雅各布·拉尔森_从网络暴露到门口揭露黑客用于勒索的隐私入侵技术.pdf

1、#BHUSA BlackHatEventsFrom Doxing to Doorstep:From Doxing to Doorstep:Jacob LarsenExposing Privacy Intrusion Techniques used by Hackers for Extortion#BHUSA BlackHatEventswhoamiJacob Larsen Offensive Security Team Lead CyberCX Threat Researcher Researching underground cyber crime groups since 2016 Bas

2、ed in Perth,Australialarsencyberhttps:/#BHUSA BlackHatEvents 9 years ago,I was a doxing victim.I had an online account with a rare username which they wanted.Ever since then,I have followed the subculture surrounding doxing and those participating.#BHUSA BlackHatEventsViLE:Breaching a DEA Data Porta

3、l In March 2023,2 members of a notorious doxing gang“ViLE”were charged for breaching a Drug Enforcement Agency data portal.This portal allowed them to search for anyones personal information across 16 different federal law enforcement databases.https:/www.justice.gov/usao-edny/pr/two-men-charged-bre

4、aching-federal-law-enforcement-database-and-posing-police-officers#BHUSA BlackHatEvents#ViLE#BHUSA BlackHatEvents#BHUSA BlackHatEventsViLE:Doxing for Extortion ViLE used this access for“doxing”,which is slang for“dropping documents”,also known as dropping information which links someones public iden

5、tity with their online username.The intention of doxing is to intimidate victims and make them fearful of“what might happen”when their personal information is uploaded on a website where it wont be taken down.This is why adversaries choose to use websites like Doxbin.#BHUSA BlackHatEventsDoxbinDoxbi

6、n is a doxing website that offers adversaries,or their users,a place to upload doxes where they wont be taken down.As per their website it says:“if your information goes up,it wont come down unless it breaks our terms of service”A feature Doxbin offers upgraded users is the ability to publish privat