6 ms·
Anonymous Release 10TB Leaked Data Exposing Kremlin Assets, Russian Businesses
- deepnet 1y agoTrump has ~91k files in the data https://pbs.twimg.com/media/GomVrWxWMAA5S-_?format=jpg&name=900x900 https://pbs.twimg.com/media/GomVrWxWMAA5S-_?format=jpg&name=... [edit] site down - reddit link to the 10tb https://www.reddit.com/r/worldnews/comments/1k0h9uu/anonymous_releases_10tb_of_leaked_data_exposing/mne3ad7/ https://www.reddit.com/r/worldnews/comments/1k0h9uu/anonymou... Also x link to data https://x.com/YourAnonFrench_/status/1912099907038572980 https://x.com/YourAnonFrench_/status/1912099907038572980
- petee 1y agoI'll happily wait for someone else to open that archive and let us know whats in the folder. Somehow feels like a great way to get a bunch of people to download a rar with a zero day
- bgwalter 1y agoYes, an example: https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ https://blog.google/threat-analysis-group/government-backed-... I also do not understand how Anonymous would sift through 10TB to confirm the validity of the claims.
- deleted 1y ago[deleted]
- Rygian 1y ago> Instead of bailing out, ShellExecute proceeds to call “shell32!ApplyDefaultExts” which iterates through all files in a directory, finding and executing the first file with an extension matching any of the hardcoded ones: “.pif, .com, .exe, .bat, .lnk, .cmd”. So the vulnerability is not in WinRAR, but rather in the ShellExecute windows code that desperately tries to find something else to run when asked to execute a file that does not exist. As my security officer says at $dayJob, "having a security hole there for thirty years does not make it somehow less of a security hole".
- deleted 1y ago[deleted]
- Sonnigeszeug 1y agoSo always wait for others to do something? Don't just download it on your windows home pc with your private data of course.
- petee 1y agoIn some cases, yes. An unknown threat, potentially from the supposed nation-state target itself, has a very high risk. I'm not versed in creating ultra-sterile lab conditions -- things can escape VMs, escape your network, nothing is impossible. Do I instead bring it to my employers systems and let them take the risk? And to what benefit, when I can just wait?
- Sonnigeszeug 1y agoCloud VM. Costs you a dollar per hour and has fast download speed. We are experts on HN. If we don't do it, others with less knowledge might or not might. And no, a archive file doesn't just include a zero day. A zero day is very valuable.
- petee 1y agoFair enough, my morning brain didn't think cloud, though i guess one could argue you're still passing off the risk onto someone else. Either way, its not my expertise
- genewitch 1y agoPassing the risk for a price. AWS is expensive, in my mind, because of stuff like this. They don't want you to nirror it on aws, so egress is expensive. The $/GB/month storage fees it'll cost to store this while exploring it is not cheap, either. And once you have an idea of the data you want to move out of the gap, you want to process /extract it quickly (because of $/GB/Month costs...) I just thought about a spare machine I have with a 12TB spindle and an SSD not plugged into a network. I understand how to airgap, and unless something can magically worm it's way through HDMI that's probably how I'd get data out, just to be annoying to everyone. To be fair.
- close04 1y ago> Trump has ~91k files in the data That's the size column in WinRAR (left of the Compressed column). Is it by coincidence also the number of files?
- nottorp 1y agoJudging by the OP's profile, we should be happy that the "AI" managed to recognize a number :)
- deepnet 1y agoI am not an LLM [edit] ( as far as I know ;-), but thanks for the profile crit I probably should tidy it up.
- nottorp 1y agoYep, the safe assumption with a profile like that is that it's something automated. Also yes, that's the file size column. Uncompressed left, compressed right. It's a directory but the screenshot doesn't say how many files it contains.
- LANcaster 1y agoHow 18.84GB file is 10TB?
- jijijijij 1y agoProbably mostly text, which is highly compressible.
- rokkamokka 1y agoThat's fun. Someone feeling up to feeding the 90k trump files into an LLM for a synopsis?
- deepnet 1y ago[flagged]
- pseudo0 1y agoWhy are you quoting AI slop from reddit? That's an incredibly vague summary of the article about the leaked data and provides no useful information.
- deepnet 1y agoBecause the article is currently down so the summary is all there is for now. Yes it provides no extra information but in the [hnews hug of death] of the article it is the only information at the moment
- OhioMan2943 1y ago>Because the article is currently down so the summary is all there is for now. Although ironically this "release" article also seems like an ai summary. Although prose could just be foreign language speaker speaking english. https://archive.md/2C1WB#selection-252.1-277.611 https://archive.md/2C1WB#selection-252.1-277.611
- gwill 1y agoanyone have an alternate link?
- OhioMan2943 1y agohttps://archive.md/2C1WB#selection-252.1-277.611 https://archive.md/2C1WB#selection-252.1-277.611
- Rallen89 1y agoAny validity besides one news article? seems to be getting the hug of death atm.
- BoredPositron 1y agoJust download the data and validate it yourself if you are skeptical? I guess that's why they released it...
- owebmaster 1y agoThat's a fast way to get hacked or become a target. We can do better in this forum security-wise
- BoredPositron 1y agoWe are on a forum were most users should know how to operate data that has the probability of malware in it...
- owebmaster 1y agoJust now you commented (and removed) that it's improbable that a file this big would be a honeypot, I don't think most users here know how to operate data safely.
- BoredPositron 1y agoI deleted it because the discussion is void. The data is on torrent trackers and on shared file hosters. You can download single files in the torrent and if you can't handle a txt file without getting an anxiety attack that's on you.
- owebmaster 1y agoI'm not interested in the content but you are, share your findings in place of asking ppl to do that. Why there are so many profiles (many of them green) hurrying people to stop thinking about risks and just open the files? Shouldn't they just open it and see? Edit as I can't reply: your behavior is quite suspicious and so is some of the new green users commenting. That is exactly what someone embedded in the hacker culture would conclude after analyzing, not feel challenged by you to hurry and open the files.
- scotty79 1y agoFinally. More than 3 years to get russia hacked properly is a bit much. I think IT security got a bit too secure for the safety of freedom.
- jijijijij 1y agoIf this is real, there will be claims made and the general public has no way to verify. 10TB is technically challenging to handle for the vast majority of people. Would be really important for someone to re-upload and index the extracted files for online browsing.
- xyst 1y agoJust like the Panama Papers? Did anything even happen after the Mossack Fonseca law firm was hacked? All I remember was a few people stepping down from govt positions, some rich folks get caught in the xfire (some football player used them). But nobody went to jail.
- agilob 1y ago>Did anything even happen after the Mossack Fonseca law firm was hacked? Yes, the journalist who reported on it was killed https://en.wikipedia.org/wiki/Daphne_Caruana_Galizia#Panama_Papers https://en.wikipedia.org/wiki/Daphne_Caruana_Galizia#Panama_...
- constantcrying 1y ago"If this is real". Do you think this is real: https://archive.ph/8RGAb https://archive.ph/8RGAb ?
- deleted 1y ago[deleted]
- deleted 1y ago[deleted]
- pseudo0 1y agoArchive, since the site appears to be down. It's AI-generated slop with basically no informational value though. https://archive.ph/2C1WB https://archive.ph/2C1WB
- yobannyvrot 1y agoOne ai slop article, and an 18gb mediafirelink from some twitter literally who. Taking bets for complete nothingburger...
- deleted 1y ago[deleted]
- jmclnx 1y agoYikes, the archive article asked me to install Abobe Flash, and I am on Linux. I guess it is really from Russia :)
- constantcrying 1y agoIt's an article from an Indian right wing conspiracy news website. Check out their other hard hitting journalism: https://archive.ph/8RGAb https://archive.ph/8RGAb
- kcindric 1y agooufff, okay, this puts the reliability of the article much lower now.
- starspangled 1y agoWell gentlemen, we will always remember this as the day we almost caught Donald J. Trump, again.
- IAmShevek 1y agoBrilliantly said.
- Craighead 1y ago[dead]
- kif 1y ago"Leaked data" seems like a stretch. Sounds like someone ran a vulnerability scanner on some Twitter accounts. Don't have time to go through all the data though, so maybe there are interesting things in there.
- pseudo0 1y agoYeah, from the screenshots on Twitter a lot of it looks like archives of publicly accessible Twitter and Telegram accounts, plus data from old breaches. That makes it seem pretty unlikely there will be anything new and valuable here.
- ty6853 1y agoIt is is a real thing though that Russian databases are routinely compromised or stolen. People that engage in tax fraud in places like Mexico and Russia often legitimately do it because they do not want the mob/cartels to find out how much money they have and then extort them. The data gets out.
- constantcrying 1y agoWhat is wrong with people. Who believes this is real? Do you really think a WordPress website from India posting obvious fake news and conspiracies should be trusted? Do you think the source that brought you this is reliable in any way: https://archive.ph/8RGAb https://archive.ph/8RGAb "Shocking Footage: Hunter Biden & Ellen Caught in Adrenochrome Bust!"
- OhioMan2943 1y agoPeople need to believe someone else out there will solve their geopolitical problems for them.
- constantcrying 1y agoI thought at least people on this website would be able decipher that this is an obvious fake news website, it also posts some of the most generic right wing conspiracy theories. Quite disappointing to be honest.
- otabdeveloper4 1y ago> Do you really think a WordPress website from India posting obvious fake news and conspiracies should be trusted? Depends. Does it validate my Russian collusion delusion?
- Rallen89 1y agoSeems very dubious, new accounts in the comments urging people to download it ( u/Sonnigeszeug) all the 'sources' go back to the same file, claims it is on torrent trackers yet providing no evidence for? A very sensational article with no proof and if it was true downloading russian government data with no idea whats in it? the sweetest of honey right here
- constantcrying 1y agoI am sure the other reports from the website are very real: https://archive.ph/8RGAb https://archive.ph/8RGAb
- A_D_E_P_T 1y agoMost people have absolutely no way to handle a 10TB file, anyway. Even 1TB csv files can be a challenge. Need to use DuckDB or chunk it somehow. A lot of ways to hide nasty surprises in such a file, too.
- miningape 1y agoPack it into a nice executable "csv" and you've got baby's first malware
- kurtis_reed 1y agoWhat baby?
- Sonnigeszeug 1y agoDude... i'm a software engineere in germany. I create new accounts because i spend too much time on hn... I suggest to download stuff because i assume people on HN are well equiped to check it out. Click yourself some cheap vm in the cloud, download it, check it out. Cost involved? $10 Do you expect journalists with less it knowledge to do this? I mean yeah they can and should but people on hn should do too
- 1y ago
- mmastrac 1y agoFrom a quick scan of the file listing of the 18GB compressed folder linked for download elsewhere, looks like it's a collection of completely random data hacked over a number of years from various accounts that may or may not be connected with Russia (Guy Ritchie? Kanye West? Why?). Also, why a PNG? 2022-12-02 10:25:11 ....A 10530 10092 Leaked Data of corrupt officials/Part 1/Leaked Data of Kanye West's Instagram account/IP, Port, Hostname.png 2022-12-02 10:26:08 ....A 39852 37635 Leaked Data of corrupt officials/Part 1/Leaked Data of Kanye West's Instagram account/SSL info.png 2022-12-02 10:27:01 ....A 124662 114729 Leaked Data of corrupt officials/Part 1/Leaked Data of Kanye West's Instagram account/Vulnerabilities.png Some bank data seems to be exposed here (internal control panels), but in other cases it's just a dump of public website HTML? 10TB seems just plain wrong (didn't bother downloading the whole thing, though).
- jijijijij 1y ago> Vulnerabilities.png Clever. Instagram is an image hosting platform. At the firewall, guards watching the network traffic wouldn't notice png encrypted screenshots of cracked IP addresses being exfiltrated, drifting in plain sight in the usual pixel streams.
- gigatexal 1y agoI wish they’d leak Trump’s grades from college. And his associates’s trades around his tariff announcements, and all the things.
- constantcrying 1y agohttps://archive.ph/8RGAb https://archive.ph/8RGAb here is the other reporting from the website. How high would you rate their faith that they accurately reported in this case?
- gigatexal 1y agoThe they here I meant was anonymous not this random site.
- OhioMan2943 1y agohow did this become popular in the first place? was it this user? was it a plant on reddit if it was a scam?
- thowaway7564902 1y agoCAREFUL - it could very well be an attempt to get you to download malware. - As pointed out by constantcrying, this was published by Trendsnewsline, "an Indian right wing conspiracy news website": https://archive.ph/8RGAb https://archive.ph/8RGAb - New account Sonnigeszeug encouraging downloading of the archive I'd recommend you avoid downloading anything unless you understand the potential consequences. Ideally do so in a sandboxed environment.
- OhioMan2943 1y agoSo do we have a verdict yet? Anything more than scraped osint and telegram chats?
- fastglass 1y agoam I just being a newb or is OP god-tier with their WPM? I really despise these things where its a drop n run, and all these yahoos in the comments just talk oblivious towards the fact that person who submitted it remains silent about it.. like... this looks like a sweaty guessing game with everyone in the comments, especially over something that's very likely just troubled/plagued assets to begin with like, just ask the dude who submitted the shit about more information first or something
- swdev281634 1y agoI downloaded and extracted the files in a fresh Linux virtual machine with tools for viewing Word, Excel, and PDF documents. After reviewing the contents for about 30 minutes, the data appears technically authentic—not AI-generated—but nothing particularly noteworthy stood out. The files "Vulnerabilities/Fetched Data.txt" appear to be output from an automated security scanner that targeted public-facing web servers. Some directory labels are inaccurate. For instance, a company listed as a crypto exchange—Cryptopro—is actually an IT consulting firm focused on cryptography and PKI. A number of Word, Excel, and PDF files containing corporate reports and similar materials appear to be publicly accessible online and even indexed by search engines. I was able to locate several by searching their titles. One file, "Part 1/Report those Russian ringleaders/russRingleadersPerDFUNAFO.txt", seems to be the likely source of the "Kremlin Assets in the West" mention. It’s a brief list of Twitter accounts and may have been assembled through open-source intelligence methods. While the leak might contain some mistakenly published or sensitive material, I didn’t come across anything as significant or dramatic as implied by the article linked.
- ValveFan6969 1y agoWho woulda thunk the AI generated article doesn't know what it's talking about