API tools faq
paste
Guest User

HBGary

a guest
Feb 12th, 2011
1,326
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 22.09 KB | None | 0 0
raw download clone embed print report
  1. ----------------------------------------------------------------------
  2.  
  3. Media articles are at the bottom of this pad
  4.  
  5. ----------------------------------------------------------------------
  6.  
  7. Odious corporate spying firms enjoy epic bad publicity day
  8.  
  9. What's outlined in these sets of proposals, as Glenn points out, "quite possibly constitutes serious crimes." And as it relates to Glenn and the others, it constitutes an unconscionable attempt to silence journalists doing their jobs.
  10.  
  11. One nice point about the criminality is that (at least in my jurisdiction) the confidential information regimes are an outspring of the law of equity, and one of the core equitable maxims is those who come to equity must do so with clean hands (ie, the law won't recognise your rights where they protect unconscionable conduct)
  12.  
  13. Aaron Barr vs Barret Brown Phone Conference
  14. http://www.mediafire.com/file/7vb98xu7cobcif2/AaronBarrBarrettBrownLULZ.wma
  15.  
  16. Internal Email lulz:
  17. http://img823.imageshack.us/img823/7462/hbgary.jpg
  18. http://img708.imageshack.us/img708/5227/1297142809030.jpg
  19. http://img14.imageshack.us/img14/2475/pwntweet.jpg
  20.  
  21. Aaron VS WinMark Emails:
  22. http://pastebin.com/h0uBZWUK
  23. http://pastebin.com/ZzcvLmS9
  24. http://pastebin.com/WUZHzMDW
  25.  
  26. Aaron> Anonymous group and comments on Goverment talks
  27. http://search.hbgary.anonleaks.ru/index.php?id=16793
  28.  
  29. From Greg - Jamie is a fuck-tard
  30. http://search.hbgary.anonleaks.ru/index.php?id=25761
  31.  
  32. Bank of the West / Botnet
  33. http://search.hbgary.anonleaks.ru/index.php?id=9472
  34.  
  35. Citibank have been using falsified documents!!!
  36. http://search.hbgary.anonleaks.ru/index.php?id=27331
  37. http://search.hbgary.anonleaks.ru/index.php?id=19411
  38.  
  39. It appears penny was in the know about Aaron's bullshit all along
  40. http://search.hbgary.anonleaks.ru/index.php?id=16774
  41.  
  42. Interesting resume of former U.S. military intel officer who applied for gig with HBGary
  43. http://search.hbgary.anonleaks.ru/index.php?id=35748
  44.  
  45. Direct deposit information for their bank account. Routing and account number
  46. http://search.hbgary.anonleaks.ru/index.php?id=43852
  47.  
  48. Can debatably be construed as the advocation of illegal activities
  49. http://search.hbgary.anonleaks.ru/index.php?id=37523
  50.  
  51. HBGary Patent Info (with doc)
  52. http://search.hbgary.anonleaks.ru/index.php?id=34582
  53.  
  54. Paystub
  55. http://search.hbgary.anonleaks.ru/index.php?id=30571 Pull the paystub out, I bet its got his SSN on it
  56.  
  57. Internal company conflict
  58. http://search.hbgary.anonleaks.ru/index.php?id=31296
  59.  
  60. Arguments between Aaron and his wife
  61. http://www.lacy.ie/hbgary.php?to=&from=&startDate=&endDate=&searchPhrase=cupcake&page=1&submit=Search
  62.  
  63. Here's Greg when he's mad
  64. http://search.hbgary.anonleaks.ru/index.php?id=35748
  65.  
  66. "Penny Leavy-Hoglund" <3 Greg
  67. http://pastebin.com/4rM26cwT
  68.  
  69. Visited the Pentagon in January
  70. http://search.hbgary.anonleaks.ru/index.php?id=19475
  71.  
  72. Ted H. Vera >President | COO >HBGary Federal >719-237-8623 http://search.hbgary.anonleaks.ru/index.php?id=37018
  73.  
  74. 76-thousand+ cracked username/password combinations in a table called MEMBERS
  75. http://search.hbgary.anonleaks.ru/index.php?id=30118
  76.  
  77. Aaron>Sooooo...using the google hack string
  78. http://search.hbgary.anonleaks.ru/index.php?id=6732
  79.  
  80. Checklist for New Facility Security Clearances
  81. http://search.hbgary.anonleaks.ru/index.php?id=10709
  82.  
  83. Aaron>Ted: pointabout.com. I am partnering with them to go after some work and develop some capabilities. Specifically look at their tech appmakr.com.
  84. http://search.hbgary.anonleaks.ru/index.php?id=36834
  85.  
  86. Social Media Data Collection and Persona Development
  87. http://pastebin.com/n7ZW78WC
  88.  
  89. Provisional Industrial Security Approval Sponsorship Program - NSA/CSS
  90. http://search.hbgary.anonleaks.ru/index.php?id=19475
  91.  
  92. Nmap host scan
  93. http://search.hbgary.anonleaks.ru/index.php?id=30380
  94.  
  95. There were emails about the NSA PISA [http://www.nsa.gov/business/programs/pisa.shtml program, and getting free certification through Aaron's connections
  96.  
  97. Others that maybe of interest:
  98. http://search.hbgary.anonleaks.ru/index.php?id=20319
  99. http://search.hbgary.anonleaks.ru/index.php?id=16501
  100. http://search.hbgary.anonleaks.ru/index.php?id=3622
  101. http://search.hbgary.anonleaks.ru/index.php?id=11816
  102. http://search.hbgary.anonleaks.ru/index.php?id=2860
  103. http://search.hbgary.anonleaks.ru/index.php?id=19359
  104. http://search.hbgary.anonleaks.ru/index.php?id=21680
  105. http://search.hbgary.anonleaks.ru/index.php?id=13183
  106. http://search.hbgary.anonleaks.ru/index.php?id=20280
  107. http://search.hbgary.anonleaks.ru/index.php?id=31290
  108. http://search.hbgary.anonleaks.ru/index.php?id=21462
  109.  
  110.  
  111. I think these guys are going to get arrested, it would be interesting
  112. to leave the soft impression that Aaron is the one that got them, and
  113. that without Aaron the Feds would have never been able to get out of
  114. their own way. So, position Aaron as a hero to the public. At this
  115. point they are going to get arrested anyway. But, Aaron has some
  116. concerns on how that might affect commerical business (although I'm
  117. not clear on why yet)
  118. ---
  119.  
  120. Dated 1/18/2011
  121. Greetings Aaron,
  122.  
  123. Congratulations - your talk "Who Needs NSA when we have Social Media?" has
  124. been selected for the B-Sides San Francisco event. Please take a few
  125. minutes to fill out the speaker questionnaire located here:https://spreadsheets.google.com/viewform?formkey=dHhoaWo2TXg2dkgtSWF1d2lpb1pJY1E6MQ
  126.  
  127. I will also send an invite to the form separately in case you have any
  128. problems.
  129.  
  130. Please let me know if you have any questions.
  131.  
  132. Thank you,
  133.  
  134. Amber Wolf
  135. Event Organizer
  136. Security B-Sides
  137. 415.405.5250
  138. @securitybsides
  139.  
  140.  
  141. I wanted to give u some information and see if you thought any of your customers might have some interest in the data.
  142. I am not sure if you have been following. There is a group called Anonymous, that started supporting Wikileaks by attacking cyber targets, such as Mastercard and VIsa. I am doing research for a talk I am giving in San Francisco next month. The focus of my research is this group, identifying key players, organizational structure. I am doing a pretty good job identifying key people and illuminating how they work. All of this I am doing using social
  143. If you think any of your customers might be interested let me know.
  144. Aaron
  145.  
  146. ---
  147.  
  148.  
  149. HBGary Federal Flexes Private Intelligence Muscle.
  150.  
  151. HBGary Federal, the specialized and classified services arm of HBGary,
  152. flexes its muscle today by revealing the identities of all the top
  153. management within the group Anonymous, the group behind the DDOS
  154. attacks associated with Wikileaks. HBGary Federal constructed and
  155. maintained multiple digital identities and penetrated the upper
  156. management of Anonymous, and was subsequently able to learn actual
  157. identities of the primary management team – BUILDING A COMPLETE ORG
  158. CHART. This information was critical for law enforcement, yet all the
  159. intelligence work was done without law enforcement or government
  160. involvement. Only after achieving the mission did Aaron Barr, the CEO
  161. of HBGary Federal, reveal this information to the Feds. This
  162. underscores the need for new blood in the intelligence community and
  163. the abilities of small agile teams that are unhindered by the
  164. bureaucratic machine.
  165. what do you think? too negative on intel community?
  166. -G
  167.  
  168. ---
  169.  
  170. From: Greg Hoglund [email protected]
  171. To: Aaron Barr [email protected]
  172.  
  173. HBGAry Federal Pwns Anonymous
  174. ---
  175. This is a proud day. HBGAry Federal, lead by Aaron Barr, has made ppublic their long term penetration of the anonymous groupp, the DDOS group associated with Wikileaks.
  176. They were able to penetrate the group to the highest levell, gaining the trust of the inner circle.
  177.  
  178. The HBGary Federal team was able to learn the identities of all the key key pplayers - appproximately 10 people. Now these individuals are being arrested by the FBI. Aaron and his team were also able to learn the identities of approx. 30 liutenants. The Feds are finally taking down Anonymous, but, it should be noted that HBGary Federal perfromed this entire operation without law enforcement or government invollvement.
  179.  
  180. ---
  181.  
  182. So how I would pitch an increased price
  183. 1. First HBGary and the other investors will not be participating in the
  184. earn out and we've invested in giving you services work to jump start and
  185. give references.
  186. 2. HBGary would have hired three developers to complete the work and we'd
  187. still have that investment
  188. 3. HBGary is being courted by large software vendors and they would be
  189. interested in HBGary Federal for the pipeline of business. Since HBGary is
  190. an investor, we'd need to recoup costs we've put out that are around $82K
  191. plus a good return.
  192.  
  193. -Penny
  194.  
  195. ---
  196.  
  197. Aaron Barr to Mark
  198.  
  199. But dude whos evil?
  200.  
  201. US Gov? Wikileaks? Anonymous?
  202.  
  203. Its all about power. The Wikileaks and Anonymous guys think they are doing the people justice by without much investigation or education exposing information or targeting organizations? BS. Its about trying to take power from others and give it to themeselves.
  204.  
  205. I follow one law.
  206.  
  207. Mine.
  208.  
  209.  
  210. from Mark:
  211. Our entire government was set up on the idea of "trying to take power from others and give it to themselves" The founders stated it implicitly. The idea was for the states to fight the federal gov and to fight amongst themselves so nothing would every be accomplished except for when it absolutely needed to be. That's why the government is told what it can do not what it can not. Anything not stated is suppose to be out of the governments hands. Where any law to a citizen is suppose to be what you can't do so that you can do whatever you want without infringing apon the freedoms and liberties of other citizens. A non transparent government does nothing but keep the citizens uninformed and unable to make an educated vote. Your one law statement makes it sound like you believe you know what's best. That's a slippery slope.
  212.  
  213.  
  214. Jefferson was an idealist that lived in a very different time.
  215. And he had slaves...
  216. - Aaron's response
  217.  
  218. ---
  219.  
  220. Yeah, how did that work out the first time. You wanted Dan to be your engineer not me. Want me to check that facebook page "I listened to Aaron Barr and now I'm under investigation". Yeah, your gut feelings are awesome! Plus, scientifically proven that gut feelings are wrong by real scientist types. - Mark
  221. (Do we want awesome Mark quotes or just Aaron idiot quotes?) go to town on it
  222. the more the better imo
  223.  
  224. ---
  225.  
  226. I'm not doubting that you're doing analysis. I'm doubting that statistically that analysis has any mathematical weight to back it. I put it at less than .1% chance that it's right. You're still working off of the idea that the data is accurate. - Mark
  227.  
  228. ---
  229.  
  230. I made some significant progress last night on my understanding of the group. I feel I have nearly every one of the leadership, administrators and operators identified to a real person.
  231.  
  232. First a clarification.
  233. Q - Founder and runs the IRC. He is indead in California, as are many of the senior leadership of the group.
  234. Owen - Almost a co-founder, lives in NY with family that are also active in the group, including slenaid and rabbit (nicks).
  235. Most of the people in the IRC channel are zombies to inflate the numbers. At any given time there are probably no more than 20-40 people active, accept during hightened points of activity like Egypt and Tunisia where the numbers swell but mostly by trolls.
  236.  
  237. Now for a description of roles. The administrators run the show. The operators are there to answer questions, manage tasks, such as the mass faxing and sms spamming efforts during OpEgypt. They also manage the bots. I believe most of their DDOS capability comes from a small subset of people like CommanderX that manage some significant firepower.
  238. Most of the operational leadership with US based with some measurable support from some of their old 4chan friends in UK, France, Germany, Netherlands. I have these people identified as well.
  239. The communications outgrowth in FB and twitter is a different structure. The leadership of operations and those that manage the communications talk and share information but act autonomously. Operation Egypt FB page was a significant conduit of information during the operation and has more people that follow that page than any of the official Anonops pages on FB.
  240. Any other questions let me know.
  241. Aaron
  242.  
  243. ---
  244.  
  245. Hmm. Don't know what impact will be there.
  246. Story should go online in a few hours.
  247. Focus is on Anonymous structure, handles of leaders, inroads by law enforcement, and your work.
  248. As long as I leave my specific irc amd FB alias out of the conversation I should be ok.
  249. Aaron
  250.  
  251. ---
  252.  
  253. The conversation was very interesting today. The admit they had no idea this was happening until it hit the streets. They have no idea how to manage things like this in the future. And the agree they are not capable of doing the right activities (like I did) to be better prepared in the future because of authority and policy restrictions.
  254. So I gave them a model that might work. I will do the work based on my understanding of need on my dime... put together a report... and sell them the report.
  255. They liked that. I am working up 5 slides to hopefully brief Glenn next Friday.
  256. Aaron
  257.  
  258. ---
  259.  
  260. karen, aaron,
  261. 60 minutes wants to do a segment with Aaron about penetrating anonymous.
  262. - Greg
  263.  
  264. You are the dark star. Oh, I'm afraid the deflector shield will be
  265. quite operational when your friends arrive....
  266. jesus say it aint so
  267. - Greg
  268.  
  269.  
  270. ---
  271.  
  272. Any group of people with a common goal is reckless. No one knows the effects of an attack or it's outcome. May I point your direction to the Middle East since it was Persia and Mesopotamia.
  273. I don't believe the ACLU or PETA or Greenpeace are always focused and cosiderate groups, but occasionally the do raise some good points.
  274. I enjoy the LULZ
  275. - Mark
  276.  
  277. ---
  278.  
  279. When these groups speak of free information, including the open source groups, they mean governments and organizations, people have a right to privacy, governements, organizations, and corporations are not people. The supreme court can keep trying to say they are so that corps can give money to politicians but they are not people. They can not be harmed in the same manners. Their freedom to exist can not be taken away in the same way.
  280. That's what they mean they just suck at saying it.
  281. - Mark
  282.  
  283. This group has some good points but is acting very recklessly I think. So if I can help to be a small balance, and get some press and customers in the process...yeah! - Aaron, in response.
  284.  
  285. ---
  286.  
  287. Governments and corporations should have a right to protect secrets, senstive information that could be damage to their operations. I think these groups are also saying this should be free game as well and I disagree. Hence the 250,000 cables. WHich was bullshit. - Aaron
  288.  
  289. ---
  290.  
  291. With wikileaks and anonymous they corrupted faster. O believed in what wikileaks did when they released the helicopter video. I now believe they are a menace. Anonymous employees. - Aaronfag
  292.  
  293. ---
  294.  
  295. When u figure out how to scrape the people who have liked a particular page or group then tackle this one.
  296. I would like to be able to scrape all the people who have clicked like on a comment or posted a comment to a post.
  297. For example.
  298. Take the Anonops facebook page.
  299. I would like a ranking list of the active participants on this page in ranking order of likes and comments. I would like to collect those comments and post them under the actual UID that posted them.
  300. So then we could go to one page for a person in our system. See what their friends tell about them and what they post and like that tells about them. :)
  301. Am I stretching the boundaries of possibility yet?
  302. Aaron
  303.  
  304. ---
  305.  
  306. I have thought about going to a particular organization, government agency. Here is my one concern. I am still somewhat of an unknown in the social space, a space that I see as increasingly important. I am afraid that if I go to one organization the information will be walled and I will continue to be an unknown and have to claw my way to noteriety. I know that seems incredibly self-serving, but I am a small business. I have the opportunity to ga
  307. - Aaron
  308.  
  309. ---
  310.  
  311. I wanted to inform you of my research and content for the talk at Bsides. I have focused some of my research and talk around the anonymous group, a supposed loose collection of freedom of speech enthusiasts, anarchists, etc. They used to target the RIAA with DDOS attacks now they have taken up the cause of wikileaks, tunisia, venezuela, algeria, etc. They have received a decent amount of press about this.
  312. I am enumerating their communications infrastructure and plan to brief this as well as outing many of the major players within the group. This will likely make HBGary Federal, and likely HBGary a target.
  313. I have developed a persona that is well accepted within their groups and want to use this and my real persona against eachother to build up press for the talk. Pre-talk plan.
  314. I am going to tell a few key leaders under my persona, that I have been given information that a so called cyber security expert named Aaron Barr will be briefing the power of social media analysis and as part of the talk with be dissecting the Anonymous group as well as some critical infrastructure and government organizations
  315. I will prepare a press sheet for Karen to give to Darkreading a few days after I tell these folks under persona to legitimize the accusation. This will generate a big discussion in Anonymous chat channels, which are attended by the press. This will then generate press about the talk, hopefully driving more people and more business to us.
  316.  
  317. But it will also make us a target.
  318. Thoughts?
  319. Aaron
  320.  
  321. reply: Well,
  322. I don't really want to get DDOS'd, so assuming we do get DDOS'd then
  323. what? How do we make lemonade from that?
  324. - Greg
  325.  
  326. ---
  327.  
  328. Way cool on anonymous
  329. I am actually a bit nervous.
  330. I am going to make a lot of people angry. Including some US govies that probably would have wished I had brought the matieral to them first.
  331. Aaron
  332.  
  333. ---
  334.  
  335. One thing of note. I know there are a few task forces looking at this in gov. What I can do is tie irc alias all the way to real person and have defined the communication and operations infrastructure of the organization. Of there are gaps in this data in government I can help and probably should before my talk when they will likely tighten things down a bit.
  336. They may have it covered but they may not.
  337. Aaron
  338.  
  339. ---
  340.  
  341. Thank you Tom.
  342. As to the title. I thought about it hard. Unfortunately these conference like some sensationalism. I have tried the nuts and bolts submission and been declined. And being one that likes to take some risks chose a title that would generate more interest. During the talk I will discuss how the resources required to conduct intelligence work have lessened.
  343. Aaron
  344.  
  345. ---
  346.  
  347. "They are completely pwnd. our sales rep in dc, one of the founders of HBGary, called to reassure us that none of our data or any federal agency or SI"s data has been compromised. Only their email, financials and source code. Source Code! i said, and he said it was no big deal, i am seeing the same info on the blogs and in comments on some of the articles i have been reading. pretty bad stuff, because if they have their source code, then they can develop countermeasures for their products. We are ripping out ur hbgary products until everything can be verified, thankfully we only have three small licenses."
  348.  
  349. - ???
  350.  
  351. ---
  352.  
  353. Got to be honest. This response made me angry. This thing has drug out and drug out. I am in the middle of a very big event for us that will keep me very busy until the 14th. No one can expect me to drop what is likely one of the biggest events we will have this year for a "possible". I expect some flexibility given the contribution I have made thus far.
  354. - Aaron
  355.  
  356. ---
  357.  
  358. We should post this on the front page, throw out some tweets "HBGary Federal sets a new bar as private intelligence agency". The pun on bar is intentional.
  359.  
  360. -G
  361.  
  362. ---
  363. ...
  364. December 13, 2010
  365. Blogtopic/media pitch ideas:
  366. · The Hackers Are Coming, The Hackers Are Coming!: Today there is a flurry of breaking news stories about hacks i.e. Gawker, McDonald’s, etc. Don’t spread FUD, but underscore why companies need to be prepared -> the Importance of Incident Response
  367. · Critical Infrastructure Protection in 2011 and Beyond: What should “critical infrastructure” organizations -- and security vendors – need to be thinking about in the new year
  368. ...
  369.  
  370. ---
  371.  
  372. Also, cocks.
  373.  
  374.  
  375. -----------------------------------------------------------------------------------------------------------------------------------
  376.  
  377. IN THE MEDIA:
  378.  
  379. EXOSED: Attacks on Wikileaks (RT Interview): http://www.youtube.com/watch?v=ExL4KQ3noOI
  380.  
  381. HBGary Anonymous investigation News Article
  382. http://pastebin.com/UsLaLbvE
  383.  
  384. Hackers Reveal Offers to Spy on Corporate Rivals
  385. http://www.nytimes.com/2011/02/12/us/politics/12hackers.html?_r=2
  386.  
  387. Anonymous' Target Planned to "Take Down" WikiLeaks
  388. http://www.escapistmagazine.com/forums/read/7.264123-Anonymous-Target-Planned-to-Take-Down-WikiLeaks?page=1
  389.  
  390. Palantir Tries to Preserve Their Government Contracts
  391. http://emptywheel.firedoglake.com/2011/02/10/palantir-tries-to-preserve-their-government-contracts/
  392.  
  393. Berico Technologies severs ties with HBGary
  394. http://www.bericotechnologies.com/press/
  395. Press statement from Berico: http://bericotech.com/press/
  396.  
  397. Palantir Apologizes for Wikileaks Attack Proposal, Cuts Ties with HBGary
  398. http://blogs.forbes.com/andygreenberg/2011/02/11/palantir-apologizes-for-wikileaks-attack-proposal-cuts-ties-with-hbgary/
  399. Press statement from Palantir: http://palantirtech.com/statement-from-dr-alex-karp
  400.  
  401. HBGary Fees: “Dam It Feels Good to Be a Gangsta"
  402. http://emptywheel.firedoglake.com/2011/02/11/hbgary-fees-dam-it-feels-good-to-be-a-gangsta/
  403.  
  404. Hacked Documents Show Chamber Engaged HBGary to Spy on Unions
  405. http://emptywheel.firedoglake.com/2011/02/10/will-the-chamber-continue-wits-hbgary-work-now-that-theyve-been-hacked/
  406.  
  407. Anonymous Claims Possession Of Insidious Stuxnet Virus
  408. http://blogs.forbes.com/chrisbarth/2011/02/11/anonymous-claims-possession-of-insidious-stuxnet-virus/
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!