More info on the victims:
TBs of data stolen from Pakistan, Kazakhstan, Kyrgyzstan, Malaysia, Mongolia, Nepal, Turkey, India, Egypt, France, Cambodia, Rwanda, Nigeria, Hong Kong, Indonesia, Vietnam, Myanmar, Philippines, Afghanistan.
> screenshot of a list of bunch of UK agencies (purpose unknown), including
- Home Office
- British Treasury
- DFID
- UK Department for Business, Energy and Industrial Warfare
- UK Department of Education
- UK Department for Environment and Food+
- Department for Brexit
- british department for transport
- UK Ministry of Health and Social Care
- British Ministry of Justice
- UK National Crime Agency
- HMRC
- chathamhouse chathamhouse
- British Institute for International Strategic Studies IISS
- Center for Foreign Policy Studies
- Center for Defense and International Security Studies
- Rand Institute European Branch
- Haiding Group
- Human Rights Watch
- Amnesty International
quote:
2022-05-06
> which one did they want (from UK)? foreign affairs? the most important one they wanted
> yep, top priority
> okay, the team just told me there’s a chance we can take control of the system
> team says they’ve got a 0day and for sure can take the system; will take about 2 weeks. can they pay in advance?
> https://infosec.exchange/@still/111954872879820044
*screenshot content*
> UK Foreign Affairs had already been taken by another contractor
> choose a different one
> ??
quote:
Re:
- Kyrgyzstan Diplomatic Oil Service
- National Security Council Oil Service
- Asan Central Bureau of Investigation for Foreign Affairs and Defense (It seems that they have it all!)
quote:
they had also thought about getting access to NATO but decided it was too difficult
quote:
A: client says NATO is not exactly possible
> B: what do they mean by “not exactly possible?”
> A: they had already tried NATO before
> A: also they’re not exactly interested
> B: we’ve got stuff from their chairman
> B: stuff from Jens Stoltenberg
> A: well not everything you think is interesting will necessarily be the same for others
> B: what about making it cheaper? I’m running low on money
> A: it’s not about how much it costs, but that it’s not worth it
(I won’t post a link to the actual leak as a. it’s in Mandarin and b. could be illegal to post.)
But it’s a site called Github Repo for those with media.
This is what happens when you get free libraries from places like GitHub that’s not fully open source (where you see all of the underlying source code). I’m not dissing GitHub per se. I’m saying open source should be the only free libraries you use because that has the plain source code you can verify.