Peering into the Underground L33t h4x0r TDC 375 Autumn 2009 10 John Kristoff DePaul University 1 The Internet Underground There exists real kinds of marketplaces Buyers Sellers Bartering Theft Security middle men brokers specialization clubs crews etc Operates much like a global economy would Many are open to the public and widely advertised Internet miscreants show little to no fear All kinds of goods and services for sale or trade Such as TDC 375 Autumn 2009 10 John Kristoff DePaul University 2 DDoS to buy Shoppers A who has bots 4 sale good 4 ddos MSG ME B who can do ddos here C anyone offer me DDOS service D I need ddos service paying with egold TDC 375 Autumn 2009 10 John Kristoff DePaul University 3 Sellers TDC 375 Autumn 2009 10 John Kristoff DePaul University 4 Buyer wants to trade this A Name Joe User A Address 123 Maple CT A City Anytown A State ZIP PA 01234 A Phone 123 555 1234 A Country United States A Cc Number 0123456789012345 A Cvv2 123 A Exp 6 09 A Date of birth 05 Mar 2007 A Ssn 111 222 3333 A Mother middle name Alice TDC 375 Autumn 2009 10 John Kristoff DePaul University 5 Other goods and services A Have NET2PHONE acct with 25 dollars need cvv2 fresh msg to trade B NEED EGOLD CASHIER also need USA CVV fresh to fund egold 50 50 deal C PHP mailer ALL inbox HOTMAIL YAHOO AOL 7 roots 15 hacked host whit FTP 4 spam 5 FINDNOT acct 6 month 5 10mb us fresh mail list 50 shell 5 PowerEmailVerify 4 scam page leetre for FREE http example net scam2007 pay via egold D i have valid US cvv2 Ebay logins HAcked root BOA Login paypal Verified Chase Login Unspammed US Mail List Egold only I don t Entertain Rippers keep off E LOOKING FOR WU CONFIRER that can confirm FEmale for long term deal E I need ebay mail extroctor I m offer US 5 000 00 MSG ME TDC 375 Autumn 2009 10 John Kristoff DePaul University 6 Seller barterer proof of goods TDC 375 Autumn 2009 10 John Kristoff DePaul University 7 Advertising the product TDC 375 Autumn 2009 10 John Kristoff DePaul University 8 Kids will be kids A Does anyone know of any forums where i can learn how to become a hit man TDC 375 Autumn 2009 10 John Kristoff DePaul University 9 Just between us A Some f got into one of my production routers cos i left a user user account open and hacked nasa s primary DNS server but theres a great twist at the end full logs attached this never leaves the hole after much language troubleshooting logs A looks like its a fake line A omfg A calls nasa security desk back up A this stays between us all TDC 375 Autumn 2009 10 John Kristoff DePaul University 10 Its all about the bling bling A Yo is this your company A that sells these fake watches A Hook me up w a cc once in awhile A 3 4k a day A Get me in on this A I d quit bots 2 make 4k a day TDC 375 Autumn 2009 10 John Kristoff DePaul University 11 Advice from an ex con A the fbi are morons A the key you have to remember A is dont trust anymore A because all the fbi will do is threaten everyone with 10 years for conspiracy A trust no one A the odds of you going to prison A are like 00005 A 95 of all federal convictions happen because of snitches TDC 375 Autumn 2009 10 John Kristoff DePaul University 12 No firewall upgrade for this What IDS is going to detect this Who do you call for help Can you over engineer around this problem Will you actually know when you have a problem Is this even a technical problem Law enforcement challenges For miscreants it s all about the money For us is it all about SIGINT NETINT TDC 375 Autumn 2009 10 John Kristoff DePaul University 13 Whats it like to go underground Kind of annoying really You hang out with low lifes racists criminals A job within a job and not a good one Seriously How does this help your career Think hard Manage servers deal w problem users code attend meetings screw up get yelled at etc Its not hard technically but soooo time consuming Where do you draw your lines Don t try this at home consult LE and or lawyer TDC 375 Autumn 2009 10 John Kristoff DePaul University 14
View Full Document