News LulzSec takes aim at Brink and Bethesda

Ha ha! Quite possibly, mate! We definitely agree on that one!

 

Hackers turn theirs sights to companies people like and it's suddenly cyber terrorism and needs to stop, funny that.

Plain and simple is there are no evil corporations being targetted by the rebel hacking groups fighting for the common man. There are only hackers and victims, the sooner people realize that they are all potential victims the better.

Exactly, very glad to see someone else sees this.

Mob mentality at its best, the hackers seem to be on the same side as the consumers then everyone acts shocked when they really aren't. If I want to support Sony, Nintendo, Codemasters, Berg&Black, Bethesda and Brink then that's my choice, no need for people to try and stop me from making that choice by attacking them.

 

it's the clients using online banking

users are really tools, they don't understand anything about security in their own lans and then point at the banks when someone steals all their passwords, accesses everything they have

I knew a guy who used to keep 3 character passwords back in the late 90's.. he used to brag about how much he knew until I made his rig tell him a bunch of **** using microsoft dictation.. unfortunately he found out it was me- but oh well, I was new to being stealthy.. more excited to hear 'grandma is going to beat that ass' coming out his speakers and imagining the look on his face

there's even the snowball effect with users who keep the same password for everything.. on sites like this, it doesn't matter (unless you care if someone slanders you on a forum) but on sites that link to your money you should always go with good (numbers and upper/lowercase) long passwords

basic stuff too like when logging in.. hover over next to the url and make sure ssl is'nt stripped by someone sitting in your lan.. be sure you have no trojans/keygens running and you have a good firewall that warns of lan and wan access and your able to set at least basic rules.. uac should be set all the way up, not the default in 7

anyone who knows what they're doing exploits the easy first.. and since a majority of people are chickenheads, it's too easy.. for example the stuff I have/wrote personally, you wouldn't even see a slowdown in your network or even know I was monitoring you until I started to strip ssl.. then it would take someone who actually looks when logging in, to see if ssl is working

I like monitoring myself because it's stealth.. you see where the persons going and get passwords like facebook that are unencrypted and they have no clue anything is happening.. stripping encryption relies on the victim being unaware- or even someone who's not a tool and is just unaware to look if the url starts with https or http

that is all done without any trojans or compromising the rigs.. it's done by exploiting the way networks work.. like sitting outside your house on the telephone pole listening in on all your coversations

in defense of these guys.. they found a hole- they got excited.. heck I doubt anyone could resist snooping around.. it's obviously something not on the grid yet.. that's the difference between a infosec hack who's paid off, fat and happy and one who's passionate

it's not that hard really to get in good habits without being a technical person.. that's what should be given to new users..

if bathesda can't get it together what chance does the little guy have

 

Personally, and rather selfishly, I hope Bethesda get royally screwed by them. Myself and two other friends wasted £90 between us on Brink and even now, many weeks after launch, we still can't play because of crippling sound problems and dysfunctional (and sometimes completely non-functional) AI/bots.

"Game" won't give any of us refunds because we've registered our Steam keys (obviously, otherwise we wouldn't know the game didn't work) and we're just out of pocket, owning a product we can't even use. That's theft, in my book, so I hope lulzsec do their worst to Bethesda...and then go on to target Game.

</bitter_rant>

 

If you could manage it lulz, I'd like some money putting into my bank account, kthx.

 

The hackers will get caught, annoyomus members have been caught so will they.

 

June 13th, 2011
http://pastebin.com/i5M0LB58

RC: irc.lulzco.org (channel #LulzSec | port 6697 for SSL)
BitCoin donations: 176LRX4WRWD5LWDMbhr94ptb2MW9varCZP
Twitter: @LulzSec
Contact us: 614-LULZSEC

. /$$ /$$ /$$$$$$
.| $$ | $$ /$$__ $$
.| $$ /$$ /$$| $$ /$$$$$$$$| $$ \__/ /$$$$$$ /$$$$$$$
.| $$ | $$ | $$| $$|____ /$$/| $$$$$$ /$$__ $$ /$$_____/
.| $$ | $$ | $$| $$ /$$$$/ \____ $$| $$$$$$$$| $$
.| $$ | $$ | $$| $$ /$$__/ /$$ \ $$| $$_____/| $$
.| $$$$$$$$| $$$$$$/| $$ /$$$$$$$$| $$$$$$/| $$$$$$$| $$$$$$.$
.|________/ \______/ |__/|________/ \______/ \_______/ \_______/
//Laughing at your security since 2011!

.-- .-""-.
. ) ( )
. ( ) (
. / )
. (_ _) 0_,-.__
. (_ )_ |_.-._/
. ( ) |lulz..\
. (__) |__--_/
. |'' ``\ |
. | [Lulz] \ | /b/
. | \ ,,,---===?A`\ | ,==y'
. ___,,,,,---==""\ |M] \ | ;|\ |>
. _ _ \ ___,|H,,---==""""bno,
. o O (_) (_) \ / _ AWAW/
. / _(+)_ dMM/
. \@_,,,,,,---==" \ \\|// MW/
.--''''" === d/
. // SET SAIL FOR FAIL!
. ,'_________________________
. \ \ \ \ ,/~~~~~~~~~~~~~~~~~~~~~~~~~~~
. _____ ,' ~~~ .-""-.~~~~~~ .-""-.
. .-""-. ///==--- /`-._ ..-' -.__..-'
. `-.__..-' =====\\\\\\ V/ .---\.
. ~~~~~~~~~~~~, _',--/_.\ .-""-.
. .-""-.___` -- \| -.__..-


Greetings Internets,

This is a story all about how we made Bethesda Softworks, ZeniMax
Media, and everything they own, our bitch for life.

As you should know, The Lulz Boat stores vast amounts of booty;
much of this booty we don't release as it's simply too shiny and/or
delicious. As of late, certain inferior sailing boats have discovered
flaws in Brink (brinkthegame.com), thinking themselves exciting and new.

Too late. The Lulz Boat controls this ocean, chumps.

Some weeks ago, we smashed into Brink with our heavy artillery Lulz
Cannons and decided to switch to ninja mode. From our LFI entry point,
we acquired command execution via local file inclusion of enemy fleet
Apache vessel. We then found that the HTTPD had SSH auth keys, which
let our ship SSH into other servers. See where this is going?

We then switched to root ammunition rounds.
And we rooted... and rooted... and rooted...

After mapping their internal network and thoroughly pillaging all of
their servers, we grabbed all their source code and database passwords,
which we proceeded to shift silently back to our storage deck.

Please find enclosed everything we took, excluding one thing -
200,000+ Brink users. We actually like this company and would
like for them to speed up the production of Skyrim, so we'll
give them one less thing to worry about. You're welcome!

Please keep making awesome games, guys, and you should
totally add an official LulzSec top hat to new releases.

But anyway, bwahahaha... >:]

LINKS:
http://thepiratebay.org/torrent/6467131/Bethesda_internal_data

BONUS ROUND! SENATE.GOV!
http://lulzsecurity.com/releases/senate.gov.txt

 

Genius

 

Why wont I? They live on IRC, and so did I when I was a kid. Gimme a few hours and I bet I could find them and their real IP's.

 

That should destroy all the multiplayer only games. I am a Single Player. Hale to SP!

 

Unfortunately it my case was nothing like this at all, and you shouldn't assume that all identity theft crime is caused by people not bothering to use proper passwords. Kinda like saying "yeah, well she always wear slutty clothes - she deserved to get raped". Wrong in all ways possible.

 

Very very very sad. I mean, who talks like that anyway? How old are they? 15?
'Switch to ninja mode'? Ha ha ha... What a wally... I don't know whether to be angry at them or feel sorry for them, or just laugh at them...

 

It's all of those things imo. But mainly the first one.

 

And that's exactly the point, If the end user trusts his info to a known unsecure company, how is it not their fault.

Goal reached..., by just announcing an intention to hack.

Alas it is so that is has to start to hurt a company financially otherwise they won't have a "return of investment" on security.

Easier:
Security measures only pay for themselves if security is threatened.

Even easier:
Security MUST be threatened, otherwise companies will have no interest in (spending money for) security

 

Well Sony missed the point, instead referring people to pay for the protection themselves...

 

They taking out Eve Online, Minecraft and The Escapist today:

https://twitter.com/#!/LulzSec/

So very, very lame.

 

I'm hoping that the Eve Online take-down is a DDOS rather than a break in, I would rather my account details weren't released for everyone to see.

I'm just not sure I see the point of doing this apart from, I guess, the "lulz".

 

take down the eve servers xD pretty sure they run that irc server roger- the isp have logs, but I remember using proxies with cyclone in the irc.. looked like I was in sweden (just find wins proxies to use)

so you could fill up a room with what looked like different people from different places in the world.. I used to roid rage our clan leader like that cause knew what pressed his buttons.. then come in with broken english and tell him he sucked xD oh well quake was competitive like that

why can't gaming be fun like that anymore.. everything is so lame since console ports.. it'll eventually be- no I'm the biggest idiot.. no I am! you guys will find this funny.. akira and akai are brothers, know them well xD

 

Yeah, they are just being dicks now as far as I'm aware.
I can see some benefits in some cases (companies increasing their security) but now they are just screwing users.

 

Breaking into a server to highlight security weaknesses is one thing, breaking in and then posting all their users information on bit-torrent for anyone to downland is quite another.