Lulzsec caught - 2 Irish members named.

dlofnep

I caught this on the Fox News website:

http://www.foxnews.com/scitech/2012/03/06/hacking-group-lulzsec-swept-up-by-law-enforcement/

As a result of Monsegur’s cooperation, which was confirmed by numerous senior-level officials, the remaining top-ranking members of LulzSec were arrested or hit with additional charges Tuesday morning. The five charged in the LulzSec conspiracy indictment expected to be unsealed were identified by sources as: Ryan Ackroyd, aka “Kayla” and Jake Davis, aka “Topiary,” both of London; Darren Martyn, aka “pwnsauce” and Donncha O’Cearrbhail, aka “palladium,” both of Ireland; and Jeremy Hammond aka “Anarchaos,” of Chicago.

We met Darren at CampusCon - He gave a talk at the event. Don't know that Donncha lad. Will send Darren a tweet and see what the craic is.

syklops

If you had told me this morning one of the top ranking leaders of Lulsec was from Galway, I wouldn't have believed you.

Dublin_Gunner

Feckers had nicked my EA account, grr....

infodox

Knew it would come out eventually... Feck. Oh well... I suppose one cannot hide forever from their past.

I had gone kinda-whitehat just a small bit before my arrest, and since my arrest have worked to try "rehabilitate" self by contributing as much as I can to the open source/security community while I remain at liberty to do so.

We *really* were not too bright (oh, the wonders of hindsight) and I have been regretting it since *before* I got caught.

As I have said in the past - going blackhat is probably the most stupid thing you can do. I had to learn that the hard way.

Funny fact: Topiary suspected Sabu was a narc, 'cos he vanished for a while and when he came back he *never* owned another box. He just did the shouty thing.

900913

Last june on sla.ckers.org they were say that Lulzsec might get caught because of copied ASCII art?

http://sla.ckers.org/forum/read.php?11,36420,36420

There might be a chance they were reckless and were broadcasting their IP when c/p'ing it. One always leave tracks. Matter of correlating stuff. Anyway, worth to try if I were the EF/BEE/EYE .^.^.

dlofnep

Darren bud - If you'd like to do an interview with us for iNetizen, drop me a line. I'm not sure how it would work for or against you defence though (not sure about all the legal mumbo jumbo) - so have a think about it first.

I can say in your defence having only met you at CampusCon that you come across as a decent guy, and a likeable lad. I hope it all works out for you in the end.

dlofnep

Indictment is here btw: http://gizmodo.com/5890886/read-the-full-lulzsec-indictments-right-here

dlofnep

Complaint against Donncha Ó Cearrbhail here: http://www.scribd.com/doc/84134910/Cearrbhail-Donncha-Complaint

mayordenis

The big question is why are Fine Gael using web hosting from Arizona? Support the local economy, knobs.

Dublin_Gunner

infodox wrote: »

Knew it would come out eventually... Feck. Oh well... I suppose one cannot hide forever from their past.

I had gone kinda-whitehat just a small bit before my arrest, and since my arrest have worked to try "rehabilitate" self by contributing as much as I can to the open source/security community while I remain at liberty to do so.

We *really* were not too bright (oh, the wonders of hindsight) and I have been regretting it since *before* I got caught.

As I have said in the past - going blackhat is probably the most stupid thing you can do. I had to learn that the hard way.

Funny fact: Topiary suspected Sabu was a narc, 'cos he vanished for a while and when he came back he *never* owned another box. He just did the shouty thing.

Do you mind if I ask 1 question? And its not meant to have any implied answer - it's a genuine curiosity.

Why did you do it?? What compelled you? What did you hope to achieve?

I know that seems like 3 questions, but they are 1 and the same.

Seriously, genuine curiosity. If you can't answer for legal reasons - totally understandable. I honestly just don't get it

syklops

infodox wrote: »

Knew it would come out eventually... Feck. Oh well... I suppose one cannot hide forever from their past.

I had gone kinda-whitehat just a small bit before my arrest, and since my arrest have worked to try "rehabilitate" self by contributing as much as I can to the open source/security community while I remain at liberty to do so.

We *really* were not too bright (oh, the wonders of hindsight) and I have been regretting it since *before* I got caught.

As I have said in the past - going blackhat is probably the most stupid thing you can do. I had to learn that the hard way.

Funny fact: Topiary suspected Sabu was a narc, 'cos he vanished for a while and when he came back he *never* owned another box. He just did the shouty thing.

Echoing dlofnep's words, I can organise an interview with/on opensource.com. Maybe talk about how/why you got involved, how/why you got caught, how you have learnt it was a dumb thing to do and why hacking legally is the way to go. A bit of press attention can't do any harm. The Eff bee Aye want to print you as being l33t d00dz with all your warez, if the media knows your just a dumb kid who fell into it(no offence!) by hanging out in the wrong IRC channel, you mightt get some more sympathy and therefore a bit of empathy.

PM me if your interested.

syklops

Dublin_Gunner wrote: »

Do you mind if I ask 1 question? And its not meant to have any implied answer - it's a genuine curiosity.

Why did you do it?? What compelled you? What did you hope to achieve?

I know that seems like 3 questions, but they are 1 and the same.

Seriously, genuine curiosity. If you can't answer for legal reasons - totally understandable. I honestly just don't get it

Well, theres not really a lot to do in Galway if your not into hurling.

h57xiucj2z946q

Loks like independent.ie are quoting some of his posts:

http://www.independent.ie/national-news/award-winning-trinity-student-is-worlds-top-hacker-claims-the-fbi-3041639.html

LoLth

aaaand the retribution starts:

http://www.theregister.co.uk/2012/03/07/panda_sec_attacked_by_anon/

In a predictable backlash against the sweep that has netted suspected LulzSec members in America and Europe, Anonymous has defaced some Web pages of the security firm Panda Security.

syklops

I know black hat hacking is wrong but its hard not to like a guy who hacks Fox.

obviousTroll

Haven't posted on boards for a bit, but I had to chime in for this one.

I've done some seriously shady things. Nothing like Darren's fine work, but stuff that'd get me locked up. After a big "find" a few months back I became totally paranoid worried about the cops coming to my door. Maybe they still will. Eventually I walked away from the blackhat scene. I even stopped posting on boards totally.

Point being is that Darren's right. Blackhat is a really stupid idea. If you don't get caught, you'll start long to wonder when you will.

dlofnep

There are so many legal ways now to learn the art of hacking.. It pays to stay away from bringing unwanted attention on yourself. I think the majority of people who have dabbled in infosec have engaged in some grey-area things out of curiosity over the years - But I think you learn more if you actually code your own challenges to attack, and toy around with servers at home - It's legal, and you learn alot more about the application from a whitebox and blackbox perspective.

I hope the two lads are given a fair trial here in Ireland. The alleged crime(s) were not committed in the US, and I think that's key when it comes to issues like this.

jumbobreakfast

if it's any consolation, them releasing the hacked forum account details woke me up to the fact that I was using the same username and password on multiple sites (even though unlike dublin gunner above, my details were not compromised).

At least these guys announced that they had hacked the sites so people could go and revise their password policy and change their passwords (in particular if their email password was the same one that they used on the poorly secured forums). Other hacking groups might have just stolen the usernames and passwords and we'd be none the wiser or they might tell the forum administrator who might decide to avoid the scandal and not inform their customers.

Also, who is to blame for the poor security on those forums?

It's kind of like the phone hacking scandal where it could be argued that the phone companies should be partly to blame for using a default password on everyone's phone mailbox. Nobody seems to point the finger that way and although I dont agree with the way these guys went about their hacking binge, it did remind me that my password security is only as secure as the weakest site that I use it on.

dlofnep

It appears that lad has been released without charge.

dlofnep

Gave an interview to the Irish Times there about the case, and the hacking scene in general.

[-0-]

I gave it up when I turned 18. I realized the danger of being sent away and the drama that would be for my family wasn't worth it. I hope these lads get off lightly and don't end up getting a ridiculous sentence when US soldiers who kill innocent people get 4 years behind bars.

firedancer

infodox wrote: »

Knew it would come out eventually... Feck. Oh well... I suppose one cannot hide forever from their past.

I had gone kinda-whitehat just a small bit before my arrest, and since my arrest have worked to try "rehabilitate" self by contributing as much as I can to the open source/security community while I remain at liberty to do so.

We *really* were not too bright (oh, the wonders of hindsight) and I have been regretting it since *before* I got caught.

As I have said in the past - going blackhat is probably the most stupid thing you can do. I had to learn that the hard way.

Funny fact: Topiary suspected Sabu was a narc, 'cos he vanished for a while and when he came back he *never* owned another box. He just did the shouty thing.

Honey , not many people appreciate the bravery and selflessness of you and your colleagues' actions.
I am a mother of three grown up children , two sons, one daughter, all around your age.
I am proud of you.
Please tell your mother she has a very special son.

You gave us all a peek into the massive corruption going on behind closed doors , forced us to acknowledge our slavery, and frightened the 1%.

If this country has any gumption , foresight, or ability to see the bigger picture in its' 21 to 29 yr old population, there will be riots , dissent, revolution on the streets of all our major cities in protest against you and your brave colleague's extradition from Eire.

This may well be a catalyst for change in our country and Europe together.

Big change.

I know you will be alright.
Have no fear, the intelligent, dormant Irish spirit is awakening and is right behind you all the way.

Dublin_Gunner

firedancer wrote: »

Honey , not many people appreciate the bravery.. [snip]...behind you all the way.

Sounds like the start of an e-Rising or e-Rebellion!

Fair play

Doc Ruby

firedancer wrote: »

Honey , not many people appreciate the bravery and selflessness of you and your colleagues' actions.
I am a mother of three grown up children , two sons, one daughter, all around your age.
I am proud of you.
Please tell your mother she has a very special son.

You gave us all a peek into the massive corruption going on behind closed doors , forced us to acknowledge our slavery, and frightened the 1%.

If this country has any gumption , foresight, or ability to see the bigger picture in its' 21 to 29 yr old population, there will be riots , dissent, revolution on the streets of all our major cities in protest against you and your brave colleague's extradition from Eire.

This may well be a catalyst for change in our country and Europe together.

Big change.

I know you will be alright.
Have no fear, the intelligent, dormant Irish spirit is awakening and is right behind you all the way.

Just in case anyone is reading this nonsense and thinking about doing a spot of hacking and ruining their own lives, don't. There's all manner of clowns on the internet who are happy to encourage others into foolish acts but fade away as soon as there's any real trouble.

900913

Panda security Facebook.
https://www.facebook.com/PandaUSA?ref=ts

On March 6th the hacking group LulzSec, part of Anonymous, obtained access to a Panda Security webserver hosted outside of the Panda Security internal network. This server was used only for marketing campaigns and to host some of the company’s blogs. Neither the main website www.pandasecurity.com nor www.cloudantivirus.com were affected in the attack. The attack did not breach Panda Security’s internal network and neither source code, update servers nor customer data was accessed. The only information accessed was related to marketing campaigns such as landing pages and some obsolete credentials, including supposed credentials for employees that have not been working at Panda for over five years.

We continue investigating the cause of the intrusion and will provide more details as soon as they become available. Meanwhile we assure all our customers and partners that none of their information has been compromised and that our products and services continue functioning as normal.

900913

LulzSec hacker opens up over drinks, says FBI informant leader 'took one for team'

The notorious hacker who helped the FBI bring down his worldwide empire is a martyr who took the rap for the crimes of his colleagues, a LulzSec member told FoxNews.com over beers at a Manhattan dive bar, just hours after learning the news about the shadowy figure known online as “Sabu.”
“People are freaking out. Everyone’s totally freaking out,” the hacker said. “Everyone’s in shock.”
While some see Sabu, whose real name is Hector Xavier Monsegur, as a Judas, it seemed that at least in the early shellshocked hours, Sabu’s followers remained loyal to their leader.
“Bill Gates, Steve Jobs, Sabu -- I mean of our generation, he’s going to remembered in history,” the LulzSec hacker said, nursing a beer hours after learning the organization had been dealt the cruelest blow of all. “No one is going to forget him. He’s going to be remembered in history.”
LulzSec is believed responsible for computer attacks that crippled banks, multi-national corporations and even governments. Fox, Sony and MasterCard were among its corporate scalps, and the international collective also mounted damaging attacks on servers of Yemen, Zimbabwe and even the CIA, taunting its targets from afar as it brought their websites down.

Full story:
http://www.foxnews.com/scitech/2012/03/07/lulzsec-hacker-spills-over-drinks/

prisoner42

just found this looks like they could do 20 years http://www.galwaynews.ie/24660-galway-hacker-faces-20-years-if-convicted

that's a ridiculous charge I'd prefer to seem them tried in Ireland they would probably just get a slap on the wrist.

Ireland better fight deportation Everyone just keeps rolling over to the Americans I'm sick of them policing the globe.

Is there anything we can do to stop them from getting there hands on them? or did we sign that away with some other treaty we didn't get to vote on.

Ficheall

dlofnep wrote: »

It appears that lad has been released without charge.

What lad?? And have you a link?

[-0-]

Ficheall wrote: »

What lad?? And have you a link?

Seriously? It's all over the net. Check any news source.

900913

The guards probably didn't charge them cause the Feds will. I don't think you can get charged with the same offence twice?

firedancer

Ficheall wrote: »

What lad?? And have you a link?

some background here

http://www.itworld.com/security/256182/fbi-nabs-lulzsec-leaders-spokesman-sabu-revealed-informant

and regarding our internet freedoms this is what is starting in USA:

http://www.itworld.com/security/256350/long-arm-us-law-overreaches-doj-assumes-right-shuts-down-legal-foreign-sites

dlofnep

Interview article posted here: http://www.irishtimes.com/newspaper/weekend/2012/0310/1224313099645.html

Small point of note: Editor must have picked up web-hacker instead of wep-cracker over the phone in the interview.

KyussBishop

Another good article here:
http://www.independent.ie/opinion/columnists/colum-kenny/colum-kenny-we-need-global-treaties-to-match-world-realities-3046239.html

dlofnep

Good article. Another in today's Sunday Times, but I haven't had a chance to read it. Usually don't buy the times, but I'm quoted in it - so I might have to try get a free copy off someone

KyussBishop

Heh, ah as good a reason as any to buy it; nice

Biggins

dlofnep wrote: »

Good article. Another in today's Sunday Times, but I haven't had a chance to read it. Usually don't buy the times, but I'm quoted in it - so I might have to try get a free copy off someone

UNMASKED

There was a lot of laughter on the conference call between British police and an FBI agent as they waited for a more senior American officer to join them. “What about that McDonald’s in the Pentagon, hey?” asked Stewart Garrick, a British officer. “I’ve told so many people [it’s there] but nobody believes me.”

The laughter died down when Tim Lauster, a special agent co-ordinating international investigations into the hacking groups Anonymous and LulzSec, logged on. LulzSec, which launched cyber attacks just for fun (“lulz” is short for laughs out loud), was attacking high-profile companies with spectacular results.

After updating the Americans about cases in Britain, Garrick said they had intelligence about two hackers, Palladium and Pwnsauce, that they wanted to share with Irish authorities. “Is there anybody on from Ireland?” asked Lauster. Silence. The FBI agent concluded there was not, and the conversation moved on.

The request for “anybody from Ireland” must have caused Donncha Ó Cearbhaill to smile if, as the FBI alleges, the Trinity College Dublin student was secretly recording the conversation before releasing it on YouTube.

http://www.thesundaytimes.co.uk/sto/news/ireland/article991499.ece

KyussBishop

Post up on Slashdot there, linking an article focusing on the two Irish LulzSec members:
http://it.slashdot.org/story/12/03/11/2011224/accused-lulzsec-members-left-trail-of-clues-online

Linked article:
https://threatpost.com/en_us/blogs/mask-gone-anonymous-leaders-left-big-footprint-online-030912

_AVALANCHE_

LulzSec 'hacker' Ryan Cleary indicted over attacks on television networks

http://www.guardian.co.uk/technology/2012/jun/15/lulzsec-ryan-cleary-escape-extradition-us

900913

I think if he doesn't want to get arrested again he should go SOLO and call himself OneZsec.

*edit

The FBI Conference Call (on u tube) was freaky, allegedly this lad hacked into a conference call with the feds and the UK cyber squad,
Who where investigating him in there conversation.

100%


google: site:youtube.com "fbi conference call"

infodox

I find it somewhat amusing how since then the $(silly_name).Sec naming convention for "haxing crews" has taken off. Both very, very, sad, and very, very, amusing. They are all misguided, thinking they will do "good" by leaking personal data all over the tubes. It does no good - just leads to arrest, guilt, and drama. And the eventual "****, I was a moron!". I know about that.

KyussBishop

A lot of it was pointless and simply harmful, but some good things came out of it like HBGary and Stratfor, to name two (not defending the whole by any means, just these two examples I can think of which contributed knowledge in public interest).

A large part of the boost in these groups and the initial massive escalation in attacks came in the wake of the US crackdown on WikiLeaks; whilst many of anon groups actions have been outright illegal and harmful/stupid, it's nonetheless good to have seen such an enormous online backlash in defense of WikiLeaks.

tom.padraig

I dont think they will get them out of Ireland, anyone got any update on court dates?

RUCKING FETARD

LulzSec hacker Ryan Cleary admits hacking into CIA and Pentagon

http://www.theverge.com/2012/6/25/3116357/uk-lulzsec-two-plead-guilty-ddos

RUCKING FETARD

Not LulzSec lad but relevant...
UK Home Office confirms it has abandoned Richard O’Dwyer to US extradition

A 24-year-old British citizen’s extradition to the US to face copyright infringement charges is not to be contested by the UK Home Office, it was confirmed today. The plight of student Richard O’Dwyer has been described by Wikipedia founder Jimmy Wales as the human face of the battle between the content industry and the interests of the general public.

Hacking into Pentagon and bringing down Sony-->you're grand, you can be trialed in UK.

Linking to Copyright Material, you're fuked.

fkface

He's an easy target and it's obviously some hollywood lobbyists behind his extradition, they want to make an example of him to others.
We should give him asylum in Ireland, maybe the UK Home Office won't bother to request him back

Surely a man with O'Dwyer in his name has Irish roots somewhere? Give that man a passport!

It's bloody disgrace how politics works, where ever there's money involved, you know there's corruption somewhere.
They'd invest more time and money prosecuting Mr.O'Dwyer than hunting down child traffickers or pedophile rings on the internet.

ifah

Bumping this as some of the crew are together today for first time - Q&A in London today - http://www.royalcourttheatre.com/whats-on/the-big-idea-teh-internet-is-serious-business

There's supposed to be a live feed which I'll link later once it's been released.

Dermot Illogical

On now
http://www.royalcourttheatre.com/thebigidealive/

ifah

Dermot Illogical wrote: »

On now
http://www.royalcourttheatre.com/thebigidealive/

got stuck in work and missed this - thanks for link.