Bad OPSEC - How The Feds Traced a Monero User

Поделиться
HTML-код
  • Опубликовано: 26 сен 2024
  • In this video I discuss how the hacker responsible for the Vastaamo data breach incident was caught due to numerous OPSEC mistakes and not really any flaws with the Monero protocol.
    My merch is available at
    based.win/
    Subscribe to me on Odysee.com
    odysee.com/@Al...
    ₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿
    Monero
    45F2bNHVcRzXVBsvZ5giyvKGAgm6LFhMsjUUVPTEtdgJJ5SNyxzSNUmFSBR5qCCWLpjiUjYMkmZoX9b3cChNjvxR7kvh436
    Bitcoin
    3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV
    Ethereum
    0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079
    Litecoin
    MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF

Комментарии • 1,6 тыс.

  • @lightfox11
    @lightfox11 7 месяцев назад +2310

    the fact he would actually post his user folder to the internet really shows how sloppy this pos is

    • @Ulvis_B
      @Ulvis_B 7 месяцев назад +48

      In the end Everyone making errors.

    • @AncientSlugThrower
      @AncientSlugThrower 7 месяцев назад +253

      Imagine trying anything like this on your daily driver. Holy cow.

    • @rustymustard7798
      @rustymustard7798 7 месяцев назад +202

      Before he even said it, i thought, "11GB?" and instantly started laughing out loud muttering "He tar'd his entire drive, didn't he?"

    • @severalwhitespaces
      @severalwhitespaces 7 месяцев назад +8

      its wild - WILD - omg the mortification

    • @TheKeirsunishi
      @TheKeirsunishi 7 месяцев назад +81

      @@AncientSlugThrower All the identifying information mentioned in the video could be from a machine dedicated to black hat activities. There is no mention of selfies or anything actually personal. They linked him through other crimes he was already suspected of committing

  • @dshaf7
    @dshaf7 7 месяцев назад +411

    Mf was finnish before he even started

  • @unseenxxx
    @unseenxxx 7 месяцев назад +2770

    >tar contained his entire home directory
    This Finnished him

    • @brainwater
      @brainwater 7 месяцев назад +180

      I was expecting something like he tarred it using the full path names giving the police his username, but no, it was 100x stupider than that.

    • @25566
      @25566 7 месяцев назад +126

      Idiot was using his main pc instead of tails, terrible opsec

    • @sanguineel
      @sanguineel 7 месяцев назад +12

      @@brainwater If you tar something with the full path name the tar file contains the full path name? Or do you mean the file name?

    • @Cube_Box
      @Cube_Box 7 месяцев назад +1

      ​@@sanguineelyeah interested as well as i never heard of this before

    • @pogo55555
      @pogo55555 7 месяцев назад +20

      🤣🤣🤣🤣. Pun fun. Thanks!

  • @bronysrule
    @bronysrule 7 месяцев назад +3089

    “Only a fool learns from his own mistakes. The wise man learn from the mistakes of others”- Otto Von Bismark

    • @DxBlack
      @DxBlack 7 месяцев назад +154

      ...of course this suggests that everyone is a fool.

    • @catdaddycoins
      @catdaddycoins 7 месяцев назад +64

      or that you aren't in uncharted territories lol @@DxBlack

    • @Personalinfo404
      @Personalinfo404 7 месяцев назад +111

      "a stupid man will make mistakes and never learn, a dumb man will make mistakes and learn from its experience, a smart man will live his life worrying about not making mistakes, and a wise man will learn lessons from the mistakes of other men"

    • @Knightmare-vc8qg
      @Knightmare-vc8qg 7 месяцев назад +81

      I learn from the mistakes of people who take my advice

    • @brynna77
      @brynna77 7 месяцев назад +23

      This man you quote is clearly not a scientist

  • @blackpolygon9306
    @blackpolygon9306 7 месяцев назад +1114

    The hacker accidentally uploading their home directory is a plot twist that would be called "unbelievable", "lazy wiriting" and similar if it would happen in a movie/show. Literally can't write that stuff.

    • @Sombre____
      @Sombre____ 7 месяцев назад +27

      I don't understand why he didn't use a virtual machine in the first place ... Lazy ?

    • @PompaTG
      @PompaTG 7 месяцев назад +50

      @@Sombre____ That's beyond lazy. Just having a pre-configured and clean image without any PII or login credentials to spin up a new VM for a new hack is not hard, doesn't take much effort or time...

    • @counterleo
      @counterleo 7 месяцев назад +54

      If I was law enforcement I would probably go "hah nice lure, I'm not gonna fall for that" and not even bother with that lead

    • @aldrinmilespartosa1578
      @aldrinmilespartosa1578 7 месяцев назад +44

      Reality is often bat shit crazy because fiction needs to make sense.
      We humans hated deus makima

    • @brahtrumpwonbigly7309
      @brahtrumpwonbigly7309 7 месяцев назад

      And it would be all of those things lmao

  • @Onni-
    @Onni- 7 месяцев назад +2078

    I think the login for vastaamo was something like admin admin. No wonder they got extorted.

    • @jimbo-dev
      @jimbo-dev 7 месяцев назад +342

      In some sources they mentioned root:root as the credentials

    • @ApocDevTeam
      @ApocDevTeam 7 месяцев назад +214

      Don't think people would openly talk about their deepest secrets if they knew the dialog was stored on such a database..

    • @blackpaperbold
      @blackpaperbold 7 месяцев назад +100

      I lock my door using toothpick, the most secure lock in the world.

    • @trashcowew
      @trashcowew 7 месяцев назад +37

      root root

    • @stevengill1736
      @stevengill1736 7 месяцев назад +76

      I think a great root login would be, "rootie toot toot, rootie toot toot, we're the boys from the institute"
      Whoops, probably gave it away....

  • @dontbestupid6664
    @dontbestupid6664 7 месяцев назад +1056

    Scamming sick people who are already spending money they dont have on saving their own lives? How low can you go?

    • @More_Row
      @More_Row 7 месяцев назад +85

      I know right.

    • @michaelm1
      @michaelm1 7 месяцев назад +57

      Exactly. Well put!

    • @Itsgone99
      @Itsgone99 7 месяцев назад

      All that to keep the baby fat on his face he'd lose if he just got a job like the rest of us. 😁
      Starting to consider Snowden was wrong.

    • @onebacon_
      @onebacon_ 7 месяцев назад +193

      Could've gone for a bank or insurances or any other scummy business, but no his "pressure point" were real people. And obviously the Company doesn't give a fuck about their patients privacy. This was a goner from the start.

    • @Nik-rx9rj
      @Nik-rx9rj 7 месяцев назад +146

      Literally the worst crime you could commit. I remember hearing about a few ransomware worms hitting some hospital's networks. Once the attackers found out the hospital's were hit, they gave them the keys to decrypt their infected systems.

  • @waryth4475
    @waryth4475 7 месяцев назад +1956

    Poor Monero-chan getting her reputation damaged with this blunder.

    • @monke7566
      @monke7566 7 месяцев назад

      ​@@SmolSpodermonero is battle tested by governments, and crypto cannot ever be made illegal because it's not regulated in the first place, "illegality" simply means places like binance wont be trading it anymore

    • @anonemoose102
      @anonemoose102 7 месяцев назад +8

      ​@@SmolSpoderstriessand effect?

    • @jsadecki1
      @jsadecki1 7 месяцев назад

      More users in Monero enhance security by creating a larger and more decentralized network, making it difficult for malicious actors to gain control or manipulate the system@@SmolSpoder

    • @TerrorSyxke
      @TerrorSyxke 7 месяцев назад +34

      ​@@SmolSpodertry Linux Mint out, one of the easiest things I used even easier than windows 11 (less repeated places for the same things like settings)

    • @Rock_Appreciator
      @Rock_Appreciator 7 месяцев назад +18

      ​@@TerrorSyxke Mint is my personal favorite too. So much better than windows. I'd be 100% Linux nowadays if I didn't need Windows for work & a few games I play occasionally with relatives.
      Mint is so smooth and straightforward, I have nothing but respect for the developers

  • @rulu1828
    @rulu1828 7 месяцев назад +4633

    Rule 1 of Crime: Don't talk about the crime

    • @spacecowboy511
      @spacecowboy511 7 месяцев назад +285

      Rule 2 of crime: do not talk about crime

    • @Kenword69420
      @Kenword69420 7 месяцев назад +111

      If only I knew rule number 3 😢

    • @ThatGuy-ky2yf
      @ThatGuy-ky2yf 7 месяцев назад +59

      Self Snitching

    • @donnadie2068
      @donnadie2068 7 месяцев назад +90

      >Uploads video to TikTok

    • @Abhishek.Rana.
      @Abhishek.Rana. 7 месяцев назад

      don't upload to RUclips​@@Kenword69420

  • @cleoh3
    @cleoh3 7 месяцев назад +856

    If this guy wasn't such a showman, and had just contacted vastaamo directly, they probably would have paid right up if it meant it stayed out of the news and the data didn't get released. As soon as the media picks it up, they can't pay because it would be a PR nightmare. Makes you wonder how many companies are extorted by hackers without egos and we never even hear about it.

    • @hanro50
      @hanro50 7 месяцев назад +84

      Well, a fair amount of the time the hacker collects a bug bounty instead.
      The more damming the hack, the higher the bounty.

    • @tehonlynoobs5556
      @tehonlynoobs5556 7 месяцев назад +81

      If im not wrong there a lot of hacker did contact the company first but they ignore it cuz authorities like cops always suggest to ignore or not to pay them
      This is why a lot of them goes to media social and post the threat

    • @SillyMonkeysLikeApples
      @SillyMonkeysLikeApples 7 месяцев назад +6

      He did many noob mistakes... thats all,..

    • @maxbd2618
      @maxbd2618 7 месяцев назад +38

      @@hanro50 a bug bounty payout is nothing compared to what u can get from a company off of ransomware so why would they do that

    • @oddspaghetti4287
      @oddspaghetti4287 7 месяцев назад +32

      There's no quarantee that a ransomer doesn't continue asking for money even after you pay since there is no way to quarantee that he would delete the files. So paying them is completely useless.

  • @pajeetsingh
    @pajeetsingh 7 месяцев назад +413

    tarred his home folder? he was surely stoned to do that.

    • @cc-dtv
      @cc-dtv 7 месяцев назад +64

      without a doubt, prob something stronger tbh

    • @RiwenX
      @RiwenX 7 месяцев назад +38

      Vodka

    • @strongestgamer2501
      @strongestgamer2501 7 месяцев назад +49

      Just the fact he doesn't notice he was uploading a several gigabyte file suggests he was smoking something

    • @tvm2209
      @tvm2209 7 месяцев назад +5

      Adderal

    • @simpledog42
      @simpledog42 7 месяцев назад +13

      probably was drunk.

  • @SongOfDeer
    @SongOfDeer 7 месяцев назад +367

    8:24 - We went from "Alright, the guy got a bit cheeky and impatient" to "How was this man even smart enough to hack the database in the first place?" in an instant. Good lord, how does this even happen?

    • @hyde4004
      @hyde4004 7 месяцев назад +110

      Well it wasn't even much of a hack, as the server the db was running on was even indexed by Google and had no firewall, and also had default passwords, like admin admin or something along those lines. So literally anybody who came across the servers adress and decided to try default logins had access to the entire db :D

    • @SongOfDeer
      @SongOfDeer 7 месяцев назад +104

      @@hyde4004 So everybody involved was an absolute muppet; brilliant!

    • @Sombre____
      @Sombre____ 7 месяцев назад +13

      There is always weak DB in the wild. Not everyone take safety seriously. Lazy admin make easy password. You just need to find on of those DB.

    • @hyde4004
      @hyde4004 7 месяцев назад +42

      @@SongOfDeer Basically yes. It was some of the most grossly negligent handling of confidential data in Finnish history. Their security was basically: surely nobody will find the address for our publicly accessible server. Fucking brilliant.

    • @Tattootin
      @Tattootin 7 месяцев назад

      @@hyde4004this careless out of sight out of mind type set up seems to be the internet as a whole? Like if the internet was physical, the bigger corporations would be in buildings made of cardboard and duct tape, while the small dudes and singular users are going to be having fortresses that go invisible with such crazy tech. It’s crazy how much more people neglect when certain circumstances change from physical to digital, I guess the doors that aren’t passed through much are left wide open?

  • @maiastniki
    @maiastniki 7 месяцев назад +637

    why is it ALWAYS someone telling on themselves????

    • @MentalOutlaw
      @MentalOutlaw  7 месяцев назад +418

      Self snitching has been the best aid to law enforcement since the beginning.

    • @konrad94886
      @konrad94886 7 месяцев назад +60

      overconfidence I'd assume. The hacker just ran the command to zip the data and didn't bother to double check. After all, if you call yourself a true hacker, there's no way you could make a mistake, right?

    • @Splarkszter
      @Splarkszter 7 месяцев назад

      ​@@konrad94886 That seems plausible.
      Quirks about working directories and not being organized

    • @FLAXMS
      @FLAXMS 7 месяцев назад +36

      You only hear about the dumb hackers getting caught through their idiocy. WAY MORE fishing attacks happen every year than you think but it's all a bit hush-hush.

    • @Octaviu5
      @Octaviu5 7 месяцев назад +16

      The finngolian is obviously a social engineer or a skid and not a hacker.

  • @BillyBob-kj4qq
    @BillyBob-kj4qq 7 месяцев назад +321

    Hack snitches telling all their business, sitting in the court and be their own star witness.

    • @refficial
      @refficial 7 месяцев назад +34

      do you see the perpetrator? yeah i’m right here

    • @Toresdale
      @Toresdale 7 месяцев назад

      @@refficial Fuck around, get the whole server sent up for years, uh

    • @yis9259
      @yis9259 7 месяцев назад

      ​@@refficialfuck around get the whole hacking group sent up for years

    • @placeholder4988
      @placeholder4988 7 месяцев назад +12

      r.i.p mf doom

    • @parashkevdraganov2395
      @parashkevdraganov2395 7 месяцев назад

      @@placeholder4988 ALL CAPS WHEN YOU SPELL THE MAN NAME

  • @ApocDevTeam
    @ApocDevTeam 7 месяцев назад +196

    Their security policy was probably "it won't happen to us".

    • @ImNotPotus
      @ImNotPotus 7 месяцев назад +15

      "We would be considered paranoid if we thought this could happen which would recuse us from conducting the therapy."

    • @killerkonnat
      @killerkonnat 7 месяцев назад +12

      As someone from Finland following these news years ago, it basically was.

    • @PompaTG
      @PompaTG 7 месяцев назад

      "Why would anyone want to target us? We're not that important, so no one will bother"

    • @brahtrumpwonbigly7309
      @brahtrumpwonbigly7309 7 месяцев назад +1

      Normalcy bias

    • @robertgrays8790
      @robertgrays8790 7 месяцев назад

      The probability of a double-ransomware attack is low, but never zero.

  • @top0657
    @top0657 7 месяцев назад +98

    One of the biggest mistakes he made (along with the tar fuck up) was that he talked to the police. I read the interrigation documents and were baffeled to see that there were pages after pages on him just casually talking and smart-assing with the police, leading him to straight up admit many of the links in the picture shown in the video. As Finland has a robust western justice system where you need to have proven then suspicion beyond a reasonable doubt I think it might even have been very unlikely to get him convicted without him talking so much.

    • @B1gLupu
      @B1gLupu 7 месяцев назад +20

      The biggest mistake his mother made was seeing that pregnancy into term. He ruined so many lives.

    • @andre_santos2181
      @andre_santos2181 5 месяцев назад +4

      Indeed. On some legal systems, the confession to Police is already proof. On others, only the confession to a judge is a proof, however, spelling the beans to the police make they go after more proof easily

    • @JohnB-dr8sk
      @JohnB-dr8sk 2 месяца назад +1

      Finland is run by the Far Left and NWO Globalists. This hacker only got 6 years for terrorizing half his country thanks to the Far Left-Wing appointed Finnish court officials. That's why he wasn't scared to talk. Far Leftists want to destroy all capitalist countries on earth per Marx's writings. They view this hacker as a "fellow traveler."

  • @hamster3171
    @hamster3171 7 месяцев назад +97

    the weakest link of cybersecurity is the human

  • @dzuchun
    @dzuchun 7 месяцев назад +352

    "archive contained his entire home folder"
    my live reaction:
    AAAAAAAAAWWWW!!!
    EEEEEEEEEEEWWWW!!!
    😂😂
    "tracing monero" never was easier

    • @billbuyers8683
      @billbuyers8683 7 месяцев назад +3

      so traced now like never will it never not be traced. much tech they are

    • @_idiot
      @_idiot 7 месяцев назад +58

      "hey guys i also included my ssh keys, IP addresses to all my servers, and cute pics of me in my programming socks"

    • @counterleo
      @counterleo 7 месяцев назад +17

      I was expecting "text doesn't take much space, the archive was 11GB because it contained imagery like CT scans", I really did NOT expect "it contained his entire home folder" hahah brilliant plot twist
      Why would he not double check the contents, and if you are gonna make a database of mostly text-based records available on Tor why on earth would you not gzip your tar, has this guy ever used a Unix-like OS before or what 😂

    • @Moonstone-Redux
      @Moonstone-Redux 7 месяцев назад +11

      @@counterleo Uploading his entire home folder. At this point he might as well have ripped the hard drive out of his computer and mailed it to YLE (the local news network).

    • @starblaiz1986
      @starblaiz1986 7 месяцев назад +3

      My live reaction was more like "HUUUUUH?!?! WHY THOUGH?!?!" 😂

  • @iamfishmind
    @iamfishmind 7 месяцев назад +75

    heard a hundred thousand facepalms when he said he uploaded his f'ing home folder

    • @poo5630
      @poo5630 21 день назад

      this part actually made my eyes twitch with cringe, it was sooo bad 😵‍💫😵‍💫😵‍💫

  • @thestoryteller2514
    @thestoryteller2514 7 месяцев назад +282

    When I'm in a shilling monero competition and my opponent is mental outlaw

    • @William0271
      @William0271 7 месяцев назад +33

      Shilling is a strong word. He alone won't significantly change the price over the span of a few months

    • @itsawill9268
      @itsawill9268 7 месяцев назад +33

      Fan of the project ≠ shill

    • @brahtrumpwonbigly7309
      @brahtrumpwonbigly7309 7 месяцев назад +11

      Was the video true or not? It doesn't matter if he is defending monero if his defense is true.

    • @treemallow757
      @treemallow757 7 месяцев назад +1

      He right tho

    • @MrCmon113
      @MrCmon113 7 месяцев назад +2

      What's better than monero for conceilability?

  • @nou712
    @nou712 7 месяцев назад +98

    4:16 yulilawlta, towrilawlty..... 🤣 damn, he really took the pronunciation to the next level. One of our great joys is foreigners trying to pronounce anything in Finnish.

    • @videosambo01
      @videosambo01 7 месяцев назад +23

      Toi oli kyl niin teurastettu lausunta et toon tosta clipin soundboardiin :D

    • @Miifor
      @Miifor 7 месяцев назад +3

      root:roottista :-DDD

    • @SirSogMuffins
      @SirSogMuffins 7 месяцев назад

      you speak a fake elvish monstrosity of a language

    • @thomastheeternaltormentor287
      @thomastheeternaltormentor287 7 месяцев назад +4

      because yall don't use ü and confuse everybody with your y, also since when is finland a federation?

    • @gxooo
      @gxooo 7 месяцев назад +4

      huutista :DD

  • @Fantasti-cat
    @Fantasti-cat 7 месяцев назад +63

    Vastaamo wasn't an online therapy service, they were a therapist center with multiple locations in alot of major cities in Finland.

    • @seneca983
      @seneca983 6 месяцев назад +5

      They did offer online therapy too.

  • @that_is_not_me
    @that_is_not_me 7 месяцев назад +267

    How do you accidentally tar your whole home folder, upload it, and not notice that it's way bigger than expected?

    • @DonVigaDeFierro
      @DonVigaDeFierro 7 месяцев назад +129

      Being too drunk and straight out of the sauna.

    • @mr.cauliflower3536
      @mr.cauliflower3536 7 месяцев назад +5

      Right?

    • @warhawk_yt
      @warhawk_yt 7 месяцев назад +30

      At least double check the archive before publicly uploading it. I am assuming he just accidentally forgot to add the right folder at the end of the path when archiving. I would of noticed when just a bunch of document files were taking a lot longer to archive than it should.
      Edit: Also, you should always double check commands you are running before doing them especially when it comes to modifying/managing files. You never know if a command you think you are running is safe but a typo accidently makes it dangerous.

    • @Macintosh007
      @Macintosh007 7 месяцев назад +6

      He didn't use a separate pc for his hacking stuff it seems

    • @CursedAIJams
      @CursedAIJams 7 месяцев назад +17

      Unless you use a specific GUI application to do it, TAR files are generally created from the command line. TAR files are created from the 'current working directory', so you have to tell Terminal/Command Prompt to go to a particular folder before telling it to archive. If you don't do this, you will get everything from the root onwards. Then at the end you'd just have one giant file which is too much of a pain to try to extract in order to check. Kind of an easy mistake to make.

  • @hahhuli
    @hahhuli 7 месяцев назад +19

    This thing was so bad, that the Government allowed the "injured party" (i.e people who were customers of Vastaamo) to change their social security number free of charge.

  • @itsawill9268
    @itsawill9268 7 месяцев назад +31

    To hack a psychotherapy clinic… how evil thank god the hacker had bad opsec

  • @brimmed
    @brimmed 7 месяцев назад +33

    It's kind of alarming knowing that there's companies that aren't securing our data properly. My buddy just got a job somewhere doing some IT work. He told me there's thousands of social security #s unencrypted stored as plain text, along with names and addresses on his company's server.

    • @DingoYabuki
      @DingoYabuki 7 месяцев назад +4

      The place I work for does this too, it's so fucked...

    • @nicksjacku9750
      @nicksjacku9750 7 месяцев назад

      doesn't surprise me

    • @modernbassheads5051
      @modernbassheads5051 7 месяцев назад +2

      @@DingoYabukireport them to the FCC

    • @HelloKurse
      @HelloKurse 6 месяцев назад

      Yeah I'm 99% sure that's been illegal for quite awhile now. Even storing passwords as plain text is fking BAD, let alone SS#.. easy payday.

    • @HelloKurse
      @HelloKurse 6 месяцев назад

      Inefficent protection of valuable data is REALLY BAD

  • @Name-ot3xw
    @Name-ot3xw 7 месяцев назад +35

    Finnish language has got to narrow it down to about 35 people + a particularly well read reindeer.

    • @sycration
      @sycration 7 месяцев назад +13

      Up in the north, in Lappi region, the Sami people keep their IT infrastructure mounted to their reindeer herds so they can run away when the feds come looking

  • @whatamievendoing
    @whatamievendoing 7 месяцев назад +46

    Glad Monero isn't compromised and it was just an idiot criminal using BTC instead of XMR to begin with

    • @yandelross8780
      @yandelross8780 3 месяца назад

      compromised? wym by that

    • @DaveSmith-cp5kj
      @DaveSmith-cp5kj 2 месяца назад

      @@yandelross8780 As in the private ledger being readable or something like that.

  • @Hellbilly8747
    @Hellbilly8747 7 месяцев назад +41

    "Uploaded his home folder in the tar file" im deceased ☠️

    • @fartful
      @fartful 7 месяцев назад +2

      💀💀💀

  • @FlymanMS
    @FlymanMS 7 месяцев назад +39

    “How did you catch me guys??? - You left your wallet with ID”

  • @Relkond
    @Relkond 7 месяцев назад +20

    Very often, the weakest point in a system is with the interface between the keyboard and the chair.

  • @Gideonrex1
    @Gideonrex1 7 месяцев назад +25

    Guy after posting entire home folder: “WAIT WAIT WAIT WAIT!!! NO NO NO NO!!!”

    • @strongestgamer2501
      @strongestgamer2501 7 месяцев назад +8

      "Whoopsie doodle"

    • @Pyovali
      @Pyovali 6 месяцев назад +2

      More like "EI SAATANA, MITÄ MINÄ OLEN TEHNYT?"

  • @TheUnRemarkableGamer
    @TheUnRemarkableGamer 7 месяцев назад +31

    I could give you a literal documentaries worth of information on this guy and used to know zeekill for years. We lost contact about the time he started to become somewhat known after his lizard squad antics. He used to hang out with the Team Avolition crowd quite often and was an absolute demon of chaos and laughter. Towards the end, he really started to push things a bit far, swatting his opps, and streaming it in the community teamspeak. During that era, he along with Aurora and a few others I believe had one of the largest botnets in existence at the time.
    Edit: Just to be clear, while I considered zeekill a close friend at one point the crimes he's up to now are beyond "the lulz" or mostly innocent trolling we did.

    • @nameshere
      @nameshere 7 месяцев назад

      Shoutout to vinnie omari

    • @Peeking
      @Peeking 7 месяцев назад +1

      Thought I was the only one who knew about him and the lizard squad thing,

    • @incinncity
      @incinncity 6 месяцев назад +2

      I just have one question, the one everyone's asking. Was he a drinker? Cause how tf do you upload the home folder of the server to tor as a tar 😭

    • @TheUnRemarkableGamer
      @TheUnRemarkableGamer 6 месяцев назад +1

      @@incinncityI didn't really know him as an addict, but I do remember him ordering multiple thousand dollar bottles of wine on a stolen credit card.

    • @luislongoria6621
      @luislongoria6621 5 месяцев назад

      Things I learned from this video: the entire population of Finland is 500 and 5 people sitting in the same room have styled themselves as hackers so annoying your housemates can lead to an embarrassing whoopsie the second you walk away from the keyboard

  • @AKK5I
    @AKK5I 7 месяцев назад +140

    It's so over...

    • @VolkColopatrion
      @VolkColopatrion 7 месяцев назад +1

      How do you mean?

    • @veryhuman7472
      @veryhuman7472 7 месяцев назад +2

      what's over?

    • @OB.x
      @OB.x 7 месяцев назад +24

      They know shut it down shut it all down!

    • @incinncity
      @incinncity 6 месяцев назад +2

      Yea bud hope you didn't tell your therapist anything that ya should've took to the grave 💀

  • @davida3283
    @davida3283 7 месяцев назад +21

    sudo tar /home: I gonna end this man's while career

  • @incorrectbeans
    @incorrectbeans 7 месяцев назад +13

    Now there's a guy who would have been way better off actually using the services of that company instead of hacking them.

  • @Hentai_Protag
    @Hentai_Protag 7 месяцев назад +193

    "Even a fish wouldn't have gotten caught if it just kept its mouth closed."
    - some random guy on the internet

  • @amarodsv
    @amarodsv 7 месяцев назад +17

    6:13 ..."which makes things much easier for... authorities" while showing the Coffeezilla background set, nice touch

  • @guilhermepessoa3594
    @guilhermepessoa3594 7 месяцев назад +14

    Some people are too proud to stay quiet.

  • @spacecowboy511
    @spacecowboy511 7 месяцев назад +19

    A real life vampire, I can’t believe it

  • @Wiiownyou
    @Wiiownyou 7 месяцев назад +18

    I knew you'd have a video on this the moment I saw how brightly the headlines were glowing

  • @alexanderSydneyOz
    @alexanderSydneyOz 7 месяцев назад +48

    "whoopsie" indeed!
    Dare I say, there are no doubt hackers who *don't* make these mistakes, and they are the ones who don't end up in court!

  • @johnnyhellfire6
    @johnnyhellfire6 7 месяцев назад +23

    I love how the feds like to act like they out smarted a master criminal, when they just got him from dumb luck lol
    Like "see!! See!! We are smarter !!!!"

    • @AKuTepion
      @AKuTepion 7 месяцев назад +1

      They are smarter. The guy is dumb it hurts to watch.

    • @ArchOfficial
      @ArchOfficial 7 месяцев назад +9

      Finland is a Republic, not a Federation.

    • @johnnyhellfire6
      @johnnyhellfire6 7 месяцев назад +2

      @@ArchOfficial bet your fun at parties lol

    • @ArchOfficial
      @ArchOfficial 7 месяцев назад +13

      @@johnnyhellfire6 I'm not, but at least I don't have Americanization brainrot.

    • @johnnyhellfire6
      @johnnyhellfire6 7 месяцев назад

      @@ArchOfficial and at least I get laid, so I guess we are even...

  • @ashishpatel350
    @ashishpatel350 7 месяцев назад +22

    if you uploaded your entire home directory you deserve to go to jail and toss salads

  • @happycakes1946
    @happycakes1946 7 месяцев назад +61

    I had to pause to laugh for 10 seconds on that one! Lizard boy can hack but tar is hard.

  • @Splarkszter
    @Splarkszter 7 месяцев назад +29

    How dumb(or drunk because finland) you have to be to upload your home folder.

    • @datajake1999
      @datajake1999 7 месяцев назад +1

      My thoughts exactly.

    • @yandelross8780
      @yandelross8780 3 месяца назад

      what did you want him to do? im just curious

  • @fabbritechnology
    @fabbritechnology 7 месяцев назад +8

    Not hackers, but “script kiddies”. Dude didn’t even understand how folders and archive files work.

  • @tfwmemedumpster
    @tfwmemedumpster 7 месяцев назад +26

    How the hell do you not notice an archive being 11GB while uploading it through tor? The only way he could have missed it being that big if he uploaded it through clearnet with a very fast connection. Uploading through tor would have taken several hours if not days. He would definitely have noticed it was taking that long. So i have to conclude he uploaded it through a clearnet connection so they would have likely got him anyway even if it was just the records

    • @strongestgamer2501
      @strongestgamer2501 7 месяцев назад +8

      Or he was on something.
      He looks like he would be most of the time

    • @A1ko_
      @A1ko_ 7 месяцев назад +1

      tbh he could've gotten a bulletproof vps

    • @CupoChinoMusic
      @CupoChinoMusic 7 месяцев назад

      he prolly either:
      - hosted the files locally in his home, and exposed an onion service
      - whatever you said

    • @A1ko_
      @A1ko_ 7 месяцев назад

      my ass would rather get a vps I bought with xmr because tor is well, slow@@CupoChinoMusic

    • @fflecker
      @fflecker 5 месяцев назад

      I sent an 8 MB PDF file as my full application to an office and they just could find the motivation letter on top of it. People are as dumm as the last quarter of a pig.

  • @abdou.the.heretic
    @abdou.the.heretic 7 месяцев назад +253

    Well the glowies always win because evil is actually very motivated.

    • @brettlaw4346
      @brettlaw4346 7 месяцев назад +25

      If you ever saw Wonder Woman, the first one, she kills the villain and they kept fighting and she didn't understand why. It is because of economics. They are paid and unless they individually suffer economic loss, they won't understand to stop because the authorities they choose to obey haven't told them to stop.

    • @boosiefade01
      @boosiefade01 7 месяцев назад

      woww marvel cinematic universe is soo deep bro the only way i understand concepts is through a superhero lense.@@brettlaw4346

    • @jevvf3246
      @jevvf3246 7 месяцев назад +1

      Sounds like a weird interpretation. Could also just be a cultural thing. Maybe in Wonder Woman's world, they will leave the world with dignity and surrender to the more powerful individual after they "lost." But she encounters someone who continues to fight even after they've been proven inferior. That would puzzle anyone.

    • @anonemoose102
      @anonemoose102 7 месяцев назад +12

      But the glowies aren't 100% evil, just saying

    • @roguis3451
      @roguis3451 7 месяцев назад +4

      @@jevvf3246 I think the point was that she thought all of the war was happening because of an evil god having his way, but the reality is that the war was happening because of human greed or whatever.

  • @realmstupid-on8df
    @realmstupid-on8df 7 месяцев назад +16

    This guy had more tar then a pack of Newport cigarettes

  • @NicholasHenkey
    @NicholasHenkey 7 месяцев назад +25

    Used to know a guy that stole video games from BestBuy to resell them. Somehow he started spending money WAY outside his income range at the same store he was stealing from. Often criminals want to get caught

    • @DonVigaDeFierro
      @DonVigaDeFierro 7 месяцев назад +8

      You can hide the hand that steals but not the hand that spends.

    • @mytech6779
      @mytech6779 7 месяцев назад

      How do you get money way outside your range shoplifting video games? Hot items don't sell for full retail, nor is it a high volume market.

    • @Dzeividz
      @Dzeividz 7 месяцев назад

      Did he really earn that much from just selling stolen games tho?

    • @NicholasHenkey
      @NicholasHenkey 7 месяцев назад

      ​@@Dzeividz I think it was $30k over 6 months in 2009 money. Inflation adjusted that"s like $100k per year plus his hourly rate at BB​Y

    • @mytech6779
      @mytech6779 7 месяцев назад +3

      @@NicholasHenkey So he worked at the store. That changes the story substantially.

  • @jonbikaku6133
    @jonbikaku6133 7 месяцев назад +16

    This gotta be the craziest opsec oopsie ever..

  • @Garwinium
    @Garwinium 7 месяцев назад +11

    You know it's gonna be a good cybersecurity video when it's got an anime waifu on the thumbnail

    • @yis9259
      @yis9259 7 месяцев назад +2

      And/or wojak

  • @ZingsVideos
    @ZingsVideos 7 месяцев назад +9

    ""I always mess up some mundane detail" -- Michael Bolton, Office Space

  • @Fircasice
    @Fircasice 7 месяцев назад +7

    Are you seriously telling me that this dude managed to steal enough sensitive data from that multi million dollar company to make it ultimately go bankrupt but at the same time he was dumb enough to upload an archive containing his entire home folder? How is that even possible?

    • @Tn5421Me
      @Tn5421Me 6 месяцев назад

      Zeekill was handed every success in a golden platter by his betters

  • @zane62135
    @zane62135 7 месяцев назад +28

    It's amazing how someone can be so smart, yet so stupid.

    • @TheEsotericProgrammer
      @TheEsotericProgrammer 7 месяцев назад +3

      You really don't need to be that smart for stuff like this probably just a script kiddie

    • @WalterClements.official
      @WalterClements.official 7 месяцев назад +1

      ​@@TheEsotericProgrammerwoah, whats wrong?

  • @warecamel
    @warecamel 7 месяцев назад +6

    I ordered the PDFs involving this case from the national bureau of investigation here in Finland. There's some pretty interesting stuff in the documents. There were some American FBI agents working on the case and i found out that i had previously underestimated the feds' capability for cracking ciphers.

    • @fflecker
      @fflecker 5 месяцев назад +2

      Could you publish the PDF for the others ?

    • @r.henryjr.1533
      @r.henryjr.1533 20 дней назад +1

      I agree, please upload them!

  • @avcat1209
    @avcat1209 7 месяцев назад +12

    It was cool to see Tony Soprano again after all these years.

  • @elzabethtatcher9570
    @elzabethtatcher9570 7 месяцев назад +7

    Note to self: when commiting criminal activities, do not send home folder to the victims.

  • @rproctor83
    @rproctor83 7 месяцев назад +3

    Hacker: I have all your medical info!
    Me: Okay.
    Hacker: I am in your bank account!!
    Me: Have fun.
    Hacker: I have access to your WOW account!
    Me: I will hunt you down.

  • @LAZYB00GiE
    @LAZYB00GiE 7 месяцев назад +7

    This guy was part of the Christmas psn ddos attack back in the 2014

    • @70kg589
      @70kg589 4 месяца назад +1

      They need to put him under the prison for that lol I was trying to play cod zombies that day

  • @Jmvars
    @Jmvars 7 месяцев назад +11

    How stupid do you have to be to upload your entire home folder? I mean at some point he must have wondered why the compression is taking so long.

    • @meanmole3212
      @meanmole3212 7 месяцев назад +9

      The hackerman doing hacker things and tarring his loot with command line like a pro. Unfortunately he did not understand how the command line tools work and instead ended up tarring his home folder.

  • @_ipsissimus_
    @_ipsissimus_ 7 месяцев назад +7

    I love the supposedly finnish b roll footage you have in the background

  • @johnnywilliams2641
    @johnnywilliams2641 7 месяцев назад +3

    Rule 1 - all cryptography is traceable if you have enough money to pay the people that are able to trace it

  • @iCrimzon
    @iCrimzon 7 месяцев назад +11

    So he wouldve gotten away with it but then self snitched, they never learn do they

  • @7eis
    @7eis 7 месяцев назад +3

    Ancient Finnish proverb: Never speak of your crimes, not even in the sauna

  • @YoanGonzalez-yr2rf
    @YoanGonzalez-yr2rf 7 месяцев назад +3

    Yo your shirts have gotten a lot better in design. I would really consider buying one or two to support the channel. Keep up the great work.

  • @pompomaddons
    @pompomaddons 7 месяцев назад +40

    oops sec

  • @Zakru
    @Zakru 7 месяцев назад +3

    Uncanny to see a cool channel cover a story from here, your subscriber count might as well be 10% of our population.

  • @magneticshrimp7429
    @magneticshrimp7429 7 месяцев назад +5

    Rule of thumb: if it is a significant hack and it points toward Finland, it's always Julius.
    At least he is the guy who always takes the fall haha

  • @HaydenDoingThings
    @HaydenDoingThings 7 месяцев назад +6

    To save you 13 mins: The hacker uploaded his entire home directory as an archive by mistake.

    • @magog6852
      @magog6852 7 месяцев назад

      thx see you next time

  • @medea27
    @medea27 7 месяцев назад +2

    Uploaded his home drive to the internet along with the evidence of his crime.... that's an impressive level of self-snitching. They sure don't make "criminal masterminds" like they used to.

  • @j.dunlop8295
    @j.dunlop8295 5 месяцев назад +3

    The Dunning-Kruger effect is a cognitive bias in which people wrongly overestimate their knowledge or ability in a specific area. This tends to occur because a lack of self-awareness prevents them from accurately assessing their own skills.

  • @hummmingbear
    @hummmingbear 7 месяцев назад +2

    What a dingus, serves him right releasing that kind of patient data.

  • @def1nt
    @def1nt 7 месяцев назад +8

    I work with Linux for almost ten years and still have to check man tar every time. I feel this guy so much...

  • @comedyman4896
    @comedyman4896 5 месяцев назад +2

    Posting your user folder on the internet is kind of like if you robbed a bank and then ran straight to a police station

    • @j.dunlop8295
      @j.dunlop8295 5 месяцев назад

      The Dunning-Kruger effect is a cognitive bias in which people wrongly overestimate their knowledge or ability in a specific area. This tends to occur because a lack of self-awareness prevents them from accurately assessing their own skills.

  • @ChrisHaefner
    @ChrisHaefner 7 месяцев назад +1

    Thank you for covering this. I had a lot of questions about this case you answered

  • @WelcomeToDERPLAND
    @WelcomeToDERPLAND 7 месяцев назад +18

    Welp, expect this case to be used against monero's privacy from now until were' all dead now.

  • @glass7923
    @glass7923 Месяц назад

    I can't even imagine the perkele that ensued when he realized he uploaded his homework folder to the net.

  • @skylerhanson101
    @skylerhanson101 7 месяцев назад +3

    Condolences to the victims of the attack (though Vastaamo should've done better in the first place), but holy fuck is compressing your home directory accidentally a major screw up when you're committing a crime.

  • @RickyRozayyy
    @RickyRozayyy 7 месяцев назад +1

    He looks like the guy that hacked PSN back in the day

  • @jaimeortega4940
    @jaimeortega4940 7 месяцев назад +22

    You already answered your question they probably reversed / back tracked the original Bitcoin to Monero conversion in some way, perhaps.

    • @DxBlack
      @DxBlack 7 месяцев назад +32

      Dude, they got his home folder. The dude literally GAVE them the best route to find him, not via monero.

    • @rj7250a
      @rj7250a 7 месяцев назад

      Lets say the guy have 1 BTC.
      1 hour swap to Monero
      1 BTC in Monero (minus fees)
      few hours to swap back to BTC
      1 BTC (minus fees)
      Amount + timing tracing, super easy.
      To solve this, when swapinf back to BTC, the guy would need to split the coins in multiple transactions over many days, with random timings. (Also not use a KYC exchange like Bin@nc€

    • @illliiiiillliii6265
      @illliiiiillliii6265 7 месяцев назад +5

      ​​@@DxBlackboth can be true at the same time. There are multiple teams working on cases. And Finnish authorities say they did "trace" monero. Didnt matter in the end though because hackerman suffers from the 'tisms.

    •  7 месяцев назад

      That is trivially possible if they find which exchange he used.

  • @superdanyal2009
    @superdanyal2009 4 месяца назад +1

    In CTI the heatmap analysis is very important for us to recognize patterns, similarity between codes and it's origins, behaviors etc most cyber criminals are pretty braindead, I infilitrate the darknet communities for research purposes and reporting.
    Hacking is a double edged sword, there's a large number of security professionals that just blend in attempting to get shell access to their systems and many times it's honestly surprisingly easy, default port configurations and outdated/bad services that can be metasploited or just with well known enumeration tools.

  • @DougalYoung
    @DougalYoung 7 месяцев назад +5

    @5:57 mytäjäisistä! Torihommia

  • @eternalvoid8153
    @eternalvoid8153 7 месяцев назад +1

    physiognomy never lies

  • @berk-._.-
    @berk-._.- 7 месяцев назад +3

    It's like so bad it doesn't feel like a failure it feels like he made it on purpose

  • @WuzzupWhitey
    @WuzzupWhitey 7 месяцев назад +1

    Remember, kids! Doing evil is never rewarding.

    • @magog6852
      @magog6852 7 месяцев назад +1

      except when you are the government

  • @todpopo3
    @todpopo3 7 месяцев назад +3

    bro just gave away his home folder 💀💀💀💀💀💀💀💀💀💀💀💀💀💀💀💀💀

  • @TheUnknownCatWarrior
    @TheUnknownCatWarrior 7 месяцев назад +2

    The human is always the weakest link. Karma caught on when they gave everyone a copy of their home folder.

  • @turkeyphant
    @turkeyphant 2 месяца назад +3

    He got caught also because of payments to onlyfans and social media posts.

  • @vikraal6974
    @vikraal6974 7 месяцев назад +1

    Monero was only pushed as a stunt to devalue the coin and it worked!!!
    Monero has been down for 1 week now.

  • @goldbitcoin
    @goldbitcoin 7 месяцев назад +11

    Holy moly

  • @anotherinternetlurker6248
    @anotherinternetlurker6248 7 месяцев назад +2

    The perils of not knowing how to use the zip command.

  •  7 месяцев назад +7

    This is exactly why I tell people that "just use Monero" is a bad advice. If you are not careful it won't help you.
    Also this specific mistake wouldn't have happened if he used a separate Qubes VM. (But Qubes itself is not a silver bullet either.)

    • @Lextron68PlusOne
      @Lextron68PlusOne 7 месяцев назад +6

      this wouldn't have happened if he just didn't upload his entire home folder to the dark net

    • @Moonstone-Redux
      @Moonstone-Redux 7 месяцев назад +1

      Probably would have been less embarrassing to just rip out the entire hard drive and mail it to YLE (the Finnish news network) because at least he could play it off as turning himself in.

    • @Lextron68PlusOne
      @Lextron68PlusOne 7 месяцев назад

      @@Moonstone-Redux HAHAHA you're right mate

    • @AleksanteriKivimaki
      @AleksanteriKivimaki 7 месяцев назад

      @MartinHabovstiak “wouldn’t have happened if he used a separate Qubes VM” I’m not really sure what difference Qubes would have made here over the proxmox-based virtualization environment used.
      The leaked /root directory belongs to a semi-disposable hacking VM that was being used by a bunch of people.

  • @DigitalNomadOnFIRE
    @DigitalNomadOnFIRE 7 месяцев назад +2

    This is a problem with doing stuff on the command line all the time, it's very easy to accidentally .tar up your entire home folder by forgetting a parameter or whatever. You'd never do this with a GUI.

  • @catcoder12
    @catcoder12 7 месяцев назад +1

    I don't generally care when companies get extorted but posting private info of people who are undergoing therapy is really scummy

  • @Kirmo13
    @Kirmo13 7 месяцев назад +3

    doesn't surprise me this guy was also in the lizard squad thing

  • @Pallib
    @Pallib 4 месяца назад +2

    Im halfway through the video, but what we know is that a few people killed themselves becouse of the leak.

  • @emifro
    @emifro 7 месяцев назад +6

    How do you manage to tar your home directory and not notice it? Surely you would be suspicious that the file upload is taking longer than expected too, right?

    • @ra2enjoyer708
      @ra2enjoyer708 7 месяцев назад +2

      Yeah especially since database dumps tends to be pretty compact in size for the data they convey. I was looking at some dead site dump of 90GB with 2 million entries and the actual database was 180mb with the rest being media files.

    • @taahaseois.8898
      @taahaseois.8898 7 месяцев назад

      @@ra2enjoyer708 The vastaamo files are just plain text files, there are somewhere around 30,000 of them and they take up approximately 250 MB of disk space.

    • @sycration
      @sycration 7 месяцев назад

      the whole Bible is about 1/3 the size of a normal jpeg so yeah

  • @TheStalitha
    @TheStalitha 7 месяцев назад +1

    I cringed so hard when it got to him uploading his home folder I nearly turned inside out... How embarrassing, I'd probably rather have my therapy records leak than my home folder

    • @MisterCOM
      @MisterCOM 5 месяцев назад

      The fucking file gore alone would make me cringe myself to death its such a fucking mess