[iwar] [fc:World.of.Hell.back.on.the.warpath]

From: Fred Cohen (fc@all.net)
Date: 2002-01-14 19:53:42


Return-Path: <sentto-279987-4305-1011066758-fc=all.net@returns.groups.yahoo.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Mon, 14 Jan 2002 19:56:07 -0800 (PST)
Received: (qmail 6213 invoked by uid 510); 15 Jan 2002 03:52:49 -0000
Received: from n29.groups.yahoo.com (216.115.96.79) by all.net with SMTP; 15 Jan 2002 03:52:49 -0000
X-eGroups-Return: sentto-279987-4305-1011066758-fc=all.net@returns.groups.yahoo.com
Received: from [216.115.97.166] by n29.groups.yahoo.com with NNFMP; 15 Jan 2002 03:52:38 -0000
X-Sender: fc@red.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-8_0_1_3); 15 Jan 2002 03:52:38 -0000
Received: (qmail 75770 invoked from network); 15 Jan 2002 03:52:37 -0000
Received: from unknown (216.115.97.171) by m12.grp.snv.yahoo.com with QMQP; 15 Jan 2002 03:52:37 -0000
Received: from unknown (HELO red.all.net) (12.232.72.98) by mta3.grp.snv.yahoo.com with SMTP; 15 Jan 2002 03:52:37 -0000
Received: (from fc@localhost) by red.all.net (8.11.2/8.11.2) id g0F3rgh10333 for iwar@onelist.com; Mon, 14 Jan 2002 19:53:42 -0800
Message-Id: <200201150353.g0F3rgh10333@red.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL3]
From: Fred Cohen <fc@all.net>
X-Yahoo-Profile: fcallnet
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Mon, 14 Jan 2002 19:53:42 -0800 (PST)
Subject: [iwar] [fc:World.of.Hell.back.on.the.warpath]
Reply-To: iwar@yahoogroups.com
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Most of RaFa's defacements are mass hacks and really don't stand out in
any way. Also remember that RaFa was the genius who defaced a company in
the World Trade Center with an anti-Osama rant:

  http://www.newsbytes.com/news/01/170184.html

  Hacking Vigilantes Deface WTC Victim's Site
  By Brian McWilliams,  Newsbytes

  Members of a hacking coalition retaliated for the terrorist attacks on
  America by defacing at least two Iranian Web sites since the weekend.
  But the loose-knit group may have also erroneously marred a site
  operated by a company with offices in the World Trade Center. [snip]


Food for thought as you read the following article.

--

<a href="http://www.vnunet.com/News/1128276">http://www.vnunet.com/News/1128276>

World of Hell back on the warpath
By James Middleton [14-01-2002]

Notorious website defacement group World of Hell (WoH) issued a warning to
the internet community last week as one of its most prominent members went
on a hacking spree. 

Current WoH front man 'RaFa' has notched up over 500 defacements since 5
January by hitting a number of Linux-based machines hosting multiple
websites. 

Shortly before Christmas the last of the original members of the WoH crew
made an exit from the hacker scene leaving the group's future in doubt. 

But an email sent to vnunet.com from WoH member IceKool assured us that,
although a lot of the original members had to quit "for personal reasons",
the group is now up and running again. 

"RaFa and the old crew of WoH are rebuilding the group and plan for it to
be bigger than it was before," said IceKool, which may be read as a
warning to website administrators. 

But RaFa's defacements this year so far have carried a sombre message and
a scathing attack on the defacement community instead of the typical
"haxxor 0wn3d joo" bragging. 

"I have witnessed the defacing scene become more and more ignorant over
the years. In the end no one cares that you rooted their system but, if
you make them think and wonder, then they won't forget you," read the
hacker's comments. 


-
The information and commentary is Copyright 2001, by the individual author.
Permission is granted to quote, reprint or redistribute provided the text is not
altered, and the author and attrition.org is credited. The opinions expressed
in this mail are not necessarily the opinion of all Attrition staff members.

Commentary Archive: http://www.attrition.org/security/commentary/
The Attrition Mirror: http://www.attrition.org/mirror/attrition/
Country/TLD Statistics: http://www.attrition.org/mirror/attrition/country.html
Attrition Defacement Statistics: http://www.attrition.org/mirror/attrition/stats.html
Operating System Graphs: http://www.attrition.org/mirror/attrition/os-graphs.html

Other Web Defacement Mailing Lists: http://www.attrition.org/security/lists.html
Contacting Attrition Staff: <a href="mailto:staff@attrition.org?Subject=Re:%20[defaced-commentary]%20WoH%20makes%20the%20"news"%2526In-Reply-To=%2526lt;Pine.LNX.3.96.1020114183015.6053i-100000@forced.attrition.org">staff@attrition.org</a>

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2002-12-31 02:15:03 PST