SOCNET

Go Back   SOCNET: The Special Operations Community Network > Areas of Expertise > Technology and Communications

Reply
 
Thread Tools Display Modes
  #1  
Old 9 January 2019, 08:25
HighDragLowSpeed's Avatar
HighDragLowSpeed HighDragLowSpeed is online now
Been There Done That
 
Join Date: Dec 2006
Location: Only Place For Me
Posts: 5,304
How a Russian firm helped catch an alleged NSA data thief

Social media mistakes....

Quote:
Moscow-based Kaspersky Lab turned Harold T. Martin III in to the NSA after receiving strange Twitter messages in 2016 from an account linked to him.

It indicates that the government’s own internal monitoring systems and investigators had little to do with catching Martin, who prosecutors say took home an estimated 50 terabytes of data from the NSA and other government offices over a two-decade period, including some of the NSA’s most sophisticated and sensitive hacking tools.

The case unfolded after someone who U.S. prosecutors believe was Martin used an anonymous Twitter account with the name “HAL999999999” to send five cryptic, private messages to two researchers at the Moscow-based security firm. The messages, which POLITICO has obtained, are brief, and the communication ended altogether as abruptly as it began. After each researcher responded to the confusing messages, HAL999999999 blocked their Twitter accounts, preventing them from sending further communication, according to sources.

The sender's Twitter handle was not familiar to the Kaspersky recipient, and the account had only 104 followers. But the profile picture showed a silhouette illustration of a man sitting in a chair, his back to the viewer, and a CD-ROM with the word TAO2 on it, using the acronym of the NSA's Tailored Access Operations.

A Google search on the Twitter handle found someone using the same Hal999999999 username on a personal ad seeking female sex partners. The anonymous ad, on a site for people interested in bondage and sado-masochism, included a real picture of Martin and identified him as a 6-foot-4-inch 50-year-old male living in Annapolis, Md. A different search led them to a LinkedIn profile for Hal Martin, described as a researcher in Annapolis Junction and "technical advisor and investigator on offensive cyber issues."

https://www.politico.com/story/2019/...curity-1089131
__________________
"I know of no country in which there is so little independence of mind and real freedom of discussion as in America." - de Tocqueville, 19th century

God made machine language; all the rest is the work of man.
Reply With Quote
  #2  
Old 9 January 2019, 10:48
Massgrunt's Avatar
Massgrunt Massgrunt is offline
Policeman Officer
 
Join Date: Oct 2004
Location: Day shift.
Posts: 12,537
Bahahahahahahahahahaha! *wipes eyes*
__________________
"The real problem was being able to stick it out, to sit in an office under the orders of a wee man in a dark gray suit and look out of the window and recall the bush country, the waving palms, the smell of sweat and cordite, the grunts of the men hauling jeeps over the river crossings, the copper-tasting fears just before the attack, and the wild, cruel joy of being alive afterward. To remember, and then go back to the ledgers and the commuter train, that was impossible. He knew he would eat his heart out if it ever came to that."

- "The Dogs of War" by Frederick Forsyth
Reply With Quote
  #3  
Old 9 January 2019, 10:57
CV's Avatar
CV CV is offline
Authorized Personnel
 
Join Date: Apr 2003
Location: US
Posts: 7,780
That is both hilarious (for how he got caught) and sad (for how our own IC missed it).
__________________
It's a hipster filter. Keeps your kind out. -Jimbo
Reply With Quote
  #4  
Old 11 January 2019, 11:25
Polypro's Avatar
Polypro Polypro is offline
BTDT
 
Join Date: Oct 1999
Location: A Noisy Bar In Avalon
Posts: 13,265
Variation of 'Password Re-use'. User Name/Email re-use is just as bad. Has this guy admitted to releasing 'Wanna Cry' etc...? Seems really convenient. "Who prosecutors say..." Well duh, there's tons of gear on burned up Helicopters too...
__________________
What, you want to be part of a choir in an echo chamber? Provocate!
Reply With Quote
  #5  
Old 11 January 2019, 16:30
hawkdrver's Avatar
hawkdrver hawkdrver is online now
Red Headed Stepchild
 
Join Date: May 2008
Location: North
Posts: 2,479
"technical advisor and investigator on offensive cyber issues."

solid work right there.
Reply With Quote
  #6  
Old 11 January 2019, 18:19
Polypro's Avatar
Polypro Polypro is offline
BTDT
 
Join Date: Oct 1999
Location: A Noisy Bar In Avalon
Posts: 13,265
The irony is not lost on Kaspersky being the good guys either... 'member when they were the devil? LOL. 'The truth is out there'...
__________________
What, you want to be part of a choir in an echo chamber? Provocate!
Reply With Quote
  #7  
Old 11 January 2019, 20:48
Jimbo's Avatar
Jimbo Jimbo is offline
Scoundrel
 
Join Date: Nov 2001
Location: inside your OODA loop
Posts: 6,205
Kaspersky can be the devil AND think they are the subject of a ham handed counterintelligence operation.
__________________

“It's not a good idea to allow an unknown enemy force to attack your compound. Ever, really.” -MixedLoad

"When the going gets weird, the weird turn pro." -HST

Secrets don't sleep til they're took to the grave. -BMTH
Reply With Quote
  #8  
Old 11 January 2019, 20:51
Jimbo's Avatar
Jimbo Jimbo is offline
Scoundrel
 
Join Date: Nov 2001
Location: inside your OODA loop
Posts: 6,205
Quote:
Originally Posted by Massgrunt View Post
Bahahahahahahahahahaha! *wipes eyes*
Yeah. I mean...just...wow.

Once heard an urban legend of a NSA guy who tried to get a hooker off craigslist, got busted, released and tried to get another hooker on Craigslist and then got busted...by the same UC.
__________________

“It's not a good idea to allow an unknown enemy force to attack your compound. Ever, really.” -MixedLoad

"When the going gets weird, the weird turn pro." -HST

Secrets don't sleep til they're took to the grave. -BMTH
Reply With Quote
  #9  
Old 12 January 2019, 00:21
Massgrunt's Avatar
Massgrunt Massgrunt is offline
Policeman Officer
 
Join Date: Oct 2004
Location: Day shift.
Posts: 12,537
The lesson here is to get your hookers the old fashioned way.
__________________
"The real problem was being able to stick it out, to sit in an office under the orders of a wee man in a dark gray suit and look out of the window and recall the bush country, the waving palms, the smell of sweat and cordite, the grunts of the men hauling jeeps over the river crossings, the copper-tasting fears just before the attack, and the wild, cruel joy of being alive afterward. To remember, and then go back to the ledgers and the commuter train, that was impossible. He knew he would eat his heart out if it ever came to that."

- "The Dogs of War" by Frederick Forsyth
Reply With Quote
  #10  
Old 12 January 2019, 03:08
8654maine 8654maine is offline
Another pool cleaner
 
Join Date: Dec 2012
Location: Maine
Posts: 4,844
Quote:
Originally Posted by Massgrunt View Post
The lesson here is to get your hookers the old fashioned way.
Match.com?
Reply With Quote
  #11  
Old 12 January 2019, 03:37
Massgrunt's Avatar
Massgrunt Massgrunt is offline
Policeman Officer
 
Join Date: Oct 2004
Location: Day shift.
Posts: 12,537
No no, they'll never leave.
__________________
"The real problem was being able to stick it out, to sit in an office under the orders of a wee man in a dark gray suit and look out of the window and recall the bush country, the waving palms, the smell of sweat and cordite, the grunts of the men hauling jeeps over the river crossings, the copper-tasting fears just before the attack, and the wild, cruel joy of being alive afterward. To remember, and then go back to the ledgers and the commuter train, that was impossible. He knew he would eat his heart out if it ever came to that."

- "The Dogs of War" by Frederick Forsyth
Reply With Quote
  #12  
Old 12 January 2019, 08:32
Tracy's Avatar
Tracy Tracy is offline
Been There Done That
 
Join Date: Feb 1997
Location: West
Posts: 11,200
...and this is why we (IC) can't have nice things.
Reply With Quote
Reply

Thread Tools
Display Modes

Our new posting rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -4. The time now is 21:42.
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2019, vBulletin Solutions Inc.
Socnet.com All Rights Reserved
© SOCNET 1996-2018