Don't like ads? PRO users don't see any ads ;-)
Public Pastes
Guest

LulzSec

By: KillerCube on Jun 23rd, 2011  |  syntax: None  |  size: 7.13 KB  |  hits: 5,375  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. Edited as of 09/01/11
  2. They are dropping like flies. Four arrests now
  3.  
  4.  
  5. Sabu as the leader and Topiary as the next in command.  Then we have joepie91 or 92, kayla, storm, trollpoll, tflow, pwnsauce, Neuron, hsien, kl0ps, Avunit, io, and Recursion.
  6.  
  7. Jun 04 08:28:31 <Topiary>    hmm not sure who IS LulzSec really... tflow/Sabu/myself/kayla started
  8.  
  9. It looks like Topiary is the one that is in charge of the twitter feed.  
  10. It also looks like storm might have posted some stuff to twitter also.
  11. So far I am seeing Sabu as the leader and Topiary as the next in command.  
  12. Then we have joepie91 or 92, kayla, storm, trollpoll, tflow, pwnsauce, Neuron, hsien, kl0ps, Avunit, io, and Recursion.
  13. Joepie91 and Topiary are the ones linked to the bitcoin account.  
  14. Joepie91 and Trollpoll run the website.
  15. From the IRC logs is sounds like kl0ps is from Germany.
  16. Trollpoll might also be in Europe.
  17. Lulzsec uses pastee.org not pastebin to upload things to each other.
  18.  
  19. from 05/09/11 [private IRC server] #[priv channel] Sabu announces the start of LulzSec here. Few days after the twitter account started
  20. [18:39]    -->|    kayla (kayla@nic.mil) has joined #[priv channel]
  21. [19:08]    -->|    lol (kayla@bot-C11A9908.formlessnetworking.net) has joined #[priv channel]
  22. [19:09]    <--|    lol has left #[priv channel]
  23. [19:10]    -->|    kayla (kayla@nic.mil) has joined #[priv channel]
  24. [19:53]    kayla    also, word on the internet 306 fox.com employess passwords are getting leaked on http://twitter.com/#!/LulzSec soon after a destruction of many of their linkdins
  25. [20:19]    Sabu    http://twitter.com/#!/LulzSec
  26. [20:19]    Sabu    it begins
  27. [20:25]    Sabu    ecw sabu was a leet fuck
  28. [20:47]    -->|    Sabu (sabu@16170E25.B1424923.1A0A31BA.IP) has joined #[priv channel]
  29. [23:33]    -->|    Sabu (sabu@bot-E5C834DD.recklesstheory.com) has joined #[priv channel]
  30.  
  31.  
  32. Topiary's twitter account  http://twitter.com/#!/atopiary
  33. Sabu's twitter account http://twitter.com/#!/anonymouSabu
  34.  
  35. Jun 04 07:16:24 <t[2]>    bottle of rum = tflow
  36. Jun 04 07:21:17 *    t[2] is now known as Topiary
  37. Jun 04 07:21:20 *    Topiary has quit (Quit: -->)
  38. Jun 04 07:21:26 *    Topiary (t@HA-5u1.rkn.75e5ku.IP) has joined #pure-elite
  39.  
  40. Jun 03 23:31:23 <Sabu>    recursion and devurandom quit respectfully
  41. Jun 03 23:31:27 <Sabu>    saying they are not up for the heat
  42. Jun 03 23:31:32 <Sabu>    you realize we smacked the fbi today
  43. Jun 03 23:31:36 <Sabu>    this means everyone in here
  44. Jun 03 23:31:42 <Sabu>    must remain extremely secure
  45.  
  46. Also picked this out.  Thought it was amusing.
  47.  
  48. Jun 03 15:59:01 <Topiary>    CloudFlare CEO = our homeboy
  49. Jun 03 15:59:05 <Topiary>    BitCoin owner = our homeboy
  50. Jun 03 15:59:08 <Topiary>    Pastebin owner = our homeboy
  51. Jun 03 15:59:13 <Topiary>    Mediafire owner = faggot
  52.  
  53.  
  54. Found this too.  Apparently the attack on Infragard was too much for some Lulzsec members.
  55.  
  56. Jun 03 23:31:23 <Sabu>    recursion and devurandom quit respectfully
  57. Jun 03 23:31:27 <Sabu>    saying they are not up for the heat
  58. Jun 03 23:31:32 <Sabu>    you realize we smacked the fbi today
  59. Jun 03 23:31:36 <Sabu>    this means everyone in here
  60. Jun 03 23:31:42 <Sabu>    must remain extremely secure
  61.  
  62. Another good tidbit.
  63.  
  64. Jun 03 23:40:32 <Neuron>    Yo anyone have any extra tips for staying safe?
  65. Jun 03 23:43:08 <Sabu>    clean your box out, make sure any sensitive info you have encrypted on a usb stick
  66. Jun 03 23:43:12 <Sabu>    stay behind your vpn
  67. Jun 03 23:43:16 <Sabu>    from now on your vpn is your weapon
  68. Jun 03 23:43:23 <Sabu>    without your weapon you are nothing
  69. Jun 03 23:43:30 <Sabu>    without you it is notihng blah blah blah
  70. Jun 03 23:43:34 <Neuron>    haha
  71. Jun 03 23:43:39 <Sabu>    and dont do nothing we dont approve of :D
  72. Jun 03 23:44:04 <Neuron>    Alright right now.. My "hackbox" has 512 aes encryption on the entire harddrive
  73. Jun 03 23:44:18 <Neuron>    two passwords and truecrypt on info concerning anything hacking related
  74. Jun 03 23:44:24 <Neuron>    and my vpn is HideMyAss
  75.  
  76. More good stuff. Exposes who did the HBGary hack.
  77.  
  78. Jun 04 08:22:35 <joepie91>    http://pastebin.com/rrZDkbp7
  79. Jun 04 08:22:44 <joepie91>    Avunit Sabu tflow lol Topiary
  80. Jun 04 08:22:46 <joepie91>    read pastebin
  81. Jun 04 08:24:18 <Topiary>    see, now that's the entire HBGary crew
  82. Jun 04 08:24:21 <Topiary>    so why is your name in it?
  83. Jun 04 08:25:46 <joepie91>    probably because I was in the leaked logs?
  84. Jun 04 08:25:53 <joepie91>    anyway, is entropy still here under some nick?
  85. Jun 04 08:25:58 <Topiary>    nope
  86. Jun 04 08:26:10 <joepie91>    also, it was tweeted by Awinee
  87. Jun 04 08:26:12 <joepie91>    a few minutes ago
  88. Jun 04 08:26:16 <Topiary>    let's just ignore it
  89. Jun 04 08:26:21 <Topiary>    been ignoring them all for days
  90. Jun 04 08:26:22 <joepie91>    so I think he just grepped the #hq logs then
  91. Jun 04 08:26:38 <Topiary>    it's fine if we just stay here and don't expose ourselves in other locations
  92. Jun 04 08:26:41 <Topiary>    they can't do anything
  93.  
  94. More info revealed. Talks about a disinformation campaign and also that trollpoll was behind the fox hack.
  95.  
  96. Jun 04 08:27:18 <lol>    we should do a mass disinfo campaingn :D?
  97. Jun 04 08:27:19 <Topiary>    'sides this is Pure Elite not LulzSec, heh luckily our gang of awesome development folks working in side-ops didn't get on that list
  98. Jun 04 08:27:28 <joepie91>    lol
  99. Jun 04 08:28:07 <lol>    lets add the lulzsec.com domain adrian lamo owns and awiness dox and some other jesterfags to a pastebin and call it "lulzsec members" then pastebin spam it so it trends like pr0's :D?
  100. Jun 04 08:28:16 <trollpoll>    lol, i was thinking just on this
  101. Jun 04 08:28:20 <lol>    or you think doing tht will give them more reason to think it is us?
  102. Jun 04 08:28:22 <trollpoll>    but, saying more or less
  103. Jun 04 08:28:26 <trollpoll>    that lulzsec is CIA
  104. Jun 04 08:28:31 <Topiary>    hmm not sure who IS LulzSec really... tflow/Sabu/myself/kayla started it, then tflow was on/off, then Avunit/pwnsauce joined in, then you guys came onboard... :D I guess nobody and everybody
  105. Jun 04 08:29:14 <Topiary>    let's spread disinfo about CIA I guess
  106. Jun 04 08:29:28 <tflow>    yeah but props to trollpoll for exploiting that fox.com hole
  107. Jun 04 08:29:30 <trollpoll>    it makes sense
  108. Jun 04 08:29:34 <Topiary>    oh definitely yeah
  109. Jun 04 08:29:41 <Topiary>    we have trollpoll to thank for the first hit
  110. Jun 04 08:29:49 <Topiary>    very good shit
  111. Jun 04 08:30:05 <trollpoll>    not all mine...
  112. Jun 04 08:30:14 <Topiary>    word is that you exploited it up nicely
  113.  
  114. Jun 04 13:51:32 <pwnsauce>    storm - use whoami.cer33.com/fun/shell.php
  115. Jun 04 13:51:37 <pwnsauce>    its the web interface
  116. Jun 04 13:55:12 <pwnsauce>    storm - thats my priv8 webll she
  117. Jun 04 13:55:17 <pwnsauce>    *priv8 shell
  118. Jun 04 13:55:18 <pwnsauce>    as in
  119. Jun 04 13:55:20 <pwnsauce>    I control it
  120.  
  121. Here is a chat log from the HBGary attack. At one point he says that Sabu told him that he will be on late EST time which to me means that Sabu is from USA east coast.
  122. http://www.scribd.com/doc/57141513/Consequences
  123.  
  124. Our numbers got suspended. Try our new numbers | UK +44 020 8133 9723 | USA (209) 690-7925 | lulz-killers don't like the lizard talks.
create a new version of this paste RAW Paste Data