This Blog has Moved!

This blog is moving to


Thank you for visiting! Content will remain here for archival purposes.
Showing posts with label Anonhamas. Show all posts
Showing posts with label Anonhamas. Show all posts

Anon Steganography Cracked, Further Mysteries Lie Within

Flashback to January of this year when I posted that Anonymous has most likely been infiltrated by multiple organizations (including law enforcement and terror organizations) and may be unwillingly distributing terrorist messages.

I have finally successfully cracked open one of the Anonymous related images suspected of containing Steganography...and I'm quite intrigued by its contents. As far as I know, this is only the second Steganographic image found in the wild which has been successfully cracked. The first image was posted online by NBC back in 2001 as part of a news story, and had a very simple password of "abc".

Anonymous #OpPetrol Most Epic #Fail Yet - Full Analysis Of Results

Looking at the "damage" (and I use that term very loosely) done as part of OpPetrol, Anonymous support by actual hackers is fading fast.

Let's take a look at the original target list of what was supposed to be attacked.

United States, Canada, United Kingdom, Israel, Saudi Arabia (only Government), China, Italy, France, Germany, Kuwait (only government) and Qatar (only government)

Hackers News Bulletin released a live list of all the damage done as part of OpPetrol, and it's a rather short list. Let's run through the list and look to see if Anonymous actually succeeded in their operation.

Better grab some popcorn, this is going to be quite entertaining.

Anonymous OpIsrael - Prelude to a Hamas Attack?

On April 7th Anonymous plans to disable the Israel government's Internet capabilities through a massive hacking/denial of service attack.

It has been long suspected that Hamas has a great influence inside Anonymous.  Th3j35t3r and others, including myself, have repeatedly warned that Anonymous has been infiltrated by terror organizations - and #OpIsrael may be Hamas' way of disabling Internet communications of the Israel government prior to an attack.

Facebook Graph Search and OSINT

Facebook Graph Search is one of the newest features of Facebook.  It allows you to data-mine every person and page on the entire social network.  You can get an introduction at this page.

It's not available for everyone yet...but you can sign up for early access if you'd like.  It is extremely powerful as an OSINT (Open Source Intelligence) tool.  A tumblr site called Acutal Facebook Graph Searches show some of the more interesting search results.

Anatomy of a Twitter False Flag-Spam and Dox Attack

Recently an alarming number of Twitter users have been suspended for doing nothing wrong.  This originally started in April as reported by the conservative news site Human Events and has begun to recently spiral out of control beyond the realm of politics and simple account suspensions.

The original attack is quite simple - get enough Twitter users to report a user for spam...and the target user's account is suspended.  According to Human Events this attack was originally being used by left wing liberals to silence right wing conservatives for expressing their views.  While I will not get into the political issues of this and why this goes against freedom of speech...something I will mention is that a "defense network" is being built to help protect against these attacks.

If Anonymous is to Survive They Must Remove the Mask

Over the past couple years Anonymous has gone from a group of pranksters "doing it for the lulz" to a massive global collective of political activists and "hacktivists".

But there's trouble brewing for Anonymous.  As a group with "no membership roster" and no criteria for joining they have opened themselves up to infiltration. The flaw which will be Anonymous' downfall is that "anyone can be Anonymous."

Infiltration by who you might ask? For one...law enforcement agencies.  The best example of recent infiltration would be the cooperation of "Sabu" with the FBI.  His cooperation resulted in the arrest of multiple Anonymous members and should have served as a wakeup call to the rest of the group that they must reform or die.

But infiltration by law enforcement should be the least of Anonymous' worries.  It is beginning to come to light that Anonymous may be unwitting mules for terrorist organizations.  And let's not forget that the Mexican drug cartel "Zetas" were recently burned by Anonymous and swore revenge.  Anonymous members who had nothing to do with the confrontation with the Zetas may be subject to infiltration and revenge by the Zetas as "guilt by association."  Unlike law enforcement the Zetas don't really care about due process or burden of proof...and will simply snatch someone in the middle of the night and kill them.

So this is a message to any Anonymous members who will listen - if you want to survive you need to remove the mask.  Otherwise you will be led to your doom like lambs to the slaughter.  There are already leadership structures within Anonymous - everyone knows this.  Drop the Anonymous mask completely.  Start keeping membership rolls - and purge yourselves of the undesirables - especially terrorist organization members.  And finally - if you really want to make a difference stop the illegal activities, such as hacking or denial of service attacks.  You'll gain a lot more credibility if you start performing your political activism legally instead of through illegal means.

You can either be labeled as criminals, or heroes.  But not both.

Anonymous and Steganography - Blindly Distributing Terrorist Messages?

As previously warned multiple times by Th3J35t3r and myself - Anonymous may be unwitting pawns in a much larger chess game.

While their public support of terrorist organizations is being dismissed with "anyone can claim to be Anonymous" their blind distribution of encrypted files containing information from outside entities may not even be known to the inner-most circles of the organization.

What encrypted files? One of the most common means of distributing Anonymous related information is through social media - especially through the distribution of image files.  Little known to many outside the security field is that images can be used to hide information through a process called Steganography.  For those not familiar with the topic here is an excellent whitepaper on how Steganography works as well as how to detect it.  I have started using the StegDetect program from Outguess.org and have found some interesting results.

I recently started analyzing several images being re-posted by the Twitter handle @YourAnonNews.  Out of 51 images analyzed I found two images which returned "positive" as having embedded data, as well as two additional images which generated errors during analysis (possibly obfuscated?).

The first picture with a positive hit was an internet meme of the TV show "Game of Thrones".