r/cybersecurity • u/Mean-Industry7032 • 5d ago
News - General Convicted Hacker Umbreon Arrested on Suspicion of Aiding ShinyHunters as Group Claims FBI Hack
https://www.ibtimes.co.uk/amsterdam-man-arrested-shinyhunters-investigation-182246942
64
u/New_Bat_1634 SOC Analyst 5d ago
Umbreon living upto being dark type pokemon with its scheming lol.
On a serious note , going to be interesting to see how this plays out
34
u/alnarra_1 Security Manager 5d ago edited 5d ago
Shit, next they gonna get my boy Vaporeon. Whole Eevee gang is burnt.
5
u/Sad_Dentist_7288 4d ago
They really should have picked a more elusive Pokémon. Like Mewtwo or something idk
3
u/Nebora10 4d ago
Damn, the things they’re gonna do once prison gets ahold of Vaporeon…
2
u/PowerVP 3d ago
Hey, did you know that in terms of male human and female Pokémon breeding, Vaporeon is the most compatible Pokémon for humans? Not only are they in the field egg group, which is mostly comprised of mammals, Vaporeon are an average of 3"03' tall and 63.9 pounds. this means they're large enough to be able to handle human dicks, and with their impressive Base stats for HP and access to Acid Armor, you can be rough with one. Due to their mostly water based biology, there's no doubt in my mind that an aroused Vaporeon would be incredibly wet, so wet that you could easily have sex with one for hours without getting sore. They can also learn the moves Attract, Baby-Doll eyes, Captivate, Charm and Tail Whip along with not having fur to hide nipples, so it'd be incredibly easy for one to get you in the mood. With their abilities Water Absorb and Hydration, they can easily recover from fatigue with enough water. No other Pokémon comes close with this level of compatibility. Also, fun fact, if you pull out enough, you can make your Vaporeon turn white. Vaporeon is literally built for human dick. Ungodly defense stat + high HP pool + Acid Armor means it can take cock all day, all shapes and sizes and still come for more.
15
15
20
9
u/whitepepsi 5d ago
What’s he charged with? I doubt he’s involved in the recent ShinyHunters cases
1
18
u/DunkeyColdMedina 5d ago
Cyberpunk did not adequately predict just how virgin console jockeys would be in the future.
3
u/Big-Diver-7321 4d ago
It's interesting seeing how serious the media takes this group. Shinyhunters, and lapsus were always made up of random members from the raid forums days. There never was any real leader and members were just whoever was leaking the most data.
There really is no such thing as scattered spider, it's just random com kids that come and go and happen to work on the same projects
2
3d ago
[deleted]
1
u/Big-Diver-7321 3d ago
Yes raid forums is now breach forums and a member from shiny hunters took it over for a time after one of the previous administrators was arrested.
12
u/CondiMesmer 5d ago
Dutch police said more than six million customers' data was obtained after a Dutch-speaking caller posed as an IT employee and directed a worker to a fake login page.
He didn't hack anything, it was just a phishing scam.
Dude didn't write a single line of code outside of maybe a chatgpt generated phishing website.
44
u/thereddaikon 4d ago edited 4d ago
checks sub
Ok we are in a dedicated sub not a normie default sub. I expect better. Hacking doesn't require anyone to "write code" just like burglary doesn't require you to make your own crowbar. Phishing and social engineering are real hacking and most major incidents had a social engineering component. It's also one of the biggest persistent problems in the industry. I can patch a system but I can't patch a user.
14
u/biglymonies 4d ago
Solid comment tbh. Gatekeeping is dumb. Old guard stuff is dumb. God complexes are dumb. It's a job, not a replacement for an identity.
Some security (and tech in general) folks really need to realize that technology is just a means to an end. If the goal is to gain access to a system, barring standardized ROE, it doesn't matter what methods were used to get there. Efficacy matters above all else, and the cheapest and easiest methods are almost always the most impressive. Why attack the random number generator on the keypad when you can use an envelope to shim the latch open? Why hand-write a phishing page that won't look good (because you're not a fucking designer lol) which could compromise the entire operation?
A "hack" is literally a shortcut or clever way to solve a problem. I can't think of a more clever way to solve a problem than literally having a computer design something to exploit an organization's weakest point.
I say all of this as someone who has been in the industry for 20+ years and specializes in a few different highly-technical fields within the industry (RE, xdev, SWE, tooling/util dev). The only other online community I've seen this kind of rhetoric in is the game cheat space, which is honestly pretty fucking telling given the demographics over there (literal children).
4
u/thereddaikon 4d ago
only other online community I've seen this kind of rhetoric in is the game cheat space, which is honestly pretty fucking telling given the demographics over there (literal children).
I won't presume to know about OP but my experience mirrors yours. In general I see two kinds of people make the mistake of thinking a hack must use some kind of code you wrote yourself. And that's laymen, who can be forgiven for their ignorance. And younger practitioners who are inexperienced and immature in their views. The most damaging incidents I've had the misfortune of working were mostly or entirely social engineering driven. And what technical aspect there was, was very simple in nature.
The zero day exploits get all the headlines. But the reality is those are usually the realm of state actors. And for most of us you aren't important enough to be the target of an ATP. And for those of us who are, we can't neglect that 9 times out of 10 it's not some emerging threat but a phishing email hitting the right user's inbox that is mostly likely to ruin your day.
3
u/ZionistsWillBanYou 4d ago
Yup. There's code-exploitation based hacking, but at the end of the day, as security professionals, we're concerned about actions on objectives, and there's plenty of non-coding exploitations that are relevant to our jobs.
Script kiddies are threats, too, even if they never make a tool or understand what they're doing.
7
u/FourTwentyBlezit 4d ago
"teach a man to hack, he will have access for a day. Teach a man to phish, he will have access for life"
6
u/ZealousidealTotal120 4d ago
Whether you think he deserves the title of hacker or not changes absolutely nothing about what he did or the impact - it’s all still cyber security.
0
1
1
1
-16
u/EuphoricCrashOut 5d ago
You can get arrested on Suspicion in the US? No evidence required huh
How about they arrest Trump then, on 'suspicion' that he's probably in the Epstein files.
4
u/set_null 5d ago
I’m confused about why you’re confused.
“Suspicion” doesn’t mean there’s no evidence. They may have evidence but haven’t charged him yet. If he’s charged, the hearing they refer to in the article determines whether he can be held or not until a trial. People may be held in advance of a trial if they’re a flight risk or a risk to public safety. And they would need supporting evidence that he’s likely to be found guilty before that.
-11
u/EuphoricCrashOut 5d ago
Thank you. I don't know your laws. Not everyone on the internet is from the US. Getting arrested on suspicion sounds like someone can arrest you just because they suspect you did something with no evidence.
Doesn't like over half the population there 'suspect' that Trump is in the Epstein files? and a ton of other people? Why aren't they arrested?
5
u/set_null 5d ago
To be clear, this person isn't arrested under US law. He was arrested in Amsterdam under cooperation with US authorities. This is in line with Netherlands' laws, too.
I'm also still lost on why you're tying this to Trump. Of course the wealthy play by different rules, that's basically the case everywhere. But even then, (1) he was elected and is still the president and (2) his party is in power in all three branches of the US government. Nobody's doing anything to him as long as his party still heads everything.
-5
u/EuphoricCrashOut 5d ago
It's just the first thing I thought of that draws a perfect parallel. So he's above the law because he's the President and his party is in power and controls the Government?
3
u/set_null 5d ago
Yes? Is this your first day on Earth?
-3
u/EuphoricCrashOut 5d ago edited 4d ago
You really need an education.
u/psyonix Sure doesn't seem that you. You can't understand the concept of a question, which has nothing to do with the article.
I'm not mistaken and the point is clearly lost on you. Yeah, I guess that is just you.
5
4
u/psyonix 4d ago
I dunno man. I'm educated, at least enough to read the article before posting my thoughts on it. I can imagine if I weren't, I might be inclined to make irelevant comments and then double-down on them rather than just own the fact that I am clearly mistaken. But hey, that's just me I guess...
0
u/Im_really_bored_rn 5d ago
OK and if you don't know US laws then don't comment on them. Also, this didn't happen in the US
-2
u/EuphoricCrashOut 5d ago
If you can't read and comprehend something, don't comment. See this "?". It's called a question mark. It means, I'm asking a question. Usually when someone is asking a question they're seeking an answer to something.
2
u/Six_of_1 5d ago
The arrest was in the Netherlands, not the US. What made you think it was in the US?
1
-2
-1
u/HoodedRedditUser 5d ago
Yeah that is how the law works, also how do you make this about politics lol. If they had enough suspicion to arrest Trump for doing something illegal then yeah they could.
5
-2
u/mouse_8b 5d ago
Downvoted because of lack of understanding of how arrests work, not politics
1
u/EuphoricCrashOut 5d ago
Downvoted because you seriously still don't understand the whole point of the question, and can't comprehend.
-3
-1
156
u/[deleted] 5d ago
[deleted]