Bonum Certa Men Certa

Cyberattacks on SUEPO Server Raise More Questions

World Cyber Games 2004



Summary: Several sites that are critical of the EPO's management seem to have become prominent targets of 'script kiddies'

Cyberattacks are a tricky thing to tackle. Systems analysis is hard because of the topology of the Internet (hopping possible, no fixed addresses, etc.) and administrations know the absolute limitations because other than pattern spotting not much can be done, especially when it comes to spotting the source of such attacks in a world full of zombies, botnets, and other consequences of back doors in Internet-connected proprietary software.



Last year our multi-layer servers infrastructure came under attacks which targeted both Tux Machines and Techrights. It started around the same time we published the EPO revelations, so when the webhost asked me if I could think of anyone who had the motivation to attack I said that I could think of nothing except the EPO series (although I was very hesitant to assume the EPO would resort to such attacks). These attacks lasted several months, often coinciding or intensifying with our release of EPO-related documents. Tux Machines does not have enemies because it mostly syndicates news.

"Maybe all these attacks are just a mere coincidence without correlation, but the fact remain that many critics of The EPO’s Vice-President Željko Topić suffer one way or another."Several months went by and another Web site critical of the EPO (especially the Vice-President, Željko Topić) said it had been cracked. Weeks later we learned that another such site, also critical of the EPO's Vice-President, feared retribution and decided to delete documents relating to the EPO Vice-President (knowing that he not only berates but also bullies his critics using lawsuits and apparent requests for removal/apology). Last week we learned that SUEPO, which is the staff union of the EPO (known for criticism of the EPO's notorious Vice-President), had been "cracked" based on some sources. That claim may not have been accurate because based on the following text, which appeared yesterday on the SUEPO Web site, it was a DDOS attack combined with/related to brute-force cracking attempts. "We don't have any more details beyond this," told us the source who passed us the following text (statement from SUEPO):

"The SUEPO websites were unreachable on Thursday 5 February 2015 because of a cyber attack (of the Denial of Service type). The attackers also attempted an SSH brute-force attack to take control of the server. Such attacks constitute a violation of law and SUEPO has filed criminal charges against unknown and will cooperate with the German and Dutch authorities, who are now investigating the matter."

Some comments (scroll down) in IPKat say that many of the offending addresses are in Belgium, but many are also in east Asia.

On Sunday we published an important batch of documents about the EPO's notorious Vice-President, whereupon over 50,000 cracking/login attempts were made in just 15 hours, bringing the site down for periods of time. This is not normal. Remember that when the EPO's management does not waste money 'planting' articles in the media and bullying staff it is paying a Stasi-like unit to conduct surveillance on staff. Such units have no ethics whatsoever, so consider what they're after (e.g. harvesting of IP addresses).

Maybe all these attacks are just a mere coincidence without correlation, but the fact remain that many critics of The EPO’s Vice-President Željko Topić suffer one way or another. We are not going to be intimidated by legal threats or technical sabotage and as a result of these recent events we are encouraged to actually speed up release of incriminating/damaging documents, irrespective of who's behind these attacks.

Comments

Recent Techrights' Posts

Software Freedom Conservancy (SFC), Inc. vs. Vizio, Inc. Is Costing the Free Software Foundation Money
FSF subpoena and deposition
They Try to Replace the Creators of GNU/Linux and Hijack Their Word, Work, and Reputation
gnu.org is down at the moment; now I'm told it's back but very slow. DDoS?
Links 05/05/2024: Political Cyberattacks From Russia and Google Getting a Lot Worse
Links for the day
 
On Character Assassination Tactics
The people who leverage these dirty politics typically champion projection tactics
IRC Proceedings: Sunday, May 05, 2024
IRC logs for Sunday, May 05, 2024
Over at Tux Machines...
GNU/Linux news for the past day
Erinn Clark & Debian: Justice or another Open Source vendetta?
Reprinted with permission from disguised.work
Death of Michael Anthony Bordlee, New Orleans, Louisiana
Reprinted with permission from disguised.work
The Revolution Continues
Today we've published over 20 pages and tomorrow we expect more or less the same
Death of Dr Alex Blewitt, UK
Reprinted with permission from disguised.work
Following the Herd (or HURD)
Society advances owing to people who think differently and promote positive change, not corporate shills
Thiemo Seufer & Debian deaths: examining accidents and suicides
Reprinted with permission from disguised.work
Gemini Links 05/05/2024: Infobesity and Profectus Beta 1.0
Links for the day
Running This Site Mostly a Joyful Activity
The real problem or the thing that we need to cancel is this "Cancel Culture"
Australia Has Finally Joined the "4% Club" (ChromeOS+GNU/Linux)
statCounter stats
Debian as a Hazardous Workplace Where No Accountability Exists (Nor Salaries)
systematic exploitation of skilled developers by free 'riders' (or freeloaders) like Google, IBM, and Microsoft
Clownflare Isn't Free and Its CEO Openly Boasted They'd Start Charging Everyone to Offset the Considerable Losses (It's a Trap, It's Just Bait)
Clownflare has collapsed
Apple Delivered Very Disappointing Results, Said It Would Buy Its Own Shares (Nobody Will Check This), Company's Debt Now Exceeds Its Monetary Assets
US debt is now 99.98 trillion dollars
FSFE Still Boasts About Working Underage People for No Pay
without even paying them
IRC Proceedings: Saturday, May 04, 2024
IRC logs for Saturday, May 04, 2024
Over at Tux Machines...
GNU/Linux news for the past day
The Persecution of Richard Stallman
WebM version of a new video
Molly de Blanc has been terminated, Magdalen Berns' knockout punch and the Wizard of Oz
Reprinted with permission from disguised.work
[Meme] IBM's Idea of Sharing (to IBM)
the so-called founder of IBM worshiped and saluted Adolf Hitler himself
Neil McGovern & Debian: GNOME and Mollygate
Reprinted with permission from disguised.work
[Meme] People Who Don't Write Code Demanding the Removal of Those Who Do
She has blue hair and she sleeps with the Debian Project Leader
Jaminy Prabaharan & Debian: the GSoC admin who failed GSoC
Reprinted with permission from disguised.work
Jonathan Carter, Matthew Miller & Debian, Fedora: Community, Cult, Fraud
Reprinted with permission from disguised.work
Techrights This May
We strive to keep it lean and fast
Links 04/05/2024: Attacks on Workers and the Press
Links for the day
Gemini Links 04/05/2024: Abstractions in Development Considered Harmful
Links for the day
Links 04/05/2024: Tesla a "Tech-Bubble", YouTube Ads When Pausing
Links for the day
Free Software Community/Volunteers Aren't Circus Animals of GAFAM, IBM, Canonical and So On...
Playing with people's lives for capital gain or "entertainment" isn't acceptable
[Meme] The Cancer Culture
Mission accomplished?
Germany Transitioning to GNU/Linux
Why aren't more German federal states following the footsteps of Schleswig-Holstein?
IRC Proceedings: Friday, May 03, 2024
IRC logs for Friday, May 03, 2024
Over at Tux Machines...
GNU/Linux news for the past day
Alexander Wirt, Bucha executions & Debian political prisoners
Reprinted with permission from disguised.work
Links 03/05/2024: Clownflare Collapses and China Deploys Homegrown Aircraft Carrier
Links for the day
IBM's Decision to Acquire HashiCorp is Bad News for Red Hat
IBM acquired functionality that it had already acquired before
Apparently Mass Layoffs at Microsoft Again (Late Friday), Meaning Mass Layoffs Every Month This Year Including May
not familiar with the source site though