+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: The Lounge (https://sinister.ly/Forum-The-Lounge)
+--- Thread: Hacking for money IRL - Advice plz! (/Thread-Hacking-for-money-IRL-Advice-plz)
Pages:
1
2
Hacking for money IRL - Advice plz! - lsp - 02-25-2017
Yo!
So I recently did some freelance programming work on-site for a local client, they told me about some cyber trouble they've been having with a local rival company. The rival company have attacked them in various ways including DOS attacks on their PBX (phone system), scatter-gun attacks on their infrastructure and websites, and even social engineering campaigns against their employees, some of which have been successful and led to breaches of personal accounts.
Anyway. I got a call from them a few days ago and have since exchanged private messages in which they explicitly ask me to attack them back. They want me to do an audit of attack vectors and then utilise those results in an actual attack.
Obviously if I do this I'll be charging a fuck-tonne more than I did for the programming, which was a not-to-bad fee.
I know this is dodgy as fuck for various reasons not to mention the terrible OPSEC in that the company hiring me know my real details. I'm not worried about them stiffing me because I've been in their systems and I know where I can attack them if they get funny. Obviously won't be able to go to small claims court over it though.
So just wondering what your opinions are on this. Would you do it? How much would you charge?
I'm just a bit unsure as I've done anything like this in person before. Out of my comfort zone.
RE: Hacking for money IRL - Advice plz! - mothered - 02-25-2017
Be careful. As you're well aware, this Is quite serious.
Depending on the nature of the company, attacks can lead to downtime, thereby financial loss may be experienced and as a result further Investigations may take place for the Identification and apprehension of the attacker (you). Given the rival company has attacked your client, any subsequent and recent attacks back to them, may well be lead back to you.
Don't get me wrong, I'm the type who leaves nothing to chance when taking down servers and the like. But that said, there's a right time and place for everything. Don't just jump In for the cash. Give It some serious thought.
RE: Hacking for money IRL - Advice plz! - lsp - 02-25-2017
(02-25-2017, 03:19 PM)mothered Wrote: Given the rival company has attacked your client, any subsequent and recent attacks back to them, may well be lead back to you.
Thanks for your reply, you make some really good points, particularly the part I quoted.
RE: Hacking for money IRL - Advice plz! - mothered - 02-25-2017
(02-25-2017, 04:05 PM)lsp Wrote: Thanks for your reply, you make some really good points, particularly the part I quoted.
You're most welcome.
I do talk based on experience. I continue to compromise networks and It's not something that can be taken lightly. The anonymity, encryption (devices, traffic etc), wiping digital footprints and so forth has become a way of life. You're a smart member, I don't need to elaborate any further on the risks Involved. I do hope you can make some serious cash from this.
RE: Hacking for money IRL - Advice plz! - pvnk - 02-25-2017
My advice is not to do it in your situation.
RE: Hacking for money IRL - Advice plz! - lsp - 02-25-2017
(02-25-2017, 04:47 PM)pvnk Wrote: My advice is not to do it in your situation.
Thanks but any elaboration on why?
RE: Hacking for money IRL - Advice plz! - pvnk - 02-25-2017
(02-25-2017, 05:14 PM)lsp Wrote:(02-25-2017, 04:47 PM)pvnk Wrote: My advice is not to do it in your situation.
Thanks but any elaboration on why?
A lot at risk.
RE: Hacking for money IRL - Advice plz! - lsp - 02-25-2017
Fair point - it is riskier than the usual situation.
RE: Hacking for money IRL - Advice plz! - mothered - 02-26-2017
One of the main Issues with hackers Is because It's second nature In what we do, day In, day out, we can become complacent and neglect & overlook the dangers/risks Involved at the time.
Each and every attack Is different, and we need to ascertain, formulate and apply It In the utmost of care to protect our anonymity.
RE: Hacking for money IRL - Advice plz! - Blink - 02-26-2017
Dodgy as fuck
If you end up doing this, keep anonimity as a top priority, as this can all lead back to you.