Jump to content
The Education Forum

CyberGoons


Recommended Posts

Just an alert to members who might not otherwise be aware of this sort of thing. I certainly wasn't till I started looking into it recently. Good idea to have a firewall up and running.

Trying to track some of the recent 'theplanet' probes blocked by firewall :

OrgName: ThePlanet.com Internet Services, Inc.

OrgID: TPCM

Address: 1333 North Stemmons Freeway

Address: Suite 110

City: Dallas

StateProv: TX

PostalCode: 75207

Country: US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange: 70.84.0.0 - 70.87.127.255

CIDR: 70.84.0.0/15, 70.86.0.0/16, 70.87.0.0/17

NetName: NETBLK-THEPLANET-BLK-13

NetHandle: NET-70-84-0-0-1

Parent: NET-70-0-0-0-0

NetType: Direct Allocation

NameServer: NS1.THEPLANET.COM

NameServer: NS2.THEPLANET.COM

name: www.g00ns.com

class: IN

type: PTR

data: 147.70-84-85.reverse.theplanet.com

time to live: 3600s

"Right Wing Hackers Attack Independent Media Centers

from "Notes from the Hacker Underground" at HackThisSite.org

................

During the Republican National Convention, a group of hackers called RightWingExtremist.net was formed by Brett Chance(elac, clorox, awb0t, etc) from Plano TX. This group came out of the ultra conservative ProtestWarrior.com who advocates disrupting and attacking leftist organizations.

.....a group calling itself the g00ns.com have attacked and defaced a dozen indymedia websites using the vulnerability posted to dadaimc. On the hacked websites, a message calling indymedia 'liars' and 'anti-republicans' were posted. Soon after, hackers and indymedia techs started working together to fix each other's code and bring backups back online as well as find information about the g00ns.

The g00ns started out by targetting and attacking online gaming clan websites, but eventually Elac from RightWingExtremist.net joined up and started to turn the group farther to the right. When the IndyMedia sites were hacked, people started to gather information and infiltrate their organization and soon after all of their private details were released to the public to show like actions like this will not go unnoticed.

Many other right-wing trolls continue to try to disrupt IndyMedia and left-wing protest groups. These individuals operate under several different names including ProtestWarrior.com, RightWingExtremist.net, FreeRepublic.com, KobeHQ.com, FreeDominion.com, LittleGreenFootballs.com, and more. Many of these groups are suspected of being financed operations from governments or corporations similar to the COINTELPRO program from the 60s and 70s. Common activities range from flooding message boards, faking votes and reviews in online polls, releasing personal information of key organizers, spreading false rumors and scandals, etc.

.............

http://www.dadaimc.org/mod/software/alerts...dex.php?alert=1

http://www.dadaimc.org/support.php?section=xss

......................

Protest Warriors Connectable to the CIA

by linkmeister at 02.May.2005 21:49

Here's another interesting look at these right wing groups

http://seattle.indymedia.org/en/2004/09/242330.shtml

**************

Connection between Protester Warriors, KOBE (the online rightwing harassment squad) and Cycorp (defense contractor working for DARPA and the Information Awareness Office) found.

KOBE and the Protest Warriors are centered in Austin, Texas. Josiah Hagen has been established as a member of KOBE.

The Protest Warriors have been established as harassers of NY IndyMedia in the form of automated vote tampering visa via article ratings with the purpose of suppressing articles they wish to prevent readers from viewing.

KOBE has identified itself as the source of the Protest Warrior harassment of NYC IndyMedia:

http://nyc.indymedia.org/newswire/display/124183/index.php

Comment from "K Crew" in the above link was posted by KOBE to indicate that they had used their program to suppress a posting. "K Crew" has previously identified itself as KOBE.

Josiah Hagen, established member of KOBE uses a gun range in Austin, Texas. That same gun range is featured on the Protest Warrior's website showing the two persons running the Protest Warrior's website on the range.

Josiah Hagen also works for Cycorp, a defense contractor with contracts with DARPA, CIA, IAO, and NSA.

Therefore, the CIA, NSA, Protest Warriors and KOBE are all connected through

personal contacts.

**************

The argument establishes that the Protest Warriors and KOBE work TOGETHER in concert. That is, the Protest Warriors call for an coordinate attacks against NYC IndyMedia and KOBE provides the means to execute those attacks and carries them out.

KOBE is run by Josiah Hagen. Josiah Hagen works for a small employer and the projects they are working on are for the CIA.

Furthermore, an inside source confirms and offer by the CIA to Cycorp to wage cyber warfare on Americans. That project is KOBE. Therefore KOBE is a private project funded by the CIA. KOBE and Protest Warriors share resources and wor as

one online. Therefore, Protest Warriors is separated from the CIA only by KOBE.

Josiah Hagen, in addition to these activities, is a member of the same very small gun range that the leaders of the Protest Warriors use.

For mysterious reasons the Protest Warrior leaders were moved from the Bay area of California to Austin just when they began operations.

This is a direct and irrefutable connection.

**************

Prior Areas of Operations for Protest Warrior "founder":

KFIR ALFIA DOB 17-MAY-74 ZIP 33180 Ojus, Florida (North of Miami on East Coast

of FL)

KFIR ALFIA DOB 17-MAY-74 75248 Dallas, Texas (North of the city core, outside

the 635 loop)

Current Area of Operations:

ProtestWarrior LLC

659 Mangels Ave.

Austin TX 78759

207.234.148.161

.......Partner Alan Lipton:

ALAN R LIPTON DOB 08-FEB-74 ZIP 75287 (Dalls, about 4 miles NW of Kfir Alfia's

address in Dallas, across the Dallas North Tollway from Kfir)

.....

election@co.travis.tx.us ,

(512) 238-VOTE (238-8683 a 24-hour automated voice-response system),

fax (512) 854-9075

Elections Division,

Travis County Clerk

PO Box 149325, Austin, TX 78714

Posted by: A. at Sep 27, 2004 10:47

http://www.unclaw.com/chin/personal/bsmalumni.htm

Says:

"Josiah Hagen (Spring 1998)

jhagen@cs.oberlin.edu

NEWS: (Dated June 2000) Working on AI at Cycorp in Austin, TX. "

The identity of another KOBE member is known.

Posted by: Rational Anarchist at Sep 27, 2004 19:09

Someone by the name of Stephen R DeVoy was working at CyCorp around the time in question. He left under mysterious circumstances and a few weeks later the KOBE organization appeared.

I believe Stephen DeVoy is the mastermind behind the KOBE organization. The timeline is correct, the modus opperandi fits......

DeVoy is the leader of the group, a government toady.

DeVoy's last known address

Posted by: The UPS guy at Sep 27, 2004 19:26

71 Whiting Ave.

Dedham, MA

United States

Dedham, MA

US

No, DeVoy is they guy they got rid of.

Posted by: Cyclist at Sep 27, 2004 19:36

DeVoy was the Programming Department Director they got rid of for opposing the project. He's one of their victims.

You sure about that?

Posted by: Gustavo Espada at Sep 27, 2004 19:51

I am sure Stephen told me he was working on some secret stuff that he could not tell me about. Sort of COINTELPRO but the other way around.

Gustavo Espada

Posted by: Rebel at Sep 27, 2004 20:04

If I remember clearly, Gustavo Espada was raised in US Embassies in Columbia, Brazil and Nicaragua where he had much contact with and was protected by the CIA.

I also seem to remember Gustavo Espada filming activists in Cambridge, MA and providing the film to the very operation the article is about: KOBE. That film was used to harass activists, including DeVoy.

Gustavo Espada's father currently works in the US Embassy in Nicaragua. Evidence supports the belief that he works for the CIA undercover at Harvard University."

Link to comment
Share on other sites

Many other right-wing trolls continue to try to disrupt IndyMedia and left-wing protest groups. These individuals operate under several different names including ProtestWarrior.com, RightWingExtremist.net, FreeRepublic.com, KobeHQ.com, FreeDominion.com, LittleGreenFootballs.com, and more.

On several occasions our Forum has been brought down by excessive demands on the system. At first, Andy and I naively believed this was due to the popularity of the forum and we purchased extra bandwidth, etc.

However, as we got to know how the system worked we realized that we were experiencing great demands for pages on the forum over fairly short periods of time. By searching the internet we discovered details of software that enabled forums to be brought down in this way. This software had been mainly used in the struggles between pro- and anti-Arab websites. It had also been used by the intelligence services to bring down what were considered to be news websites that appeared to be sympathetic to the plight of the Palestinians.

What happens is that several members of a group download software to their computers. A common URL is typed into the software. Once programmed, this computer is logged onto the internet and uses spider software to demand the viewing and downloading all the pages on the site. This means hundreds of pages being downloaded every second. No system can withstand such an attack, even Google has been brought down by using this software.

I can understand why some fanatics want to bring down a particular website or forum. However, Andy and I found it difficult to understand why anyone would want to bring down our forum. There seemed to be only two candidates. The first of these was a group of racists from California. They run a very unpleasant anti-Arab website called Little Green Footballs (LGF). As a result of the Iraq War this group became fanatical supporters of George Bush and Tony Blair. They had joined the forum using aliases and had posted a series of racist comments on the threads that had been discussing Iraq and other Middle East problems. We of course deleted these comments and banned these characters from the forum. It was at this time we brought in the idea that people could only register under their own names. We also insisted that people provide a biography and photograph. All members were informed of this and most complied.

After being banned from our forum the far-right racists mounted a campaign against Andy and myself. On their LGF website they posted up pictures of us and urged their members to take action against us. This is a common tactic by right-wing groups and even in the UK we have had examples of Redwatch of posting photographs and addresses of anti-racist activists on their website. This has led to physical attacks on these people and several cases of arson. Some of the postings on the LGF website was in some sort of code and appeared to be suggesting some sort of combined attack. Also, we had discovered that LGF had itself suffered from numerous “denial of service” attacks. They made it clear that they intended to fight back and bring down pro-Arab websites (something they felt we were guilty of being).

Link to comment
Share on other sites

  • 3 weeks later...

COINTELPRO2005

Cyberwars

OrgName: ThePlanet.com Internet Services, Inc.

OrgID: TPCM

Address: 1333 North Stemmons Freeway

Address: Suite 110

City: Dallas

StateProv: TX

PostalCode: 75207

Country: US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange: 70.84.0.0 - 70.87.127.255

CIDR: 70.84.0.0/15, 70.86.0.0/16, 70.87.0.0/17

NetName: NETBLK-THEPLANET-BLK-13

NetHandle: NET-70-84-0-0-1

Parent: NET-70-0-0-0-0

NetType: Direct Allocation

NameServer: NS1.THEPLANET.COM

NameServer: NS2.THEPLANET.COM

name: www.g00ns.com

class: IN

type: PTR

data: 147.70-84-85.reverse.theplanet.com

time to live: 3600s

"Right Wing Hackers Attack Independent Media Centers

from "Notes from the Hacker Underground" at HackThisSite.org

................

During the Republican National Convention, a group of hackers called RightWingExtremist.net was formed by Brett Chance(elac, clorox, awb0t, etc) from Plano TX. This group came out of the ultra conservative ProtestWarrior.com who advocates disrupting and attacking leftist organizations.

.....a group calling itself the g00ns.com have attacked and defaced a dozen indymedia websites using the vulnerability posted to dadaimc. On the hacked websites, a message calling indymedia 'liars' and 'anti-republicans' were posted. Soon after, hackers and indymedia techs started working together to fix each other's code and bring backups back online as well as find information about the g00ns.

The g00ns started out by targetting and attacking online gaming clan websites, but eventually Elac from RightWingExtremist.net joined up and started to turn the group farther to the right. When the IndyMedia sites were hacked, people started to gather information and infiltrate their organization and soon after all of their private details were released to the public to show like actions like this will not go unnoticed.

Many other right-wing trolls continue to try to disrupt IndyMedia and left-wing protest groups. These individuals operate under several different names including ProtestWarrior.com, RightWingExtremist.net, FreeRepublic.com, KobeHQ.com, FreeDominion.com, LittleGreenFootballs.com, and more. Many of these groups are suspected of being financed operations from governments or corporations similar to the COINTELPRO program from the 60s and 70s. Common activities range from flooding message boards, faking votes and reviews in online polls, releasing personal information of key organizers, spreading false rumors and scandals, etc.

.............

http://www.dadaimc.org/mod/software/alerts...dex.php?alert=1

http://www.dadaimc.org/support.php?section=xss

......................

Protest Warriors Connectable to the CIA

by linkmeister at 02.May.2005 21:49

Here's another interesting look at these right wing groups

http://seattle.indymedia.org/en/2004/09/242330.shtml

**************

Connection between Protester Warriors, KOBE (the online rightwing harassment squad) and Cycorp (defense contractor working for DARPA and the Information Awareness Office) found.

KOBE and the Protest Warriors are centered in Austin, Texas. Josiah Hagen has been established as a member of KOBE.

The Protest Warriors have been established as harassers of NY IndyMedia in the form of automated vote tampering visa via article ratings with the purpose of suppressing articles they wish to prevent readers from viewing.

KOBE has identified itself as the source of the Protest Warrior harassment of NYC IndyMedia:

http://nyc.indymedia.org/newswire/display/124183/index.php

Comment from "K Crew" in the above link was posted by KOBE to indicate that they had used their program to suppress a posting. "K Crew" has previously identified itself as KOBE.

Josiah Hagen, established member of KOBE uses a gun range in Austin, Texas. That same gun range is featured on the Protest Warrior's website showing the two persons running the Protest Warrior's website on the range.

Josiah Hagen also works for Cycorp, a defense contractor with contracts with DARPA, CIA, IAO, and NSA.

Therefore, the CIA, NSA, Protest Warriors and KOBE are all connected through

personal contacts.

**************

The argument establishes that the Protest Warriors and KOBE work TOGETHER in concert. That is, the Protest Warriors call for an coordinate attacks against NYC IndyMedia and KOBE provides the means to execute those attacks and carries them out.

KOBE is run by Josiah Hagen. Josiah Hagen works for a small employer and the projects they are working on are for the CIA.

Furthermore, an inside source confirms and offer by the CIA to Cycorp to wage cyber warfare on Americans. That project is KOBE. Therefore KOBE is a private project funded by the CIA. KOBE and Protest Warriors share resources and wor as

one online. Therefore, Protest Warriors is separated from the CIA only by KOBE.

Josiah Hagen, in addition to these activities, is a member of the same very small gun range that the leaders of the Protest Warriors use.

For mysterious reasons the Protest Warrior leaders were moved from the Bay area of California to Austin just when they began operations.

This is a direct and irrefutable connection.

**************

Prior Areas of Operations for Protest Warrior "founder":

KFIR ALFIA DOB 17-MAY-74 ZIP 33180 Ojus, Florida (North of Miami on East Coast

of FL)

KFIR ALFIA DOB 17-MAY-74 75248 Dallas, Texas (North of the city core, outside

the 635 loop)

Current Area of Operations:

ProtestWarrior LLC

659 Mangels Ave.

Austin TX 78759

207.234.148.161

.......Partner Alan Lipton:

ALAN R LIPTON DOB 08-FEB-74 ZIP 75287 (Dallas, about 4 miles NW of Kfir Alfia's

address in Dallas, across the Dallas North Tollway from Kfir)

.....

election@co.travis.tx.us ,

(512) 238-VOTE (238-8683 a 24-hour automated voice-response system),

fax (512) 854-9075

Elections Division,

Travis County Clerk

PO Box 149325, Austin, TX 78714

Posted by: A. at Sep 27, 2004 10:47

http://www.unclaw.com/chin/personal/bsmalumni.htm

Says:

"Josiah Hagen (Spring 1998)

jhagen@cs.oberlin.edu

NEWS: (Dated June 2000) Working on AI at Cycorp in Austin, TX. "

The identity of another KOBE member is known.

Posted by: Rational Anarchist at Sep 27, 2004 19:09

Someone by the name of Stephen R DeVoy was working at CyCorp around the time in question. He left under mysterious circumstances and a few weeks later the KOBE organization appeared.

I believe Stephen DeVoy is the mastermind behind the KOBE organization. The timeline is correct, the modus opperandi fits......

DeVoy is the leader of the group, a government toady.

DeVoy's last known address

Posted by: The UPS guy at Sep 27, 2004 19:26

71 Whiting Ave.

Dedham, MA

United States

Dedham, MA

US

No, DeVoy is they guy they got rid of.

Posted by: Cyclist at Sep 27, 2004 19:36

DeVoy was the Programming Department Director they got rid of for opposing the project. He's one of their victims.

You sure about that?

Posted by: Gustavo Espada at Sep 27, 2004 19:51

I am sure Stephen told me he was working on some secret stuff that he could not tell me about. Sort of COINTELPRO but the other way around.

Gustavo Espada

Posted by: Rebel at Sep 27, 2004 20:04

If I remember clearly, Gustavo Espada was raised in US Embassies in Columbia, Brazil and Nicaragua where he had much contact with and was protected by the CIA.

I also seem to remember Gustavo Espada filming activists in Cambridge, MA and providing the film to the very operation the article is about: KOBE. That film was used to harass activists, including DeVoy.

Gustavo Espada's father currently works in the US Embassy in Nicaragua. Evidence supports the belief that he works for the CIA undercover at Harvard University."

Link to comment
Share on other sites

Perhaps those inclined to do so could send one or a million brief messages to these guys outlining resons for them to lay off?

Link to comment
Share on other sites

  • 5 years later...

Perhaps those inclined to do so could send one or a million brief messages to these guys outlining resons for them to lay off?

Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
×
×
  • Create New...