5 ms·

yup, I was affected as I got this email yesterday: > Good day! > If you received this letter, you are a customer, student, partner or employee of University o

by wyxuan 6y ago

yup, I was affected as I got this email yesterday: > Good day! > If you received this letter, you are a customer, student, partner or employee of University of California. The company has been hacked, data has been stolen and will soon be released as the company refuses to protect its peoples' data. > We inform you that information about you will be published on the darknet ( [link redacted] ) if the university does not contact us. > Call or write to this store and ask to protect your privacy!!!! I'm leafing through the linked site and I can see SSNs, tax forms, enrollment forms - yikes!

sdan 6y ago
I got that email and immediately went to onion [dot] dog just to check out the site... was pretty clear it was some weird onion gateway so I decided not to go to the link.
- gambiting 6y ago
  I mean, you could probably go to the onion link directly with a Tor browser.....but that's probably a bad idea too. I'd open it in a VMed machine maybe.
  - KMag 6y ago
    Maybe even wget it via torproxy on a sandboxed VM.
  - sdan 6y ago
    They send all sort of weird stuff (lots of odd phising test emails similar to this one) so this was not completely unexpected. But the wording the link was a bit off and I really didn't think much of it and moved on
hiq 6y ago
> I'm leafing through the linked site and I can see SSNs, tax forms, enrollment forms - yikes! Haven't you just admitted that you downloaded the files and browsed them? Isn't that illegal in the US?
- KMag 6y ago
  I haven't looked at that onion site, but presumably that link is just a list of files, not their content. Otherwise, it has no blackmail value.
  - ficklepickle 6y ago
    There are a few pictures of docs with SSNs on that page. It appears to be some sort of leaks onion site titled "clop leaks".
    - KMag 6y ago
      Thanks for taking the risk of visiting a potentially exploit-ridden site for everyone. So, it contains a list of things to be leaked, plus leaks a sample to prove they're not bluffing?
- donw 6y ago
  Not a lawyer, but if that's true, how could sites like http://haveibeenpwned.com http://haveibeenpwned.com exist?
  - sen 6y ago
    They don’t publish the data itself they just compare a hash of it to a hash of whatever you submit for comparison.
    - donw 6y ago
      Right, but they have to look at that data to create those hashes, no?
      - DJBunnies 6y ago
        No, you submit your own hashes or partial hashes.
nobody9999 6y ago
I'd be surprised if that were really the case. It's probably just a toothless blackmail attempt, like those "I've hacked your system and have video of you masturbating to porn, you naughty, naughty boy! And if you don't pay me 0.03 bitcoin, I'm sending the video to all your Facebook friends." I suppose I could be wrong, but I'm probably not.

by wyxuan 6y ago

sdan 6y ago

I got that email and immediately went to onion [dot] dog just to check out the site... was pretty clear it was some weird onion gateway so I decided not to go to the link.

gambiting 6y ago
I mean, you could probably go to the onion link directly with a Tor browser.....but that's probably a bad idea too. I'd open it in a VMed machine maybe.
- KMag 6y ago
  Maybe even wget it via torproxy on a sandboxed VM.
- sdan 6y ago
  They send all sort of weird stuff (lots of odd phising test emails similar to this one) so this was not completely unexpected. But the wording the link was a bit off and I really didn't think much of it and moved on

hiq 6y ago

> I'm leafing through the linked site and I can see SSNs, tax forms, enrollment forms - yikes! Haven't you just admitted that you downloaded the files and browsed them? Isn't that illegal in the US?

KMag 6y ago
I haven't looked at that onion site, but presumably that link is just a list of files, not their content. Otherwise, it has no blackmail value.
- ficklepickle 6y ago
  There are a few pictures of docs with SSNs on that page. It appears to be some sort of leaks onion site titled "clop leaks".
  - KMag 6y ago
    Thanks for taking the risk of visiting a potentially exploit-ridden site for everyone. So, it contains a list of things to be leaked, plus leaks a sample to prove they're not bluffing?
donw 6y ago
Not a lawyer, but if that's true, how could sites like http://haveibeenpwned.com http://haveibeenpwned.com exist?
- sen 6y ago
  They don’t publish the data itself they just compare a hash of it to a hash of whatever you submit for comparison.
  - donw 6y ago
    Right, but they have to look at that data to create those hashes, no?
    - DJBunnies 6y ago
      No, you submit your own hashes or partial hashes.

nobody9999 6y ago

I'd be surprised if that were really the case. It's probably just a toothless blackmail attempt, like those "I've hacked your system and have video of you masturbating to porn, you naughty, naughty boy! And if you don't pay me 0.03 bitcoin, I'm sending the video to all your Facebook friends." I suppose I could be wrong, but I'm probably not.