Operation Give Me Attention
Darknet Markets Community and marketplace Admins - We have noticed you are disappearing with user funds and the rest of the community has stopped talking about us.
This is unacceptable.
Here is what we need you to do, either:
- Come back, bring up the sites, and allow us to successfully socially engineer you into giving us lots of bitcoin.
- Come back and allow us to socially engineer users into giving us Bitcoin under the pretense of us giving them their Bitcoin back to them for you... Or... wait.. Look just let us worry about the details. We haven't quite worked out the kinks in this plan yet. Fuck off idiot.
Why would you do this? Because if you don't we will be publishing a series of tell-all posts with all of the information we are making up right now that we will claim to have found on your server. I personally promise to the community to make one new account every three minutes.
I will use these accounts to talk to myself and to support myself in debates with people who probably see through this repetitive drama fest. Most times, if I can contain myself, I will first comment with a one-liner on an unrelated post, before going on to mention/compliment/disavow my main alias-of-the-month.
However, please be aware that if I am in the middle of my manic phase, and my parents are avoiding me, that I may just reference myself right off the bat. To just come out swingin', as it were. Please do not be alarmed, I will delete these shill accounts within a couple days after the threads have died down. Alright let me give you a hint at what is coming next
Timeline
First a timeline of /u/hacks4crack. Someone who may or may not be me. Ditto /u/_h4c_, hacks4cocks and all other variants.
They may sound like me because we are all members of a very exclusive hax0r1ng group headquartered in my basement. We call ourselves "Cosa Nostra" because it sounds cool and it's the edgiest name I could come up with on short notice. People were impressed, I had a good day, and my mom rewarded me with lots of attention and to top it all off she even made chicken tenders ("tendies") that night for supper. I'm not going to reveal too much here, but this is left here more as a hint
- Early-2015: I commenced my mission to become the Darknet's most fearsome, virgin hacker: /u/whyusheep, before moving on to the even edgier-sounding, /u/roboto-san.
- 19-Jun-2015: I make a ton of threads about AlphaBay with shill accounts.
- 19-Jun-2015: (SAME DAY!!!) I use my roboto-san account to point out pedantic bullshit. People commented and mom said I was really well behaved that day when she took me to my therapist.
- 27-Sep-2015 I post a thread proving DHL uses Synala
- 28-Sep-2015: Now I call myself /u/dnmThief - I keep extorting AlphaBay -but sometimes I call myself /u/dmnThief (notice the letters! they're switched!!). I did this simply because I think homograph ruses are pretty neat. I even played that trick on my babysitter once with her boyfriend's Twitter account. She fell for it!
Two days later, I thought of /u/dnmthelf, and I go to create the account. Was the name taken? No. It wasn't. Because in order for someone to think of it they would have to be as smart me. Which they're not. It was that day that I became convinced that I possessed true, God-like powers. - 28-Sep-2015: Now I am after DHL and the social engineering commences.
- 28-Sep-2015: I use my SE skillz to create FUD surrounding the market ("DHL is not processing withdrawals", yada-yada, you know the usual)
We have taken a keen interest in DHL's use of Synala for a very, very long time. Hell, I've spent the past couple years of my life in a stimulant-fueled, schizotypal, manic-depressive bipolar blur commenting to myself, just trying to get to the bottom of this.
A key feature of Synala is the offline transaction signing so that the private keys can be kept on a separate machine (even a users desktop!) and then pulled from the server using a (bad) API to be signed and then broadcast. Most of the features of DHL relating to Bitcoin that they listed as their own are actually features of Synala. What makes Synala most interesting is that it isn't very popular so DHL's use of it stands out, but more interesting is the fact that nobody other than me seems to give a flying fuck.
Here, just read this (from 2 years ago!) to catch a glimpse of the severity of the weaponized autism you people are dealing with.
SeriousSam: Look at those addresses I posted that I withdrew too, look at the addresses that sent to money. Those are your addresses right?
Look at the addresses that loaded the 21 BTC, those are your addresses right? Now think hard.
If you can't find out where that 21 BTC came from and I'm up 5.8 BTC and you are up 16 BTC then I guess we magically made BTC appear out of nowhere because we can't entertain the possibility your system built on Synala an open source project with no peer review could be broken.
Your hubris is unbelievable. Your refusal to believe you have not fucked up is amazing. If you really believe we slowly deposited 21.7 BTC into a spam account on a site with manual admin approved withdrawals and we were attacking, you are clearly very fucking stupid.
PS: They never fixed the SVG issue either :)
Mystery Comment
Here is an interesting Reddit comment left by a user with throwaway Reddit/Github username /u/dhlol (funny) in a thread called "WhyUSheep vs Hacks4Cracks: Death Battle" that states:
They are friends dummy, they are both in Cosa Nostra.
PS Roboto-san would win
The commenter also made a post of DHL usernames.
The person who made the comment forgot about it not knowing that it would lead back to them.
A Preview of Part 5
Coming up. Anybody else notice the really queer usernames I chose? Where do you think I'm from? It's amazing what slips out in the comments here when you pay attention.
I just spent 30 minutes setting up stylometry tools until I noticed that I didn't need it, because 20.4% of the accounts on this sub are actually just me talking to myself. If you click on the user name and it takes you to a page with 8 comments all referencing h4c, whyusheep, roboto-san, or Cosa Nostra - then it's me.
Credit
Don't credit me with all this (YES CREDIT ME WITH THIS PLEASE) - it really is a group effort with lots of different aliases of mine. I'm amazed at some of the things that are found and some of the work I've done. Most don't want to be called out but i'll update if you all stop talking about me and giving me the attention I seek.
Contact
edit: oh who am I kidding
EDIT: Please consider what you pm me here - use email + PGP or ask for the preferred communication for infosec experts - Twitter. Chances of those messages staying between the two of us are pretty high. Really because I have no one else to talk to and my mom doesn't understand computers :\
electronic letter: tomcheck at protonmail.com
-----BEGIN PGP PUBLIC KEY BLOCK-----
Comment: GPGTools - https://gpgtools.org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=cRIz
-----END PGP PUBLIC KEY BLOCK-----
Wow. Who the fuck has the free time and is this bored to come up with a shit post of this quality? The time and thought put into this is impressive to say the least.