teacher was out sick one day then during the substitute's typical teaching pattern of having us "read these 3 chapters, answer questions then keep your head down until class is over" he jumped on the teacher's computer. After reassuring the substitute that he was allowed to he tried desperately to find child porn. His plan was to save it into semi hidden folders onto the computer then later on turn the teacher in for having child porn. Fortunately this classmate wasn't able to find any and eventually gave up. But I've always remembered his plan. It's terrifyingly believable that if someone managed to get into your computer and download child porn, there is likely little recourse or way to prove you did not do it.
  - mixedbit 10y ago
    In this case such prove should be possible. Files creation dates would show that the files were downloaded when the teacher was absent. The dates would make it easy to associate this accident with your class and then, after asking a few questions, with your classmate.
    - breakingcups 10y ago
      Those dates can easily be altered by someone knowledgeable though.
      - dangero 10y ago
        And easily sold to a jury as proof positive after they were altered. I've feared for a lot time that this type of thing is currently in the government arsenal of threats and weapons.
    - lutusp 10y ago
      > Files creation dates would show that the files were downloaded when the teacher was absent. But file creation dates are easily changed by a skilled hacker.
      - coldtea 10y ago
        And also by the teacher. So maybe he altered them? That's what the DA would sell to the jury...
    - coldtea 10y ago
      >Files creation dates would show that the files were downloaded when the teacher was absent. And what if the teacher was not on leave or sick, but just in the school's cafeteria, or briefly in another class, etc? Good luck proving anything with the dates, especially after several months, where nobody remembers who was where at that random day in the past.
      - 10y ago
- thecatspaw 10y ago
  that reminds me of randomRambo's story. On stream he was searching for a file on his computer, and a file with a name containing CP. Long story short, police was called, "he molests his kid on stream" (totally untrue), police came, arrested him on stream. took more than half a year for him to get declared innocent. here is him talking about it: https://www.youtube.com/watch?v=CzdFOpRTvyU https://www.youtube.com/watch?v=CzdFOpRTvyU
  - draugadrotten 10y ago
    > took more than half a year for him to get declared innocent. Even if declared innocent, being charged on suspicion of possession of such porn is a life-long stigma that never wears off. For example, it will be impossible for a foreign citizen to obtain a US 'ESTA' visa waiver after such suspicions.

DSMan195276 10y ago

The google-cache page doesn't seem to be loading right for me - It's still trying to pull off extra content like css and images from the regular site. That said, I found the article in way.archive.org, and it has images and formatting intact: https://web.archive.org/web/20151115154842/http://krebsonsecurity.com/2015/10/hacker-who-sent-me-heroin-faces-charges-in-u-s/ https://web.archive.org/web/20151115154842/http://krebsonsec... Thanks for giving a link to this post!

parshimers 10y ago
Oh, that's a much better version! Thank you. I thought I linked to the text-only google cache, but perhaps not.
imaginenore 10y ago
Another good mirror: http://archive.is/CVSm3 http://archive.is/CVSm3
spyder 10y ago
Google cache: you have to click Text-only version which isn't trying to load anything from the original site: http://webcache.googleusercontent.com/search?q=cache:kaymYsbcGc8J:krebsonsecurity.com/2016/09/israeli-online-attack-service-vdos-earned-600000-in-two-years/&num=1&strip=1&vwsrc=0 http://webcache.googleusercontent.com/search?q=cache:kaymYsb... (it's the "strip=1" parameter in the URL)

superuser2 10y ago

Wow. Imagine if he hadn't gotten access to the forum and preempted the police call.

woodpanel 10y ago
I wonder: Is he fluent in Russian? I doubt google translate could help you out with that.
- runn1ng 10y ago
  Actually yes, he taught himself some Russian, from what I remember.
- acveilleux 10y ago
  If you're going to be reporting on his beat, you have to be at least somewhat fluent.

YeGoblynQueenne 10y ago

That's an interesting read but I'm really not sure why Krebs posted the real name of "Fly's" wife. She doesn't seem to be involved in her husband's activities at all, so what's up with that?

woodpanel 10y ago
"fair game"? The Russian hacker did the same with him as he posted copies of Krebs' credit report, directions to Krebs' home and pictures of Krebs' front door. Plus, threatening to kill Krebs' wife. But since we're talking about ethics here: Sure, now that the hacker faces 30 years in prison, he's not short of probably sincere apologies. I could really believe that he now has changed his view and accepted his guilt. It makes me ponder the thought of if I were Krebs' to not only feel sorry for the guy but (if it were legally possible) to dismiss the charges against him. Consider the much more likely outcome of the hackers' plan: That it worked. Would the hacker had the same sense of guilt then? Or the same sense of forgiveness as Krebs or me seems to have? Maybe. We'd never know unless he did. It's more likely, he would have enjoyed Krebs' ruined live. Maybe even continued to threaten his wife and family. Just for the fun of it. Because doing that in the anonymity of the web makes it easy to misbehave in ways no one ever would in front of the public eye and even less in the eye of his family and friends.
- mannykannot 10y ago
  I tend to be a bit skeptical of the sincerity of apologies first made after the perp is caught.
- striking 10y ago
  If you ever press charges against a criminal, follow through with it. If you forgive them, they might just do it again. I don't think he deserves 30 years either, but he should still go to prison.
- hoorayimhelping 10y ago
  Of course he's not going to get the charges dropped against this guy. Krebs should be pushing for the most harsh penalty possible against this guy so he can continually point to him as an example of what happens when you threaten him or his wife. I think thirty years is extreme, but I think the hope is that this will serve as an effective deterrent against this kind of crap.