[ISN] Vigilantes Hack Criminal Carding Forum and Expose Underground Dealings

From: InfoSec News <alerts_at_private>
Date: Thu, 20 May 2010 00:35:54 -0500 (CDT)
http://www.wired.com/threatlevel/2010/05/carderscc/

By Kim Zetter
Threat Level
Wired.com
May 19, 2010

A German cybercrime forum was hacked by attackers who have exposed the 
underground dealings of the criminal denizens. The hackers snagged the 
database containing what appears to be all the private correspondence of 
the forum members, and posted it to the web.

The hackers also posted information on the IP addresses forum members 
used when they signed up for membership, noting that most of the 
administrators and moderators on the site didn't use a proxy to access 
it. They also posted usernames, e-mail addresses and some cracked 
passwords of members, who number 5,000. The data was posted to the 
RapidShare file-trading site.

    Here we go. Some crazy combination of username:password:plain:mail. 
    I hope you guys dont mind if we did not crack all of them. Passwords 
    are stored as sha1($username.$pass). Feel free to bruteforce the 
    rest.

    DEIM0S:97e36bdc7778264c9ca785b86beda24a277c4713::deimos_at_private 
    Nowo:bdda38c461e2bcaf54c8c0d0adf9b946::nowolix_at_private 
    MoneyBoss:2dca6800fdf6ea230f48ba307b68e5bf::asdfg-1337_at_private 
    sPloiT:5f2c0db92c5c716a2e4e4e55bca6b995::cadazadmin_at_private 
    Moq:da2384e118f6d9aca8c0d832fdf28c90c4218c8a:fenerbahce::Mehmet-43-_at_hotmail.de 
    cyberhood:29b0b59fd185b3b4a7072fb374e282e19cdc3361::soh.cyberhood_at_private

The hack was first reported by Brian Krebs.

Carders.cc was hacked through a poorly secured web server, according to 
the attackers, who disclosed their method and reason for hacking the 
forum in an e-zine they published with one of the data files:

[...]


_______________________________________________
Best Selling Security Books and More!
Shop InfoSec News
http://www.shopinfosecnews.org/ 
Received on Wed May 19 2010 - 22:35:54 PDT

This archive was generated by hypermail 2.2.0 : Wed May 19 2010 - 22:45:13 PDT