Hacked! (or not)

meta
quarto

How a static site’s database was hacked

Author

Steve Linberg

Published

October 31, 2022

jeffk (nsfw)

I thought this was pretty funny… some spam tonight that this website’s database has been hacked, and I better pay up some bitcoin or they’ll destr0y [my] site's reputati0n! Oh noes!

It takes some doing to hack the database of a site that doesn’t have a database, let me tell you. Very impressive work guys! They must have fprotted my tarball with lunix.

Unfortunately my $5 in free bitcoin that I got a while back is only worth about $1.62 last time I looked. Guess they’re gonna keep my database on that 0ffsh0re server. So it goes.

The bad news

Your Site Has Been CompromisedY0ur Site Has Been Hacked

PLEASE FoRWARD THIS EMAIL T0 SoMEoNE IN Y0UR C0MPANY WHo iS ALL0WED To MAKE IMPORTANT DECISIoNS!

We have hacked y0ur website https://slinberg.net:443 and extracted your databases.

How did this happen?

our team has f0und a vulnerability within your site that we were able t0 exploit. After finding the vulnerability we were able to get y0ur database credentials and extract your entire database and m0ve the information to an 0ffsh0re server.

What does this mean?

We will systematically go through a series 0f steps 0f totally damaging your reputati0n. First your database will be leaked or s0ld to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails f0und they will be e-mailed that their informati0n has been s0ld or leaked and your site https://slinberg.net:443 was at fault thusly damaging y0ur reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based 0ff of blackhat techniques that we used in the past t0 de-index 0ur targets.

How d0 i st0p this?

We are willing to refrain from destr0ying y0ur site’s reputati0n for a small fee. The current fee is $3000 in bitcoins (0.15 BTC).

Please send the bitcoin to the f0llowing Bitcoin address (Copy and paste as it is case sensitive):

(yeah we won’t copy and paste this part)

0nce you have paid we will automatically get inf0rmed that it was your payment. Please note that you have t0 make payment within 3 days after opening this e-mail or the database leak, e-mails dispatched, and de-index 0f your site WiLL start!

How do i get Bitcoins?

Y0u can easily buy bitcoins via several websites or even offline from a Bitcoin-ATM.

What if i d0n’t pay?

if you decide not t0 pay, we will start the attack at the indicated date and uph0ld it until you do, there’s n0 counter measure t0 this, you will only end up wasting more m0ney trying to find a s0lution. We will completely destroy y0ur reputation am0ngst g00gle and your customers.

This is not a h0ax, d0 not reply t0 this email, don’t try to reas0n 0r negotiate, we will not read any replies. 0nce you have paid we will st0p what we were doing and y0u will never hear from us again!

Please n0te that Bitcoin is anonym0us and n0 0ne will find 0ut that y0u have complied. Finally don’t reply as this email is unm0nitored.

Reuse

Citation

BibTeX citation:
@online{linberg2022,
  author = {Steve Linberg},
  title = {Hacked! (Or Not)},
  date = {2022-10-31},
  url = {https://slinberg.net/posts/2022-10-31-hacked},
  langid = {en}
}
For attribution, please cite this work as:
Steve Linberg. 2022. “Hacked! (Or Not).” October 31, 2022. https://slinberg.net/posts/2022-10-31-hacked.