SCF Advanced Search

  • Total Posts: 40960
  • Total Topics: 14662
  • Online Today: 529
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)

Author Topic: Hacker Leaves Online Trail, Loses Anonymity  (Read 3818 times)

0 Members and 1 Guest are viewing this topic.


  • SCF VIP Member
  • *****
  • Posts: 776
  • KARMA: 117
  • Gender: Male
  • Pez
Hacker Leaves Online Trail, Loses Anonymity
« on: 18. April 2012., 12:23:49 »
Hacker Leaves Online Trail, Loses Anonymity

Since March 20, the @Anonw0rmer Twitter account has been silent. Its owner, w0rmer, is known as a member of the CabinCr3w group, a hacker team linked to Anonymous.

Larger picture

In early February, as part of the Operations PiggyBank and PigRoast, the CabinCr3w members were suspected of hacking various police department- or law enforcement-related websites including:

•West Virginia Chiefs of Police Association website (February 5)
•Salt Lake City Police Department
•Texas Police Association (February 8′)
•Syracuse Police Department
•Newark Police Foundation
•Wisconsin Chiefs of Police Association
•Dallas Police Department
•Alabama Department of Public Safety (February 9)
•Alabama Houston County (February 20)

Among the leaked data are login credentials, badge numbers, addresses, home/mobile/office phones, and social security numbers. They information was leaked to the public and posted on pastebin, pastebay, or pastehtml. The data were generally posted on Twitter account @CabinCr3r, which has been silent since March 12.

On February 5, the first post appeared Twitter account @higochoa. More appeared on @Anonw0rmer, which was created the following day.

In the Alabama case, the leaked data were posted on pastehtml by someone named w0rmer. The user’s Twitter profile picture was at the top of the document. At the bottom, our hacker added a photo exhibiting a woman’s breasts with a sign attached to her belly.

Larger picture

Unfortunately, w0rmer was not concerned with what was revealed by the exchangeable image file format (Exif) metadata that accompanied these images. The police, however, were.

I found that downloading the picture and using Phil Harvey’s ExifTool was very informative. I discovered the photo was taken with an iPhone 4 on February 5. Most interesting is the embedded GPS information. It came from a home in Southern Australia.

Larger picture

As mentioned in the affidavit in support of a criminal complaint, the hacker left some other clues that I followed:

•Two IP addresses assigned to computers located in Galveston, Texas
•Five other images (Exif free) posted on the website, where one finds the same woman in various states of undress holding various other statements by w0rmer or CabinCr3w

Larger picture

A screenshot in another image shows a computer desktop running an IRC chat client (KVIrc) at the bottom right. In its window, the user @higochoa is logged on.

Larger picture

Following the username, I found two posts retrieved via an open-source search on the website One is signed Higino Ochoa AkA w0rmer.

Larger picture

I next retrieved a photo via open-source search for @Higochoa that showed an individual geocaching in Texas. This picture, compared with the one displayed on the driver’s license of the suspect, was of the same individual.

Larger picture

The same person had a Facebook account and another identifiable portrait. According to the profile, the suspect resides in the Galveston area.

Larger picture

On his Facebook profile he states that he is in a relationship with a woman whose Facebook profile indicates she lives in New South Wales, Australia.

Thus we come full circle. Be careful before breaking the law. Using only open-source searches, even an Anonymous member can be unmasked.

Orgianal article: Tuesday, April 17, 2012 at 10:12am by Francois Paget
Their is two easy way to configure a system!
Every thing open and every thing closed.
Every thing else is more or less complex.

Start Turfing !,8405.msg21475.html#msg21475

Samker's Computer Forum -

Hacker Leaves Online Trail, Loses Anonymity
« on: 18. April 2012., 12:23:49 »


  • SCF VIP Member
  • *****
  • Posts: 3611
  • KARMA: 157
  • Gender: Female
Re: Hacker Leaves Online Trail, Loses Anonymity
« Reply #1 on: 26. April 2012., 17:55:02 »
Damn - gotta check me some open source search engines :|

COOL reading - thanx :>



~~~ ~~~

Cuisvis hominis est errare, nullius nisi insipientis in errore persevare
All spelling mistakes are my own and may only be distributed under the GNU General Public License! – (© 95-1 by Coredump; 2-012 by DevNullius)
More information about bitcoin, altcoin & crypto in general? GO TO

Cuisvis hominis est errare, nullius nisi insipientis in errore persevare... So why not get the real SCForum employees to help YOUR troubled computer!!! SCF Remote PC Assist

Samker's Computer Forum -

Re: Hacker Leaves Online Trail, Loses Anonymity
« Reply #1 on: 26. April 2012., 17:55:02 »


With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters)

Enter your email address to receive daily email with ' - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising