LockBit takedown: Police shut more than 14,000 accounts on Mega, Tutanota and Protonmail
therecord.mediaAccounts with third-party service providers were used “for exfiltration or infrastructure,” according to a post by law enforcement on LockBit’s seized darkweb domain.
You must log in or register to comment.
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 57 users / day
- 383 users / week
- 1.5K users / month
- 5.7K users / 6 months
- 1 subscriber
- 2.96K Posts
- 74.6K Comments
- Modlog
How does one hijack a .onion site?
You don’t hijack a .onion site. You pwn the server which hosts .onion site. Give you full access to site. You hijack .onion because its very secure
I see. How do you trace a .onion site back to it’s server?
By pwning it. You dont have to find it to pwn it. You just have to be able to send data to it, which everyone can do because whats the point of having a server if noone can interact with it. The attacker just interacts with it in a way that manipulates it to execution attacker controlled code. So for a .onion website for example you find a vulnerability in the websites code and exploit it to make the server the website is running on do what you want.
In simple terms you can’t trace back the server useless the webadmin did some stupidity or vulnerability
Bad osint practices?
Can you elaborate? Is the server address stored in some open source?
Nah nothing like that. I mean that they’re sharing info to friends willy nilly and some cops got wind of it. That’s kinda what happens to some of the dark web guys who get caught. It’s very rarely something very technical it’s just their own idiocy for reusing emails, transferring funds incorrectly making it traceable, Delivering sus packages all at once to usps
Oooh, right.
Outside of controlling and rewriting the protocol: steal the keys used to generate the route or take over control of the server that hosts it