SOCRadar® Cyber Intelligence Inc. | Dark Peep #6: Don’t You Like the Bar? Fine, Just Hack It!
Home

Resources

Blog
Kas 24, 2023
7 Mins Read

Dark Peep #6: Don’t You Like the Bar? Fine, Just Hack It!

Greetings, just like Bitcoin goes up and down momentarily, the Dark Web can go crazy and calm down from time to time. In this issue, the Dark Web events that the SOCRadar team has been keeping an eye on are more of the weird stuff. Let’s move on to the article!

Welcome to Dark Peep #6, drink up our content, and get out before the bar fight starts!

Illustration of Lockbit hacking a bar (generated using DALL-E 3)
Illustration of Lockbit hacking a bar (generated using DALL-E 3)

P.S.: We used AI to create an image that expresses the most striking situation in this issue. We really wanted to write something about the cat in this issue, but we couldn’t find any story. We would like to thank Evil Rabbit for the suggestion of the AI-generated image, and if we write something about the Black Cat, you can be sure that we will use it.

Illustration of Black Cat (Source: X)
Illustration of Black Cat (Source: X)

We found a copyright violator NoName fan page

NoName057 seems to have a fan page now. It’s nice that they used our image in their profile picture, but they should have at least asked us.

Twitter page of Number 1 NoName057 Fan
Twitter page of Number 1 NoName057 Fan

Who should we bill for this now? NoName itself? Or if you give us concert tickets in your fan page giveaways, we won’t say a peep. Deal?

Don’t you like the bar? Fine, just hack it!

Lockbit has listed a local Norwegian bar Martinique, probably because the bar overbilled an affiliate or was not satisfied with the drinks.

vx-underground’s Twitter post about Lockbit’s hacking of Martinique (Source: X)
vx-underground’s Twitter post about Lockbit’s hacking of Martinique (Source: X)

At least let’s put it this way, there is a 20%(!) chance of finding out who is being phished by Lockbit.

NoName057(16) is a real daredevil!

The digital daredevils of NoName057(16) have found themselves in the U.S. Department of the Treasury’s crosshairs, having stirred up a cyber storm across Ukraine’s financial sector.

NoName’s Telegram Post
NoName’s Telegram Post

Now, NoName057(16) plays the waiting game, possibly prepping for a sanction showdown, while cyber spectators on the sidelines watch this virtual game of cat-and-mouse unfold.

UserSec’s defacement workshop welcomes everyone who wants to learn about cyber vandalism

UserSec is apparently assembling a crew for a master class in website defacement, promising to equip the enrolled with the dubious art of digital graffiti.

UserSec’s Telegram post
UserSec’s Telegram post

This ‘course’ for browser bandits covers the A to Z of admin panel infiltration, with a curriculum rich in questionable content the entry fee? It’s just $50 to swap your white hat for a shade decidedly darker. 

What is it with you guys having a problem with security researchers?

Team Insane Pakistan has posted a poll to define Security Researchers, with some pretty disappointing choices.

Team Insane Pakistan’s Telegram post
Team Insane Pakistan’s Telegram post

The poll from Team_insane_Pakistan reflects a disconcerting sentiment towards security researchers, with a majority leaning towards criticism rather than praise. Yet, it’s essential to dissect this with a clear lens. Security researchers are the digital realm’s unsung guardians, often working tirelessly to fortify our online bulwarks against unseen threats. The poll responses, colored by frustration, perhaps overlook the silent victories and the unpublicized thwarting of cyber threats these researchers achieve daily. While the poll may cast shadows of doubt, it’s crucial to remember that for every piece of fake news or nonsense, there’s a security researcher out there patching vulnerabilities, decrypting ransomware, and safeguarding our virtual frontiers. It’s a thankless job that deserves recognition, not disdain.

Respect!

Facing the Great Tech Wall of censorship

The RESISTANCE Channel on Telegram pitches a digital ladder for users to face censorship. They’re handing out keys to unlock the gates, directing Apple users to the web version, Android users to the direct download from Telegram’s own trove, and PC users to the good old-fashioned install route.

Resistance Channel’s Telegram post
Resistance Channel’s Telegram post

This is Telegram’s attempt at a censorship jailbreak, where the only bars you’ll see are the ones showing your signal strength.

Sidelined ‘Soup’ serves up sick leave, SkidSec leaks on low power

It seems “soup” from SkidSec Leaks has been ladled a steaming bowl of the sniffles.

SkidSec’s Telegram post
SkidSec’s Telegram post

This keyboard warrior, usually cooking up cyber schemes, is now relegated to bed rest, putting a noticeable pause on their usual online activity. With “soup” out of the server room and under the weather, operations are running at a low hum. For any dealings that can’t wait, “gov” is the go-to sous-chef. It’s an ironic twist when a purveyor of digital exploits needs some old-fashioned TLC and, well, actual soup to get back in the game.

A short addition here, the Anonymous Sudan group has shared a personal and somber update: their leader has been battling a serious illness, which has led to a noticeable pause in their activities.

Update from Anonymous Sudan
Update from Anonymous Sudan

The group is calling for thoughts and prayers, a signal boost of a different kind, seeking support in a time of vulnerability. Here’s to hoping their chief hacker finds a patch for his health and reboots back to full strength soon.

Hacktivism is bitter, sometimes that bitterness will cost you your job

OpenAI has announced a significant shift in its executive suite, with Mira Murati stepping up as the interim CEO following Sam Altman’s departure from the company. The search for a new permanent leader is underway, signaling a new chapter for the AI organization.

Anonymous Sudan’s Telegram post
Anonymous Sudan’s Telegram post

Meanwhile, a barbed comment from Anonymous Sudan implies that the hacktivist gusts were fierce enough to blow Altman out of the captain’s chair. Whether in jest or earnest, this suggests a narrative where the winds of cyber activism carry a bitter chill, one that may have contributed to a significant career frost for Altman.

Bad news to Anonymous Sudan, after these happenings, we just learned that Sam Altman will continue as CEO again at OpenAI!

The sky has clouded up a bit, but the sun seems to be shining now

Last week SkyNet announced a 50% reduction in power, but has since recovered and, we believe, is running a service promotion because of this.

SkyNet’s Telegram posts
SkyNet’s Telegram posts

What to say, providing DDoS service is not easy

DDoSia is going professional-ish!

In its latest Telegram post, NoName announced that the DDoSia Project is embarking on a new journey and will create an army.

NoName’s Telegram post about DDoSia
NoName’s Telegram post about DDoSia

We’ve already mentioned the sense of humor of the group’s leaders, and it’s clear that they aim to transform the army from an overly serious environment into an arcade system.

That army seems to blend the competitive spirit of online gaming with a structured volunteer system. Fighters can earn their own titles(“ranks”) and military merits(“achievements”). Also, ranks will be assigned according to the length of time of participation. There is more! NoName is planning to include an in-game currency system called “dCoin”. Fighters can earn these dCoins as a result of their achievements. Russian youth may consider taking a break from CS:GO and joining this army of DDoSia. Rush B together for DDoSia(!)

We have completed this issue by slipping away from the actors who make hacktivism a matter of the motherland; we hope you finished reading the article early and escaped before the bar fight started! After all those ransom payments, it’s the bar staff who will clean up the broken glass, have a heart!

The Dark Web is not at rest, and we don’t expect it to become slower. You can use Dark Web News in SOCRadar XTI’s Cyber Threat Intelligence module to keep up to date with developments on the Dark Web:

SOCRadar XTI’s Dark Web News page under the CTI Panel (Source: SOCRadar)
SOCRadar XTI’s Dark Web News page under the CTI Panel (Source: SOCRadar)