Anonymous Publishes Leak of the Central Bank of the Russian Federation | Hacker News Reader

Anonymous Publishes Leak of the Central Bank of the Russian Federation

twitter.com

58 pointslxm20 comments

The actual data instead of some weird announcement: https://ddosecrets.com/wiki/Central_Bank_of_Russia

Made a submission about it (the data) here (before I found this submission): https://news.ycombinator.com/item?id=30810275

> instead of some weird announcement

So lets not go to the actual source and go to the link which claims to also be real?

If someone wants to centralize these, cool (Is it the NSA doing it for Unit 8200 or maybe you are Fancy Bear?) But how about we start at the source before going straight to dumbing it down.

ddosecrets - "There are a number of datasets <> that we've received and declined to publish for various reasons <> we do not acknowledge rejected datasets."

Given this is 8 parts, how would we know that ddosecrets hasn't cut stuff out?

Dude, DDoS is established as a good source for the leaks. I've downloaded the torrent/magnet myself and it's proper, it has all 10 parts in it. Verified as well by downloading from Mega and comparing hashes, it checks out. Anyway, DDoS is already established as a trusted distributor of data leaks, if you don't know this, I'm not sure why you're throwing around terms like Unit 8200 or Fancy Bear, like you know what you're talking about (which btw, I take as a compliment that you think I'm a part of).

It's not dumbing down to link directly to a trusted source of the data itself. Feel free to use both sources, like I did. But if you want to avoid Twitter and the videos anonymous usually bundles with their announcements, DDoS is a good distraction free source.

ddosecrets is well-known unlike some random ass "anonymous" twitter account.

> So lets not go to the actual source

@latestanonpress is not the actual source, every single “anonymous” twitter account is run by a different idiot.

I wonder why none of the usual APT analysis groups are publishing reports on the various hacks. It is obvious that many of the "Anonymous" hacks are just a cover for state level or state-backed actors. The sheer scale and quantity of Russian organisations being compromised is simply too big to be attributed to global hacktivists alone. If you actually examine the list of organisations that have been compromised in the last few months, many of the data exfiltration attempts are implausible without the use of zero days and compromised employees. I wish Krebs and the others would do an in-depth study and attribution report. It does not serve the information security field well to turn a blind eye just because the targets are unpopular.

> "Anonymous" hacks are just a cover for state level or state-backed actors

Not sure about that. Most of the recent ones against Russia seemed fun level hacks like defacing official websites.

State level actor hacks usually incapacitate infrastructure like the alleged Russian attack on Viasat that screwed up Enercon wind farms or the Israeli attack on Iranian uranium gas centrifuges.

https://www.theverge.com/2022/3/25/22996187/russian-military...

This data theft is a bit different. Central bank transaction intel could be very useful for future sanctions.

>It is obvious that many of the "Anonymous" hacks are just a cover for state level or state-backed actors.

This has always been the case though. Not just Anonymous either, look at many of the massive leaks like Panama/Pandora which were almost devoid of US-based people, making it obvious that US Intelligence was likely behind the leaks.

Downloaded it. Hard to mine data as, not surprisingly, everything is in Cyrillic. The problem is that there are multiple code pages to encode Cyrillic text (CP866, KOI8-R, CP1251 at least) and the encoding varies among files. Also the most of the PDF files consist of scanned pages.

Accounting information is stored in DBF files in some well defined format. Fortunately have found a DBF to Excel converter, which sticks code page information to the output: https://github.com/rpoletaev/dbf-to-xlsx/

If you're interested in collaborating, I'm setting up a search service that includes OCRd text of every single document in the dump, to facilitate searching for people who know Russian and don't want to download the entire dump. Email is in profile.

Where will you put it up? Interested to have a go at it with some Russian speaking friends.

This video announcement is very strange. Is this announcement style typical of Anonymous?

Yes, very typical.

Did anyone actually take a look at the files?

Yes, I'm going through all the files as I write this, will do a quick write up and publish that ASAP.

Awesome!

Let us know your findings when you can

I'm looking at them right now. So far, the most startling thing I've come across is a set of account records linked directly to certain oligarchs known to be connected to Putin's inner circ---(((((--^%%%--!--#--- *\---- ** NO CARRIER **

Oh my god, this poor person was hacked halfway through their comment! /s

Thanks for the good evening humour!

I hadn’t seen anonymous in the news for years. Does this means hacktivism is going to be a thing again? I wish it wasn’t posted to Twitter, the pop ups block me from reading contents without making an account

Hackvism never went away, only the news coverage of it did. Here you have the leak itself without Twitter being involved: https://ddosecrets.com/wiki/Central_Bank_of_Russia

Reply on news.ycombinator.com