2 ms·

> On a suspicion that the login page for portal-ctsi[.]com might be a custom coding job, KrebsOnSecurity selected “view source” from the homepage to expose the

> On a suspicion that the login page for portal-ctsi[.]com might be a custom coding job, KrebsOnSecurity selected “view source” from the homepage to expose the site’s HTML code Ahhh shit, it's time for some early 2000's "Antitrust" style quick pans to CRTs with HTML tags wizzing by while discount Bill Gates talks in the background about how you're either a 1 or a 0, alive or dead, before Teddy comes to the revolutionary realization that "The answer's not in the box, it's in the band." But in all seriousness, that screenshot shows a page clearly designed by a backend engineer so I find the suspicion of a "custom coding job" pretty funny. I've been out of the loop for a bit but I haven't seen anything make the rounds on HN about any criminal drop shipping saas graduating from a startup accelerator with a big ole seed round and a office in SF on the way. Of course all of their software is custom, in house stuff, or heavily adapted tooling, they can't really go and use salesforce now can they? And at the end of the day what does a "custom coding job" even mean, because trace any application that's ever existed and it was a custom coding job. And also I'm lol'ing because the article is trying to make viewing html on a "hunch" out like it's fucking Batman level detective work :) Why were they doing all of this on the clear net out in the open? They are smart enough to have a super intricate network of mules and delivery people, custom written software, and even have what appears to be management sending memo's about corporate policy, yet they weren't smart enough to put this all behind a private VPN or throw it on the TOR network AND also behind a private vpn? It almost seems like they were trying to get caught, and wtf kind of name is that? I'm not convinced this isn't a false flag for something else or a spark to act on something. It has the grab bag of things needed to breed more hatred at random countries that we've been told since grade school to hate.

batch12 3y ago
> And at the end of the day what does a "custom coding job By custom coding job, I think he just means that the file is unique enough to be used to fingerprint sites created by the same entity. Tracking unique assets on a page to find similarities is a solid way to hunt for malicious related sites. > yet they weren't smart enough to put this all behind a private VPN or throw it on the TOR network The use of Tor would limit the pool of mules either due to technical limitations or tripping BS sensors. Also, it's the dumb ones that get caught first.

batch12 3y ago

> And at the end of the day what does a "custom coding job By custom coding job, I think he just means that the file is unique enough to be used to fingerprint sites created by the same entity. Tracking unique assets on a page to find similarities is a solid way to hunt for malicious related sites. > yet they weren't smart enough to put this all behind a private VPN or throw it on the TOR network The use of Tor would limit the pool of mules either due to technical limitations or tripping BS sensors. Also, it's the dumb ones that get caught first.