Author

Topic: Username "Obama" IS behind the latest wave of RAT'ing and phishing. (Read 1233 times)

legendary
Activity: 1134
Merit: 1118
I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

LOL just saw this. Funny.

No, I'm not Tomatocage. Anyone with common sense could see that, the only "sock"-like thing are the vouches which aren't really that common.
hero member
Activity: 756
Merit: 522
I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

Wrong. This account is a sock, but you'd probably never guess what my real account is Tongue

Copumpkin.
vip
Activity: 1316
Merit: 1043
👻
The username Obama is behind this, yes, but not the original owner of Obama. varomint is behind this wave of phishing.

This also doesn't seem to be connected to scotaloo.

Quote
Wrong. This account is a sock, but you'd probably never guess what my real account is
pirateat40 Grin

Quote
Screw making account trading illegal, let's just ban Obama and his alts and get it over with?

Already banned?
legendary
Activity: 1554
Merit: 1222
brb keeping up with the Kardashians
I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

Wrong. This account is a sock, but you'd probably never guess what my real account is Tongue
hero member
Activity: 756
Merit: 522
I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

Lmao @ Bitcointalk, socks socking socks.
sr. member
Activity: 392
Merit: 250
http://casinobitco.in/ A+ customer support
I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

die in a fire you faggot
newbie
Activity: 16
Merit: 0
I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.
sr. member
Activity: 336
Merit: 250
Cuddling, censored, unicorn-shaped troll.
I know you guys already have been suspected to be socks, too.
And sincerely, you have an odd way to vouch for each other posts.

I still second that, too.  Wink
legendary
Activity: 1554
Merit: 1222
brb keeping up with the Kardashians
legendary
Activity: 1134
Merit: 1118
I've just found the critical mass.

Seen in the thread https://bitcointalksearch.org/topic/acnemacintoshkodoobama-251363 - the usernames acne/macintosh/kodo/Obama are the same. (which is also backed up as Obama was buying "vintage" names) Now I can say that legitnick is the same. We have the fact that legitnick offered to sell his account for $3.50, but we also have a hacking similarity.

If you opened legitnick's .zip file, a DarkComet RAT was installed on your system. Same if you went to the Phishing link.

On my system the downloaded file opened up access to DarkComet RAT.  They used that to remote onto my system to try installing other software.  In the details of the file they downloaded, Dell Datasafe was mentioned.  It looks like a service similar to Dropbox.

Chad

Now let's look at acne's, or Obama's, virus.

http://anubis.iseclab.org/?action=result&task_id=16fd927255c1f53f4b5941c1471918b0f&format=html

Oh look, it's our old friend, DarkComet RAT! I wouldn't be surprised if Obama has been behind the last couple waves of hacking.

Screw making account trading illegal, let's just ban Obama and his alts and get it over with?
Jump to: