[Mr. Robot]

Omniscient recently tweeted out this:




Now I'll take his word on it being L3Harris, which lists itself as "an American technology company, defense contractor, and information technology services provider"

While Wikipedia also list them as this:
https://en.wikipedia.org/wiki/L3Harris

. They specialize in surveillance solutions,microwave weaponry, and electronic warfare. It was formed from the merger of L3 Technologies (formerly L-3 Communications) and Harris Corporation on June 29, 2019, and was expected to be the sixth-largest defense contractor in the United States.

So why the fuck are they scanning Hackforums? Not just scanning HF but trying to do so in a way so blatantly.

The IPs Omni listed in his image:

205.149.43.32
205.149.60.120
205.149.37.165
205.149.60.124
75.10.63.124
205.149.55.151
205.149.50.128
205.149.51.203
205.149.37.105
75.10.63.115
205.149.43.29

If we take just the first IP listed and look at the ASN for it, then specify by L3 Harris -
https://www.shodan.io/search?query=org%3...s++Inc.%22

[LeetSpeed]

Maybe they/re looking for some new talent.

[Mr. Robot]

Maybe they/re looking for some new talent.

Should find all their range and then redirect all requests to pull a page that just says "YOU SHALL NOT PASS L3 HARRIS!"

[perok]

Haha. These guys developed mobile phone surveillence equipment too. Get your tinfoil hats out boys.

'In June 2022, it was reported to have held talks to purchase the Israeli company NSO, which builds Pegasus spyware.[25] White House officials heard of the talks and voiced opposition, resulting in L3Harris discontinuing its plans.'

Under the thumb of the government. Overall, quite a shitty company.

[Truth]

yeah stuff like this makes me think the switch to "moneyforums" would have been better.

[◔ßorder╙ineExtrⒶ]

Not a surprise, I'd wager this is only one of the multiple "companies" or better yet government run operations that is crawling HF. This is done for a variety of reasons, starting from the most important ones like national security and identifying any possible threats to critical infrastructure, up to scraping data for information/monetization purposes (?).

Honestly this is a surprise only if you've been living under a rock for the past decade or so. Op-sec is dead, privacy hasn't existed for over a decade and we're all just cogs in the surveillance machine. Luckily I'm from a shitty third-tier country that only recently started taking action against cybercrime etc. and even if they were to try anything to prosecute me for my past actions (statute of limitations bitch), I'd have their whole infrastructure down within the month lol (shitty cybersecurity practices with rampant corruption and mismanagement at every level, shouldn't be too hard). Kinda feel bad for you guys in first-world countries, you have to make sure your ass is covered or the feds might come knocking at your door lol.

Also, a huge thank you to Omni for exposing these cases and for trying to keep the community safe & authentic, rather than sell out and hand over HF users' data. Keep up the great work mate, us old timers are cheering you on from the sidelines.

[◔ßorder╙ineExtrⒶ]

What did you guys do to piss off the U.S.A government? Now, we got every agency up in this business...

Me personally nothing lol, quite the opposite, should be all good with most of the intelligence agencies (hiiiiiiii guys).

A lot of shit has gone down here on HF and lots of members have been involved in a lot of illegitimate activities, which I guess it makes it somewhat of a worthy target to keep an eye on, for the reasons I mentioned above. However, only a very slight % of users might be of interest to intelligence agencies etc, most of the shit that happens around here is inconsequential and not worth pursuing further. So no, just because you're hacking your neighbor's wifi doesn't mean that the feds will come knocking on your door lol

[Laughing Man]

I mean at the end of the day this isn't the first or the last time the government has gotten involved or tried to get things from HF.

[Bear]

Forecasting fraud, potential malicious tools being released, etc, among other reasons why such scrapers are used for.

[Lovely❤️]

If they're scraping contracts they're probably linking crypto adresses to known aliases or smthn so they might be able to connect some dark-net sellers to clear-net sellers.

[Omniscient]

I just find it interesting that it's possible the Fed was using a private contractor. But also, potentially they are data mining to sell it to foreign clients too.

HF gets crawled constantly but I've never had a company so blatantly do it from their own servers. Scraping isn't terrible. HF is clearnet. I block it when I find it but honestly it's not that harmful other than fake accounts and some additional server load. It gives me an icky feeling though, like someone peeping through my window while I'm just watching TV on my couch. I ain't doing nothing wrong, but what the fuck are you looking about?

Also, I never heard of this company before. That alone was interesting to me. That this is a very old company worth

$40b company...with a 2% dividend even.
https://finance.yahoo.com/quote/LHX?p=LH...c=fin-srch

Their international presence which led me to consider it's not US government doing crawl.

[Mr. Robot]

I just find it interesting that it's possible the Fed was using a private contractor. But also, potentially they are data mining to sell it to foreign clients too.

I know it's a long shot, but maybe reach out to them for comment?

[Omniscient]

HF still being crawled by them. I just tweeted an image out.

[Mr. Robot]

HF still being crawled by them. I just tweeted an image out.

That's fucking insane. Look at the email formats - I wonder if setting up email filters to stop that would help. Also maybe an AI implementation to analyze account behavior to then give you alerts.
I'm also curious as to why their email creation looks like that, is it a known technique?

[Omniscient]

That's fucking insane. Look at the email formats - I wonder if setting up email filters to stop that would help. Also maybe an AI implementation to analyze account behavior to then give you alerts.
I'm also curious as to why their email creation looks like that, is it a known technique?

Gmail does this thing with dots.


[email protected] is the same as

[email protected]

So what happens is a bot can make [email protected] but register at sites with dozens of variations. Now I stopped that a long time ago but it doesn't stop this bot from using that method. It was also doing matching mail and username accounts so [email protected] would join with username myfakeccount. I assume because those were easy to spot they changed their methodology. But you can see from the screenshot how easy they are to manually spot till I find a new way to prevent these bots.

I don't want to give too much away about measures I have taken or plan to take.