----- Forwarded message from Dave Farber <[email protected]> -----
Date: Sat, 18 Dec 2010 11:06:27 -0500 From: Dave Farber <[email protected]> Subject: [IP] Spamhaus under DDOS from AnonOps Reply-To: [email protected] To: ip <[email protected]> > Subject: Spamhaus under DDOS from AnonOps (Wikileaks.info) > Date: Sat, 18 Dec 2010 12:39:18 +0000 > From: Steve Linford <[email protected]> > > > For speaking out about the crime gangs located at the wikileaks.info mirror > IP, Spamhaus is now under ddos by AnonOps. > > As our site can't be reached now, we can not continue to warn Wikileaks users > not to load things from the Heihachi IP. If you know journalists who would > get this message out, please forward this message (entire) to them. > > AnonOps did not like our article update, here's what we said and what brought > the ddos on us: > > ---- > > In a statement released today on wikileaks.info entitled "Spamhaus' False > Allegations Against wikileaks.info", the person running the wikileaks.info > site (which is not connected with Julian Assange or the real Wikileaks > organization) called Spamhaus's information on his infamous cybercrime host > "false" and "none of our business" and called on people to contact Spamhaus > and "voice your opinion". Consequently Spamhaus has now received a number of > emails some asking if we "want to be next", some telling us to stop > blacklisting Wikileaks (obviously they don't understand that we never did) > and others claiming we are "a pawn of US Government Agencies". > > None of the people who contacted us realised that the "Wikileaks press > release" published on wikileaks.info was not written by Wikileaks and not > issued by Wikileaks - but by the person running the wikileaks.info site only > - the very site we are warning about. The site data, disks, connections and > visitor traffic, are all under the control of the Heihachi cybercrime gang. > There are more than 40 criminal-run sites operating on the same IP address as > wikileaks.info, including carder-elite.biz, h4ck3rz.biz, elite-crew.net, and > bank phishes paypal-securitycenter.com and postbank-kontodirekt.com. > > Because they are using a Wikileaks logo, many people thought that the "press > release" was issued "by Wikileaks". In fact there has been no press release > about this by Wikileaks and none of the official Wikileaks mirrors sites even > recognise the wikileaks.info mirror. We wonder how long it will be before > Wikileaks supporters wake up and start to question why wikileaks.info is not > on the list of real Wikileaks mirrors at <a > href="http://wikileaks.ch/mirrors.html";>wikileaks.ch</a>. > > Currently wikileaks.info is serving highly sensitive leaked documents to the > world, from a server fully controlled by Russian malware cybercriminals, to > an audience that faithfully believes anything with a 'Wikileaks' logo on it. > > Spamhaus continues to warn Wikileaks readers to make sure they are viewing > and downloading documents only from an official Wikileaks mirror site. We're > not saying "don't go to Wikileaks" we're saying "Use the wikileaks.ch server > instead". > > ---- > > Steve Linford > The Spamhaus Project > http://www.spamhaus.org > > > _______________________________________________ pfir mailing list http://lists.pfir.org/mailman/listinfo/pfir
