Hacktivist collective Nameless claims to have obtained gigabytes of information from Epik, which supplies area title, internet hosting, and DNS companies for a wide range of purchasers. These embody the Texas GOP, Gab, Parler, and 8chan, amongst different right-wing websites. The stolen knowledge has been launched as a torrent. The hacktivist collective says that the info set, which is over 180 GB in measurement, comprises a “decade’s value of information from the corporate.”
Anonymous says the info set is “all that is wanted to hint precise possession and administration of the fascist aspect of the Web that has eluded researchers, activists, and, properly, nearly all people.” If this data is right, Epik’s clients’ knowledge and identities might now fall into the fingers of activists, researchers, and nearly anybody curious sufficient to take a peek.
Many years of Epik Stuff, Now in a Torrent Close to You
Epik is a website registrar and internet companies supplier recognized to serve right-wing purchasers, a few of which have been turned down by extra mainstream IT suppliers because of the objectionable and generally illicit content material hosted by the purchasers.
Nameless’ actions started with what the group calls “Operation Jane” after the Texas Heartbeat Act was signed into legislation this month. The restrictive abortion legislation permits non-public people, not essentially authorities our bodies or the police, to implement the six-week abortion ban. In accordance with the act, any Texas resident can convey a civil lawsuit in opposition to any one who performs or helps to facilitate an unlawful abortion—and declare at the very least $10,000 in damages.
Among the many knowledge set are varied SQL databases containing what look like buyer data related to each area title hosted by Epik. Ars analyzed a small subset of the leaked knowledge set, together with what a supply calls an Epik worker’s mailbox, which comprises correspondence from Epik CEO Rob Monster.
Members of the whistleblower website Distributed Denial of Secrets and techniques (DDoSecrets) have additionally made the info set available through alternate means for these unable to make use of torrents.
“We’re not conscious of any breach. We take the safety of our purchasers’ knowledge extraordinarily severely, and we’re investigating the allegation,” an Epik consultant instructed Ars.
Hackers Alter Epik’s Data Base to Mock Firm’s Response
Nameless additionally tampered with Epik’s information base to mock the corporate’s denial of the breach.
“On September 13, 2021, a gaggle of youngsters calling themselves ‘Nameless’, whom we’ve by no means heard of, stated they handle[d] to come up with, properly, actually, all our knowledge, after which launched it,” stated the altered information base, as seen in an archived copy. “They declare it included all of the person knowledge. All of it. All usernames, passwords, e-mails, assist queries, breaching all anonymization service[s] we’ve. After all it’s not true. We’re not so silly we might permit that to occur.”
The knowledge-base web page ends by sarcastically saying, “We did write this ourselves, that is clearly not a part of the hacked account.” Epik has since eliminated the web page.
Previous to this incident, Nameless defaced the Texas GOP web site by changing references to “Assist Texas Keep Pink” with “Texas: Taking Voices from Ladies to advertise theocratic erosion of church/state boundaries.” The group additionally added “donate” hyperlinks to reproductive well being care nonprofit Deliberate Parenthood.
This story initially appeared on Ars Technica.
Extra Nice WIRED Tales