News for hackers. Stuff that matters.
Re:Ransomware group debuts searchable victim data by mig39 on Tuesday June 14, 2022 @05:29PM (#31746325)
How are they able to host a website on the public internet like that, without it being taken down? Is it in Russia or something?
Re:Ransomware group debuts searchable victim data by ActorNightly on Wednesday June 15, 2022 @03:40AM (#31750167)
Id be more concerned with the website being able to be taken down, i.e ISPs deciding that they are not going to route traffic to a particular IP address.
Re:Ransomware group debuts searchable victim data by night-rider on Tuesday June 14, 2022 @09:24PM (#31748096)
This has me thinking of a mitigation technique and that is: deliberately slow down the Internet connection of your company/vendor/whatever such that large volumes of data take an age to grab. Just like setting your language to Russian on the OS to stop ransomware from running (an old trick). Fast connections are a liability in some cases and in malware ridden machines it just makes exfiltration easier. Not saying damage won’t be done, but in some cases deliberately throttling connection speed is a win.
Re:Ransomware group debuts searchable victim data by melony on Tuesday June 14, 2022 @10:24PM (#31748434)
Uploads are already slower than downloads for residential.
Re:Ransomware group debuts searchable victim data by dontbenebby on Tuesday June 14, 2022 @06:01PM (#31746603)
Well they're hosting it directly, but there's a ton of paid services that let you do this.

On my end I'd love to be able to know how those middlemen make use of the data of who's asking for what... I always avoided tools like Shodan or data brokers while sticking to Tor and public wifi when possible because what you're looking up can tell a lot.

Re:Ransomware group debuts searchable victim data by gigaflop on Tuesday June 14, 2022 @04:35PM (#31745703)
So, like HaveIBeenPwned, but direct from the source?
Re:Ransomware group debuts searchable victim data by nonrandomstring on Tuesday June 14, 2022 @05:07PM (#31746120)
I think not. More like Shodan for data. HaveIBeenPwned ostensibly helps victims. This show is just upping the ante and moving to open web visibility. What use is blackmailing anyone if you haven't got an entertainments platform to deliver on? They must be extraordinarily confident they are untouchable. If it helps anyone it's as an ironic side effect. Think of this as the NSA but with doors wide open and everything for sale for the lols.
Re:Ransomware group debuts searchable victim data by CrazyMusicians on Tuesday June 14, 2022 @04:42PM (#31745776)
Bingo! Their tagline should be, if you're here, you already know you're screwed.
Re:Ransomware group debuts searchable victim data by gigaflop on Tuesday June 14, 2022 @04:48PM (#31745849)
I can't help but wonder if they're using the inputs for potential phishing attacks.

For certain high-value targets, perhaps they're lying, with the intent of getting them to initiate some sort of compromised password reset?

Re:Ransomware group debuts searchable victim data by Agamus on Tuesday June 14, 2022 @05:03PM (#31746055)
Bingo! Their tagline should be, come here to get screwed!
Re:Ransomware group debuts searchable victim data by c0balt on Tuesday June 14, 2022 @05:14PM (#31746185)
... A line that is unfortunately already taken by another industry. Though adjusting it to "get pwned" should be alright.