[iwar] [fc:YIHAT.incurs.hacker.community's.wrath]

From: Fred Cohen (fc@all.net)
Date: 2001-10-26 11:01:19


Return-Path: <sentto-279987-3478-1004119273-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Fri, 26 Oct 2001 11:02:09 -0700 (PDT)
Received: (qmail 5584 invoked by uid 510); 26 Oct 2001 18:00:37 -0000
Received: from n16.groups.yahoo.com (216.115.96.66) by 204.181.12.215 with SMTP; 26 Oct 2001 18:00:37 -0000
X-eGroups-Return: sentto-279987-3478-1004119273-fc=all.net@returns.onelist.com
Received: from [10.1.4.53] by n16.groups.yahoo.com with NNFMP; 26 Oct 2001 18:01:06 -0000
X-Sender: fc@red.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-8_0_0_1); 26 Oct 2001 18:01:13 -0000
Received: (qmail 27332 invoked from network); 26 Oct 2001 18:01:12 -0000
Received: from unknown (10.1.10.27) by l7.egroups.com with QMQP; 26 Oct 2001 18:01:12 -0000
Received: from unknown (HELO red.all.net) (65.0.156.78) by mta2 with SMTP; 26 Oct 2001 18:01:12 -0000
Received: (from fc@localhost) by red.all.net (8.11.2/8.11.2) id f9QI1KI01937 for iwar@onelist.com; Fri, 26 Oct 2001 11:01:20 -0700
Message-Id: <200110261801.f9QI1KI01937@red.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL3]
From: Fred Cohen <fc@all.net>
X-Yahoo-Profile: fcallnet
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Fri, 26 Oct 2001 11:01:19 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] [fc:YIHAT.incurs.hacker.community's.wrath]
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

YIHAT incurs hacker community's wrath  
By James Middleton, vnunet.com, 10/25/2001 http://www.vnunet.com/News/1126392

Vigilante hacker group YIHAT, and its founder Kim 'Kimble' Schmitz, are
fast becoming a laughing stock on the hacker scene and seem to be making
enemies all over the underground. In the last week YIHAT has been forced
to take its official website down.  Pakistani hacker group GForce last
week threatened YIHAT after it emerged that the vigilante group was
investigating them. Days later the YIHAT website, Kill.net, was hit by a
denial of service attack and has since been closed.  But the latest
attack has come from security site Attrition after YIHAT accused it of
hosting a terrorist website on its server.  In emails released earlier
this week by Attrition administrator Jericho, YIHAT hacker Alistair
Rooney mistakenly assumed that GForce was launching its attacks through
Attrition.org. This was because the site, which hosts a defacement
mirror, is publishing defacements attributed to GForce.  An email from
Schmitz himself informed Jericho that Attrition would be "f***ed soon"
and that he had "a surprise" for the site because of its mistaken
association with GForce.  This seemed to spark a sense of unease even
within the ranks of YIHAT. Rooney himself admitted he was "a bit
surprised" at Schmitz's retort.  Jericho said: "Today, one of the YIHAT
monkeys contacted me and told me to 'keep an eye on' a defacing group
known as Gforce Pakistan. His reasoning for this comment was the claim
that Attrition hosted a GForce Pakistan website. Apparently YIHAT and
this monkey did not bother to read anything on Attrition or take a
moment to understand what the Attrition mirror was all about." Schmitz
has also made an enemy out of the mysterious hacker Fluffi Bunni, who
has defaced the YIHAT website twice over the past weeks.  Schmitz has
since put a $10,000 bounty on Fluffi Bunni's head, according to YIHAT
members active on the 'official' YIHAT IRC (internet relay chat)
channel.  But even YIHAT's IRC channel has been invaded by other hackers
quick to disparage YIHAT and Schmitz's already tarnished name. "The
elite will be on their ass soon," said one user. Others echoed the
common response that "YIHAT is finished".  YIHAT's reputation got off to
a bad start after a number of hackers went on a defacement spree under
the group's name. This most noticeably shook the security underground
this morning, when the not for profit security news site Security News
Portal was defaced by someone claiming to be Kimble from YIHAT. Unfortunately, the 
site administrator has now pulled the plug on the
site, denying the security industry another useful resource.  But what
seems to have given the security industry, both above and below ground,
most ammunition is what has been called Schmitz's constant "spin
doctoring" of the situation.  When Kill.net was taken offline Schmitz
said that everything was going to plan. "Phase one" of their mission was
done, and YIHAT was "moving underground".  "As you can see, we're not
dealing with a lot of brain-thrust here," said Jericho. "If the best
they can do is this, the terrorists' online activity has little to worry
about unfortunately." Schmitz has since been indicted into the Attrition
Hall of Shame, the charlatan's gallery, at the top of the list.

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Pinpoint the right security solution for your company- Learn how to add 128- bit encryption and to authenticate your web site with VeriSign's FREE guide!
http://us.click.yahoo.com/yQix2C/33_CAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-12-31 20:59:57 PST