PayPal, Symantec hacked as Anonymous begins November 5 hacking spree
Summary: As it becomes the 5th of November around the world, Anonymous announced a hacking spree that has claimed many websites and a few databases - plus a planned V For Vendetta reenactment at the Houses of Parliament.
The press arm for Anonymous has announced that it has begun its hacking spree for the 5th of November - Guy Fawkes Day.
Claims are circulating that hackers - some affilaited with Anonymous, and some not - have dumped user and employee account information on accounts from PayPal, Symantec, the defacement of Saturday Night Live's website, Australian government websites and much more.
CLARIFICATION: Claim for Symantec goes to @Doxbin, and they have stated that "HTP is not affiliated with Anonymous."
UPDATE Nov. 4, 10:20 PM PST: Anonymous has claimed a document dump on The Organization for Security and Co-operation in Europe (OSCE) "the world's largest security-oriented intergovernmental organization."
UPDATE Nov. 5, 12:20 AM PST: Reagrding Anonymous' post of docs and statement it hacked PayPal, PayPal's head of PR has tweeted that there is "no evidence to validate this claim." Yet at the time of this writing Anonymous Australia posted this URL to a PrivatePaste page - linking to five pages of data on an estimated 27,935 PayPal accounts. Within the past few hours that PrivatePaste page has since been removed.
UPDATE Nov. 5, 11:38 AM PST: PayPal has responded to request for comment and Anuj Nayar (PayPal's Senior Director of Communications) tells me via email, "It appears that the exploit was not directed at PayPal after all, it was directed at a company called ZPanel. The original story that started this and was retweeted by some of the Anonymous Twitter handles has now been updated." PayPal sent me this link to Cyberwars' newly updated post (the primary post information originated from).
/End updates
Monday's main focus seems to be an anti-suveillance protest - like with the recent Anonymous October 20 protest - with November 5th intent aimed at surveillance systems such as TrapWire and INDECT.
Trapwire and INDECT's opponents believe that the surveillance systems to be direct threats to privacy and certain civil freedoms and that their implementation could constitute human rights violations.
According to the various Anonymous Twitter accounts announcing the hacks and linking to document dumps, this is just the beginning of doc dumps and defacements for its day of protest. News of the protest is being shared on Twitter, Facebook, YouTube, and Pastebin.
Australian Government qla.org.au Hacked by Anonymous for Nov 5th
— Anonymous Australia (@AuAnon) November 5, 2012
The hacktivists have also included in its Nov. 5th announcements tonight the hacking and defacement of Australian government sites, ImageShack and PayPal (claiming a zero day exploit), Ascension Australia, NBC.com and Lady Gaga's fan site (claimed for the spree by "Pyknic"), Saturday Night Live's website, the Jimmy Fallon and Jay Leno portals, Australian steel and mining company Arcelor Mittal, homewares website GiftNow, the Greek City website, the Ghana Consulate website, and claim to have leaked VMware ESX Server Kernel source code via twitter today.
Anonymous Australia seems to be the most active at this time.
At the same time, the press arm for Anonymous has announced - via a press release on Pastebin - that it is rallying the public for an in-person V For Vendetta protest at The Houses of Parliament, at 8PM in London.
Protesters in Canada will get a rude surprise if they don Guy Fawkes masks - because last week Canada's House of Commons approved a bill that bans people from hiding their faces during riots.
We're watching and following the developments as they happen.
And right now they're happening fast - and furiously.
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
Protesting != Rioting
Canada has banned masks during riots, not protests. Anonymous has posted a call for a *protest*. For the love of God, please tell me that people still understand the distinction.
Agreed, but here's the citation:
Not sure how Canada determines lawful protesters vs. unlawful. Here's a quote from the bill's champion:
"It will ensure that those who come to these events [protests] to cause trouble can be brought to justice and discouraged from those kinds of behaviours, so that the people who come to a gathering, for whatever peaceful means, whether it be protest or otherwise, have the ability to do their activities safely and freely."
Not sure how Canada determines lawful protesters vs. unlawful...
lawful: Walk peacefully
unlawful: Do vandalism or any other criminal offense
[...] face-paint them on. Then, you are not wearing a mask
It boils down to the same thing: You are still hiding your face.
Common sense please.
I agree. A little common sense goes a long way
To protest by making a human chain across the road is unlawful - you have no right to keep me from going to where I need to be.
lawful protest - marching with signs, or doing something that may affect your life going forward, but not mine or anyone else who is not interested or involved in your protest.
Seems kind of straight forward to me.
Lawful vs Unlawful
A lawful protest is one that follows all laws pertaining to protests. An unlawful protest is one that does not.
and...
If the rule of law isn't clear, then throw it out!
But what's an "unlawful assembly?"
What concerns me about this legislation is the definition of "unlawful assembly" (if indeed this wording is in the legislation, I haven't read it personally) and the fact that while it was proposed some time ago, there has been virtually no public debate about it. There are very specific guidelines about how to declare a riot, and due process involved. Does the same exist in declaring an "unlawful assembly?" Will the participants know when their assembly becomes "unlawful?" Who has the authority to declare an assembly "unlawful? Can an assembly be declared "unlawful" after the fact? These are the sorts of questions that need to be asked.
Stupid, stupid, stupid!
I believe
A Bit Redundant...
So the Vancouver riots are already covered by that law, and in a way, this new law is redundant. What the government seems to be doing making life easier for itself, saying "arrest them all, let the judge sort them out. Don't wait for them to commit a crime." Pre-crime. I like the direction we're going, Canada.
It's opening the door wide open for police on the street to just flip a coin and decide whether an assembly is lawful or not. There was a huge crackdown on people during the G20 protests in Toronto for no real reason, and this is going to be just one more lever that authorities can use to chill public dissent.
The media is not really focusing on the 'loophole' of peaceful assemblies still allowing for masks, and they're basically exaggerating the crap out of this thing... but it's still really important.
Also, it still has to pass the senate to become law, so the process is not fully finalized yet. There's still hope.
From A Little Guy
I'm poor. I don't like facebook and I don't play games. Whatever you do, p;ease don't screw me up any more than I already am. I mean it...I'm broke, I do old house repairs for a living on a T&M basis. I make less than 20K a year.
I'm also a Liberal and my laptop keyboard doesn't work...I had to borrow one. My dog is 2,600 miles away from me. My life sucks. So, don't hurt me.
Thank you for your time.
WTF ?
No, it's not
this appears to be a database dump from a third-party site which used PayPal as a payment gateway, and *not* a PayPal service itself.
There are several reasons for this:
1. The dump refers to several tables. Most notably, 'transactions' in the 'klarpsp1' database.
2. Inside this table is the only reference to 'PayPal'. Specifically, this is mentioned under the 'gateway' column.
3. In other words; this column is used to indicate which payment gateway was used to complete a transaction.
Thus making it highly improbable that PayPal itself was breached.
are you sure
What in the world is going on grrrrr :(
Yes, definitely
Hack fest
Remember, remember the November 5th!
http://woisio.com/
facepalm
AND pathetic griefers?
I'm embarrassed to be in this thread.....
:puts mask on, flips off laptop, shuffles off:
A deleted postie does not a hack job make
Anonymous FAIL!
You sound like Yoda...