6 ms·
Anonymous Publishes Leak of the Central Bank of the Russian Federation
- watersb 5y agoThis video announcement is very strange. Is this announcement style typical of Anonymous?
- JaimeThompson 5y agoYes, very typical.
- gentleman11 5y agoI hadn’t seen anonymous in the news for years. Does this means hacktivism is going to be a thing again? I wish it wasn’t posted to Twitter, the pop ups block me from reading contents without making an account
- chockchocschoir 5y agoHackvism never went away, only the news coverage of it did. Here you have the leak itself without Twitter being involved: https://ddosecrets.com/wiki/Central_Bank_of_Russia https://ddosecrets.com/wiki/Central_Bank_of_Russia
- melony 5y agoI wonder why none of the usual APT analysis groups are publishing reports on the various hacks. It is obvious that many of the "Anonymous" hacks are just a cover for state level or state-backed actors. The sheer scale and quantity of Russian organisations being compromised is simply too big to be attributed to global hacktivists alone. If you actually examine the list of organisations that have been compromised in the last few months, many of the data exfiltration attempts are implausible without the use of zero days and compromised employees. I wish Krebs and the others would do an in-depth study and attribution report. It does not serve the information security field well to turn a blind eye just because the targets are unpopular.
- petre 5y ago> "Anonymous" hacks are just a cover for state level or state-backed actors Not sure about that. Most of the recent ones against Russia seemed fun level hacks like defacing official websites. State level actor hacks usually incapacitate infrastructure like the alleged Russian attack on Viasat that screwed up Enercon wind farms or the Israeli attack on Iranian uranium gas centrifuges. https://www.theverge.com/2022/3/25/22996187/russian-military-hack-viasat-internet-satellite-ukraine https://www.theverge.com/2022/3/25/22996187/russian-military... This data theft is a bit different. Central bank transaction intel could be very useful for future sanctions.
- yucky 5y ago>It is obvious that many of the "Anonymous" hacks are just a cover for state level or state-backed actors. This has always been the case though. Not just Anonymous either, look at many of the massive leaks like Panama/Pandora which were almost devoid of US-based people, making it obvious that US Intelligence was likely behind the leaks.
- chockchocschoir 5y agoThe actual data instead of some weird announcement: https://ddosecrets.com/wiki/Central_Bank_of_Russia https://ddosecrets.com/wiki/Central_Bank_of_Russia Made a submission about it (the data) here (before I found this submission): https://news.ycombinator.com/item?id=30810275 https://news.ycombinator.com/item?id=30810275
- aaron695 5y ago> instead of some weird announcement So lets not go to the actual source and go to the link which claims to also be real? If someone wants to centralize these, cool (Is it the NSA doing it for Unit 8200 or maybe you are Fancy Bear?) But how about we start at the source before going straight to dumbing it down. ddosecrets - "There are a number of datasets <> that we've received and declined to publish for various reasons <> we do not acknowledge rejected datasets." Given this is 8 parts, how would we know that ddosecrets hasn't cut stuff out?
- chockchocschoir 5y agoDude, DDoS is established as a good source for the leaks. I've downloaded the torrent/magnet myself and it's proper, it has all 10 parts in it. Verified as well by downloading from Mega and comparing hashes, it checks out. Anyway, DDoS is already established as a trusted distributor of data leaks, if you don't know this, I'm not sure why you're throwing around terms like Unit 8200 or Fancy Bear, like you know what you're talking about (which btw, I take as a compliment that you think I'm a part of). It's not dumbing down to link directly to a trusted source of the data itself. Feel free to use both sources, like I did. But if you want to avoid Twitter and the videos anonymous usually bundles with their announcements, DDoS is a good distraction free source.
- aaron695 5y ago
- Komodai 5y agoddosecrets is well-known unlike some random ass "anonymous" twitter account.
- ranguna 5y agoDid anyone actually take a look at the files?
- chockchocschoir 5y agoYes, I'm going through all the files as I write this, will do a quick write up and publish that ASAP.
- ranguna 5y agoAwesome! Let us know your findings when you can
- CamperBob2 5y agoI'm looking at them right now. So far, the most startling thing I've come across is a set of account records linked directly to certain oligarchs known to be connected to Putin's inner circ---(((((--^%%%--!--#--- *\---- ** NO CARRIER **
- ranguna 5y agoOh my god, this poor person was hacked halfway through their comment! /s Thanks for the good evening humour!
- pajko 5y agoDownloaded it. Hard to mine data as, not surprisingly, everything is in Cyrillic. The problem is that there are multiple code pages to encode Cyrillic text (CP866, KOI8-R, CP1251 at least) and the encoding varies among files. Also the most of the PDF files consist of scanned pages. Accounting information is stored in DBF files in some well defined format. Fortunately have found a DBF to Excel converter, which sticks code page information to the output: https://github.com/rpoletaev/dbf-to-xlsx/ https://github.com/rpoletaev/dbf-to-xlsx/
- chockchocschoir 5y agoIf you're interested in collaborating, I'm setting up a search service that includes OCRd text of every single document in the dump, to facilitate searching for people who know Russian and don't want to download the entire dump. Email is in profile.
- WouterZ 5y agoWhere will you put it up? Interested to have a go at it with some Russian speaking friends.