8 ms·

>The gang even has a website on the dark web where it brags about its work in detail, listing all the companies it has hacked and what was stolen, and an "ethic

>The gang even has a website on the dark web where it brags about its work in detail, listing all the companies it has hacked and what was stolen, and an "ethics" page where it says which organisations it will not attack. And yet they don't give the URL. I wanna see this page. Does anyone have it?

sodality2 5y ago
Most people will probably be hesitant to post it for obvious reasons here. But it was helpful to me, to find a ransomware url, during the college leak a few weeks ago (https://dorper.me/articles/unileak.aspx https://dorper.me/articles/unileak.aspx) to find out which colleges were impacted because tons of people I know were in it. There are plenty of good reasons to want to have it. But I understand why BBC wouldn't post it...
- pm90 5y ago
  People that read Hacker News on their work machine: note that if you're on the org VPN (and even if you're not, if your org installs IDS tools or other spyware) many of those tools may flag your visit of such site as "malicious". Best to use a personal device.
vmception 5y ago
I don't have it, but I would go to dark.fail's onion address and browse there (http://darkfailllnkf4vf.onion/ http://darkfailllnkf4vf.onion/ verify this and get in the habit of doing so! dark fail's clearnet website just got hacked while their onion site was unaffected), and then I would go to Dread forum (onion reddit clone) and ask there. A little tedious but there is lots of commerce on onion sites, and a lot of valuable information in general that I've never seen anywhere else, so it can be worth it.
sswam 5y ago
Here's a suggestion. 1. Don't use Windows 2. Use ZFS 3. Practice your distaster recovery plan 4. Laugh in the face of ransomware Perhaps organizations that providfe critical services shold consider hiring competent IT security advisors? I'm a programmer, not a specialist in security, but everyone knows you need backups, and you need to test that you can recover from your backups quickly.
curiousgal 5y ago
Well the reason for that is that the website has dumps that you can easily download. Here is a text dump of their press page https://pastebin.com/fxJCaUDq https://pastebin.com/fxJCaUDq
duckfang 5y ago
Here's a list of the common malware URLs. BE VERY CAUTIOUS. Also note that DarkSide's onionsite is down and has been for a while. Babuk: http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtf... Dopple: http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qn... Maze: mazenews.top AKO: http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxk... Nefilim: http://hxt254aygrsziejn.onion/ http://hxt254aygrsziejn.onion/ Ragnar: http://p6o7m73ujalhgkiv.onion/ http://p6o7m73ujalhgkiv.onion/ Clop: http://ekbgzchl6x2ias37.onion/ http://ekbgzchl6x2ias37.onion/ Netwalker: http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion/blog http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdr... REvil: http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46... Sekhmet: http://sekhmetleaks.top/ http://sekhmetleaks.top/ Pysa: http://wqmfzni2nvbbpk25.onion/partners.html http://wqmfzni2nvbbpk25.onion/partners.html Conti: conti.news & htcltkjqoitnez5slo7fvhiou5lbno5bwczu7il2hmfpkowwdpj3q2yd.onion Suncrypt: http://nbzzb6sa6xuura2z.onion/ http://nbzzb6sa6xuura2z.onion/ DarkSide: darksidedxcftmqa.onion
- murph-almighty 5y ago
  It might help if you format these as "domain[dot]com" to avoid misclicks.
  - duckfang 5y ago
    Too late.
    - NaturalPhallacy 5y ago
      You can edit your comments here.

sodality2 5y ago

Most people will probably be hesitant to post it for obvious reasons here. But it was helpful to me, to find a ransomware url, during the college leak a few weeks ago (https://dorper.me/articles/unileak.aspx https://dorper.me/articles/unileak.aspx) to find out which colleges were impacted because tons of people I know were in it. There are plenty of good reasons to want to have it. But I understand why BBC wouldn't post it...

pm90 5y ago
People that read Hacker News on their work machine: note that if you're on the org VPN (and even if you're not, if your org installs IDS tools or other spyware) many of those tools may flag your visit of such site as "malicious". Best to use a personal device.

vmception 5y ago

I don't have it, but I would go to dark.fail's onion address and browse there (http://darkfailllnkf4vf.onion/ http://darkfailllnkf4vf.onion/ verify this and get in the habit of doing so! dark fail's clearnet website just got hacked while their onion site was unaffected), and then I would go to Dread forum (onion reddit clone) and ask there. A little tedious but there is lots of commerce on onion sites, and a lot of valuable information in general that I've never seen anywhere else, so it can be worth it.

sswam 5y ago

Here's a suggestion. 1. Don't use Windows 2. Use ZFS 3. Practice your distaster recovery plan 4. Laugh in the face of ransomware Perhaps organizations that providfe critical services shold consider hiring competent IT security advisors? I'm a programmer, not a specialist in security, but everyone knows you need backups, and you need to test that you can recover from your backups quickly.

curiousgal 5y ago

Well the reason for that is that the website has dumps that you can easily download. Here is a text dump of their press page https://pastebin.com/fxJCaUDq https://pastebin.com/fxJCaUDq

duckfang 5y ago

Here's a list of the common malware URLs. BE VERY CAUTIOUS. Also note that DarkSide's onionsite is down and has been for a while. Babuk: http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtf... Dopple: http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qn... Maze: mazenews.top AKO: http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxk... Nefilim: http://hxt254aygrsziejn.onion/ http://hxt254aygrsziejn.onion/ Ragnar: http://p6o7m73ujalhgkiv.onion/ http://p6o7m73ujalhgkiv.onion/ Clop: http://ekbgzchl6x2ias37.onion/ http://ekbgzchl6x2ias37.onion/ Netwalker: http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion/blog http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdr... REvil: http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46... Sekhmet: http://sekhmetleaks.top/ http://sekhmetleaks.top/ Pysa: http://wqmfzni2nvbbpk25.onion/partners.html http://wqmfzni2nvbbpk25.onion/partners.html Conti: conti.news & htcltkjqoitnez5slo7fvhiou5lbno5bwczu7il2hmfpkowwdpj3q2yd.onion Suncrypt: http://nbzzb6sa6xuura2z.onion/ http://nbzzb6sa6xuura2z.onion/ DarkSide: darksidedxcftmqa.onion

murph-almighty 5y ago
It might help if you format these as "domain[dot]com" to avoid misclicks.
- duckfang 5y ago
  Too late.
  - NaturalPhallacy 5y ago
    You can edit your comments here.