"Dude why am I getting a different friend request from you?" - some guy I know on Facebook
Why indeed. A quick search for myself on Facebook later, and....
......hello, future blog entry!
A quick rummage around the fake profile on the bottom reveals some curious things. For example,
Most of the information above is wrong. Even better than that:
.....I'm doing what with who now? Seems I can't keep my hands off the ladies, because...
I'm just THAT memorable! Well, that or she was sent a completely fake "We knew each other because.." mailblast. Finally, it appears I have a penchant for turning up on photograph pages and making random comments. Namely:
Go web go! So yeah, if you happen to get any odd things sent to you on Facebook from "Chris Boyd" (like, I rub myself in lard and think of you at night or I am your baby-daddy) then it's probably best to ignore it.
There are two idiots on a forum arguing about who hacked what. One kid claims he "hacked Yahoo" and took them offline for ten minutes. The other guy apparently "took down Scientology's website".......and then he wheels out the ultimate leet hax insult:
When I grow up, I want to be an ethnical hacker too.
First, we had the beatdown stick. Then, we had the comical reactions from the guy running the hacking / cracking / serial numbers site.
Naturally enough, the site came back - which meant an extra special visit from Santa.
At this point, you want to see the latest reaction from the leader of this little community of fools, right? Am I right?
Well, here you go:
....yes, you can indeed "have me arrested" for reporting network abuse and then watching those networks kick you off.
Also, hahaha.
I guess this clown thinks I'm using leet hax to take all these stupid websites down, which pretty much speaks volumes for his attitude in general - the thought obviously never even crossed his mind that he might be getting endlessly shut down because what his little merry band does is, you know, completely illegal.
Ah well. The other humorous thing here is that he's only rambling on about the forum - at this point, he doesn't seem to realise that his precious top level domain (that he used to use for redirections galore) is toast too. Just wait till he sets up another useless forum and tries to log into his domain name admin panel and......bahahahahahaha.
I guess I'll be getting more messages of peace and goodwill via MSN....
As long as it takes, I will keep beating that forum into the ground until it is no more. The site is currently down - thanks to all who submitted a ticket, sent an email, jumped into live chat.
Check it out - his account hasn't just been "suspended" this time - he's been deleted altogether according to the screenshot.
...and put a new collection of Admins back in place, one of them is the idiot who was only recently asking for credit card hacks - and the site is already filling up with the same old junk that was there previously. Here's a request for serials:
...and only an hour or so ago....
In addition, it's apparent that Helgi himself is still paying for the forum to keep running:
.....once more, I smell shenanigans.
Websitetoolbox refuse to keep this site dead and buried, and one can only wonder what sort of operation allows this to continue. *removes request to contact Websitetoolbox and open tickets up etc because it's no longer needed*
....also, swears galore. Turn away now if you don't like swears.
Some observations:
1) He is an idiot.
2) I'm "trying to virus him"? Is this where I was all "like bleh"?
3) He "doesn't care" about his site, yet he keeps SEVEN BACKUPS?Truly, my Internet idiot-o-meter just went off the scale. Saying this kid does indeed care would be like Captain Obvious saying someone was falling to their de -
I ask because this appeared on t'Internets late last night, and vanished soon after:
...now, "because cops came" could be his idiotic way of saying OMFG SOMEONE TOOK ALL OUR SITES DOWN, except that he made a more detailed post:
"Yes I was like you, Police came - so I was bleh"??
....wow, I wish I could be all "like bleh" if the police came for me.
However, this raises interesting questions. Did cops indeed come crashing through the windows at 4AM for a bunch of these kids? Seems like an odd thing to say if he's just making it up, but who knows.
Also, hahaha at that "I had fun even though you keylogged me" thing.
Bruce Lee understood that there was no problem on this Earth that could not be solved by repeatedly punching someone in the face until they stopped getting up. With that in mind, I bring you an exercise in repeatedly punching people in the face.
Let us begin by looking at a wonderful missive that caught my eye on a supa-leet hax0ring forum this morning:
.....yes, yes you did.
See, Helgis forum had something of a bitter - and Hell, let's throw in twisted - group of rivals.
...I have no idea why their forum says "X Factor" at the top. I can only imagine someone there has the hots for Simon Cowell and B-rate singers.
They don't like Helgi very much.
...wow, Axxo has issues.
So anyway, their forum. What was it? Well, you guessed it - Helgi-lite, with a bunch of hacking, cracking and phish links all over the place. Here's a cracked version of NOD32:
Here's a bunch of cracked programs up for grabs including Photoshop, Dreamweaver etc:
Some Habbo hacking apps:
A "Date of Birth Brute Forcer":
....and, finally, a ton of stolen username / password combinations. Some mention gaming, some of them give no indication what they're used for.
....call it a hunch, but I don't think this is going to end well for these kids.
Did I mention they didn't like Helgi much? From the FAQ:
.....ouch.
Rather hilariously, they were quick to take credit for "hacking" Helgis forum and taking it over.
Luckily for them, I hate everybody so when I sat down this morning and thought, well, what shall I do today before breakfast? The answer was simple.
Now you see it....
.......and now you don't.
.....like I said......Bruce Lee.
Shall we go pay the owner of the forum a little visit? Helgis equal and opposite number? Sure we will. He wasn't online when I logged into MSN, so I took the liberty of leaving him my calling card:
Shall we jump into their chatroom?
........yeah, you knew it was coming. Now, I'm sure these kids probably aren't too happy about me decimating another one of their little happy-crack communities. They'll likely be back on yet another board somewhere soon. Hell, they're probably already rebuilding somewhere right now and then we can go do this all over again. But the important thing to remember here is contained in the below panel, which - I think - beautifully illustrates the current state of play between myself and these kids:
I first reported this forum via live chat on (or around) November 28th. I was thanked for reporting it, but after a day or so, it was still there. I jumped into live chat, and was handed a response similar to what this lady received when she complained about the forum:
.....yikes. Some more back and forth antics commenced, and I submitted a ticket on November 30th. Eventually - December 3rd - I saw this appear on the ticket:
"Hello Christopher,
Thank you for contacting Website Toolbox Support.
I apologize for a delayed response.
Services for the concerned account will soon be suspended.
Thank you, Rahul Singh"
...."Soon"? Well okay, let's see how long soon is. Apparently, soon is four days. And then, the site was dead for about forty minutes or less before springing back into life. This is what happened next:
chris boyd: Hello, I received the email regarding a website being cancelled - however the site appears to be back online? Rahul: Well, yes that stands true for now, this guy has asked us for 1 days time to remove all illegal postings and contents from the message board. Rahul: That is just what we have given him. Rahul: Failing to do so, we will permanently delete the account.
chris boyd: okay - but as far as im aware, you dont run support over the weekend, so either way the site would still be live until monday? Rahul: We do not have live support available on weekends, but you can check with me on my email ID, I have sent you a mail from. chris boyd: okay - so he has until saturday afternoon? Rahul: Yes. chris boyd: okay, if there is still illegal content there on saturday afternoon I will catalogue it and send it to you - and you will be able to action the cancellation? Rahul: Yes, I have been authorized to do so in this case.
So it gets to Saturday and nothing has happened. Nothing has been deleted - indeed, fresh content has been thrown onto the forum of an extremely dubious nature. I submit my email as requested, containing no less than 38 examples of total website nastiness - keyloggers, serials, phishing, hacking tools....oh, and requests for credit card details. From 12 year old kids.
So anyway - back to the Email. A few hours go by, and nothing has happened. I check the forum - and what the Hell? *Every* item I submitted on the ticket has vanished. Could Helgi somehow have managed to decide to delete every single item I submitted (while at the same time failing to clean up all the other hacking threads I didn't submit?)
Something isn't right here.
So I donned my "I'm a sixteen year old kid, lol" disguise and wondered if Helgi would actually fall for me snooping around to see if there had been any outside interference with regards the magical deletion of all those threads. Remember, the site had been brought back because Helgi had volunteered to clean up the forum in a 24 hour period.
Okay, here we go. At this point, I'm just guessing - we need a name to appear or I'm all out of luck.
But as luck would have it....
......I'm the Deadliest Man Alive, so it wasn't an issue. Could I go as far as to obtain a day / time from him with regards when the demand to "delete all this stuff" was made?
.....yeah, I guess I could. Thanks, Helgi. You've been awesome - and I've been spectacular.
So now I've confirmed it. And what do we do when we confirm things, kids? That's right, we wait until 3PM in the afternoon then post this in a live chat support box:
"See Rahul, I have a problem. My website articles are read by 7,000+ people a day. My work is syndicated in major tech press all the time. When I write something, the whole technology world listens and I get interviewed over....and over....and over again.
And in one hour or so, I'm publishing an article on how your company has handled the supposed "takedown" of this website so far:
http://www.websitetoolbox.com/mb/helgib?
and your seeming total reluctance to do something about this. To a large degree, the next action you take will influence the shape of that writeup.
In our last chat, you said "this guy has asked us for 1 days time to remove all illegal postings and contents from the message board. Rahul: That is just what we have given him. Rahul: Failing to do so, we will permanently delete the account".
On satuday, I sent you a list of 38 topics containing phishing, serial numbers and hacking tools because he hadn't deleted the content. Then, mysteriously, ALL of those topics suddenly vanished. Now, there are two problems with this.
The first, is that the 38 links I gave you were NOT the sum total of the illegal content on that board - nor has the site owner done anything to discourage fresh posting of illegal activity. In the last 2 days, people have posted asking for hacked credit card details, skype hacks and MORE hacking programs - in addition to numerous other threads still on the site containing serials, hacks and cracking tools. A clear indication that you have no real idea what these people are doing.
The second, and most serious problem here - is that the site owner DID NOT REMOVE THE FORUM LINKS VOLUNTARILY - YOU TOLD HIM TO REMOVE THEM. I know, because he said so and named you:
So you picked up my email, DIDN'T bother to reply back and then contacted the forum owner to *force him* to do something he was never going to do otherwise, purely so he can keep his account running.
In effect, you never had any intention to cancel the forum account because you yourself directly intervened to make him delete the content I reported so he could continue to host with you. This is NOT "the forum owner requesting a day to take down illegal content", this is YOU causing certain forum threads to be removed behind the scenes to make it look like HE did it in his supposed "voluntary 24 hour clean up".
If you had taken no action, neither would he - and material is STILL being posted there regardless which now includes people requesting credit card numbers and hacks.
To an outside observer, you almost look complicit in these activities.
So here it is - you said if there is ANY illegal content still onsite, you would cancel the forum. Not only is there still plenty of illegal content onsite, there is FRESH material being posted in relation to requests for stolen credit card details. They have no intention of stopping.
You said you have been authorised to cancel the site - as there are now requests for hacked credit card details appearing on the site, if you do not cancel it within the next 60 minutes, I am forwarding the information including the screenshots above to the federal authorities, the local CERT for your area and my contacts at your upstream provider, AT&T. Consider that the screenshots I have obtained of your "intervention" behind the scenes to clean up the forum to allow the account to continue, along with the evidence of credit card hacking and trojan spreading will NOT look good with any of the above parties.
You have one hour to delete the forum before I action the above. I'm no longer interested in the so-called "procedures" you supposedly follow to delete a site, because you suspended the site once, and you can do it again - only in light of the continued content posted to that site, nothing less than a full and permanent takedown will suffice."
I then went off to do a Podcast for SCMagazine on the perils of Myspace. Meanwhile, five minutes past 3 and no reply...
Fifteen minutes past 3 and no reply....
I got bored of screenshots while waiting, so let's fast forward to Ten to Four with no reply....
.....is the end for The Goddamn Batman? Well, not really because this appeared at exactly 4:00PM:
So, just before I went to bed last night after a job well done - a job that's taken a week or so to get done, after endless emails, live support chats and God knows what else (from myself and a number of other individuals) - I have one final check to make sure Helgis backup forum is dead and buried and....Holy Plot-twist, Batman...the damn thing is back online!
I jumped into a Live Chat with the hosts...again....check this out:
chris boyd: Hello, I received the email regarding http://www.websitetoolbox.com/mb/helgib? being cancelled - however the site appears to be back online? Rahul: Well, yes that stands true for now, this guy has asked us for 1 days time to remove all illegal postings and contents from the message board. Rahul: That is just what we have given him. Rahul: Failing to do so, we will permanently delete the account.
That's great - except, they don't do weekend support. Do they think I'm stupid? I hope not...
chris boyd: okay - but as far as im aware, you dont run support over the weekend, so either way the site would still be live until monday? Rahul: We do not have live support available on weekends, but you can check with me on my email ID, I have sent you a mail from. chris boyd: okay - so he has until saturday afternoon? Rahul: Yes. chris boyd: okay, if there is still illegal content there on saturday afternoon I will catalogue it and send it to you - and you will be able to action the cancellation? Rahul: Yes, I have been authorized to do so in this case.
Considering they way these guys have dealt with this so far, I can't say I'm surprised. I did expect to have to go back into battle with them, but not this quickly. Sigh. There'll be more on the way this host has handled the deletion of this account next week, but for now I'll lob in a choice quote from Helgi, courtesy of Sandi:
"Okey everyone. From now on there will be no Pishing (fakelogin) noob crap! Just use google if you want that sh*t, but not here! and no more Hacking Computers! that's gay and you can be caught by the police. I deleted all that sh*t of my PC, and my PC is now faster and better. No more illegal things! Only this sh*t leads to Trojan's and viruses!
Thank You.
BTW: If your wondering why i gave up this message is because i got caught and i had one more chance, and my computer is better now."
....of course, the forum is still swimming in all sorts of nasty things. I wouldn't worry too much, because I was actually kinda hoping the host would do something like this - I've been itching for an excuse to cover the way they apparently handle leet kiddiez sites like this, and now I have one.
I guess Helgi didn't think I knew about the final backup of the forum I took out a few days ago. There it lurked, chugging along since Monday, spreading garbage, encouraging leetness and mad hax.
For the past week or so, I've been following a bunch of supposedly uber-cool hackers getting their kicks from phishing, social engineering and fake hacking programs. They make money from their scummery and make no attempts to hide their identities. Their ages ranged from 11 to 13 years old.
This kinda wound me up.
I asked if you thought they should be slapped about a bit - the overwhelming vote was cast in favour of "Yes please Mr Internet Nasty Man".
Well, it's time to break out the biff-bam-pow so without further ado, let's get on with it. This particular escapade - there'll be more to follow - was about shutting down sources of income and phishery-pokery. More importantly, it was also about hurling a vague sense of panic and WTF into the happy little scumpit of a world these kids had created for themselves. Nothing works better than a little fear and terror, right?
First of all, I thought I'd kick things off by popping into their leet hax chatroom to outline how things were going to be going down for the evening:
....as you might expect, this was met with confused silence. So far, so good. Then I thought I'd better go get the first Phish page of the night shut down:
...but not before I paid the creator a little visit on MSN. I was going to go for subtlety, mystery, something that would make them stop and think in sheer terror and dread of what the rest of the night would hold.
Instead, I went for a big drawing of a fish. Well, it made me laugh.Time to crack the first skull of the night. This site had been used as storage for stolen passwords since at least the start of November:
....and had a big old pile of passwords lurking within.
.....yes, that last one was mine. And so it came to pass, that less than an hour later, the lollercakes were indeed released with spectacular results:
Those 404 Error / your-phish-base-just-got-bombed are a sight to behold, aren't they?I left him a little clue that his stockpile of stolen accounts just went bye-bye:
.....eheheh. At this point, I went off and nobbled a bunch of other phishing pages - most of which related to MMORPGs - and went to their chat room to put my big, blood stained feet up:
......finally, the penny was starting to drop with some of them. However, I knew some couldn't resist the lure of being asspipes on the internet, and sure enough, one of these idiots had replaced their hosed phish with......another phish, rather stupidly with the same host who already whacked them a few hours earlier.
.....yes, amazing.Not as amazing as your phish page about to go up in smoke for the second time, kid. Check it out, with the aid of some awesome mathematics:
PLUSEQUALS ...yes, the replacement Phish page lasted a total of FOUR MINUTES.
And so it went, back and forth, with me launching a sustained, systematic and simultaneous assault on their phish pages, their domain space, web accounts, ISPs, forums, MSN addresses and chat rings all at once. You name it, for 14 glorious hours I was pounding it. In the face. With a brick.
Some more random canceled accounts / phish pages / whatever: Biff!
Bam!Pow!Shall we check in at the chatroom again?
....oh God, so much fun.However, now it was time to turn my attention to the ringleader - our pal Helgi. It'd be a major shame if all his crappy hacking programs were removed from Payloadz, right?....whoops. Hey, it'd be an even bigger shame if I just went and had his entire user account deleted too, wouldn't it?
....remember kids, there's heartless, then there's me. This is probably a good time to check back in at the chatroom:
.....these kids just don't learn, do they?But wait, we ain't done yet. There's toppling them like dominoes, and there's driving the dominoes into the ground with a fifty tons of concrete. Do I spy yet another boob selling crap?
....why yes, I do. And what happens when we see boobs selling crap?First, we hit them with cryptic awesomeness via MSN - I'm going for comic book geekery here:
....then we take it all down, preferably to Chinatown:
Damn, this is so much fun. SO much fun. Shall we see if the kidz in the chatroom are enjoying themselves?
Note that they called me Mister Batman, raising this to all new levels of awesome. I'd laugh at them some more, but right now....
.....I have to take out the trash once again.....are we making with the biff-bam-pow yet? You bet. These kids just don't know when to give up, do they? Imagine how awesome it was to see this post appear on their forum:
....seconds earlier, he'd just thrown up a new page:
...selling all sorts of dubious junk:
Exactly nine minutes after his forum post....
.....both his redirection URL and his webspace are toast. As Vader would say, all too easy. Oh, I haven't finished with Helgi yet either. Here he is, phishing his own forum members:
...sigh. Good job I took the liberty of hosing all your web accounts - here's a few for the family album:
Categories
