Pegawai negeri sipil, karyawan NASA dan miliarder Amerika di antara donor bocor di hack GiveSendGo.- Civil servants, NASA employees and an American billionaire among donors leaked in GiveSendGo hack.

 

Feb14, 2022 10:31 AM.

Seorang miliarder teknologi Amerika, dua karyawan NASA dan pegawai negeri kanada termasuk di antara daftar bocor hampir 100.000 donor Freedom Convoy, menurut informasi yang dirilis oleh peretas yang bertanggung jawab untuk mencatat situs crowdfunding kelompok tersebut.

Minggu malam, peretas menurunkan situs web GiveSendGo, situs web crowdfunding yang berbasis di AS berbondong-bondong oleh penyelenggara konvoi setelah GoFundMe membatalkan kampanye multi-juta dolar mereka awal bulan ini.

Para peretas juga merilis spreadsheet data donor mentah yang berisi nama, email, dan jumlah dolar hampir 93.000 orang yang konon menyumbangkan uang ke Freedom Convoy.

Situs web GiveSendGo masih offline pada Senin sore.

Pada Minggu malam beranda situs diganti dengan "GiveSendGo IS NOW FROZEN!" dalam teks biru tebal, serta manifesto yang menggulir klip dari film Disney Frozen II, yang menggambarkan Elsa menyanyikan Show Yourself sambil mengendarai melintasi Laut Gelap dengan kuda yang terbuat dari air.

"Perhatian GiveSendGo grifters dan hatriots," baca manifesto tersebut.

"Pemerintah Kanada telah memberi tahu Anda bahwa uang yang Anda kumpulkan untuk mendanai pemberontakan dibekukan."

Peretas menuduh GiveSendGo yang berbasis di Boston terlibat dalam mendanai serangan 6 Januari tahun lalu di Capitol AS oleh pendukung Donald Trump, dan juga pendanaan blokade dan protes yang sedang berlangsung di Ottawa dan di seluruh Kanada.

"Anda berkomitmen untuk mendanai apa pun yang membuat api informasi yang salah sampai membakar demokrasi kolektif dunia," bunyi manifesto itu.

Sementara peretas tidak mengidentifikasi diri mereka sendiri, seorang individu yang mengaku bertanggung jawab mengatakan kepada outlet berita Inggris The Guardian bahwa mereka bermaksud untuk membuktikan Kanada tidak kebal terhadap campur tangan politik asing.

Spreadsheet besar, tersedia untuk diunduh Minggu malam di situs web GiveSendGo yang diretas, menyumbang $ 8.421.806,50 dalam sumbangan dari 92.844 orang.

Sementara sebagian besar sumbangan berasal dari Amerika Serikat - 52.000 donor Amerika terdaftar dibandingkan dengan 36.000 yang berasal dari negara ini, kanada memberikan uang paling banyak secara keseluruhan, sekitar $ 4,3 juta dibandingkan dengan $ 3,62 juta dari donor AS.

'Pendudukan': GoFundMe menarik steker pada penggalangan dana untuk pengunjuk rasa konvoi

Trudeau ingin 'uang asing' mendanai protes ilegal di Kanada berhenti

Sementara GiveSendGo belum mengeluarkan pernyataan tentang peretasan atau kebenaran daftar donor yang bocor, beberapa nama di spreadsheet dikonfirmasi secara independen sebagai donor oleh National Post. Permintaan komentar juga dibuat ke alamat email untuk donor utama dalam daftar tetapi tidak segera diakui.

Selain itu, tidak mungkin untuk menentukan berapa banyak yang memilih untuk menyumbang melalui transfer bank atau cryptocurrency.

Semua kecuali 686 dari sumbangan yang diterima berada di bawah $ 1.000.

Sumbangan terbesar adalah $ 215.000 yang dibuat pada 6 Februari, terdaftar sebagai 'Diproses tetapi tidak dicatat' dan tanpa data lebih lanjut.

Sumbangan terbesar - $ 90.000 - tampaknya dibuat pada 9 Februari oleh miliarder teknologi Amerika Thomas Siebel, termasuk sumbangan $ 9.000 untuk GiveSendGo.

Pada hari yang sama melihat sumbangan Kanada terbesar, $ 75.000 – ditambah tambahan $ 1.000 dalam toples tip GiveSendGo – oleh presiden produsen mesin cuci tekanan yang berbasis di New Brunswick.

Sumbangan besar lainnya termasuk $ 25.000 dari London, wakil presiden rantai dealer mobil AutoCanada yang berbasis di London, dan $ 20.000 dari kursi organisasi dukungan masyarakat dan keluarga yang berbasis di Cannington, Ont.

Raja konstruksi yang berbasis di Dallas, Texas Ben Pogue tampaknya telah menyumbangkan $ 20.000. Menurut laporan oleh ABC News dan Associated Press, Pogue menyumbangkan lebih dari $ 200.000 untuk membantu memilih kembali mantan presiden AS Donald Trump, termasuk menyediakan akses jet pribadi untuk kampanye pemilihan kembali Trump.

Karyawan publik Kanada juga terdaftar sebagai donor, termasuk seorang pria Quebec yang menggunakan alamat email Layanan Pemasyarakatan Kanada untuk menyumbangkan $ 102.

Beberapa donor AS tampaknya memberikan uang menggunakan email pemerintah AS, termasuk Biro Penjara AS, Departemen Kehakiman AS, dan NASA.

Seorang juru bicara Partai Konservatif Kanada mengkonfirmasi sumbangan $ 200 dari "Candace Bergen" di Saskatchewan tidak dibuat oleh pemimpin CPC sementara, menunjuk pada perbedaan dalam ejaan nama depannya.

Peretasan hari Minggu terjadi sedikit lebih dari seminggu setelah TechCrunch melaporkan penyimpangan keamanan di situs web GiveSendGo, khususnya 50 gigabyte ruang penyimpanan cloud yang tidak terenkripsi yang mengekspos ribuan SIM dan paspor yang dipindai yang diajukan oleh donor sebagai bagian dari proses pembayaran situs.

Para ahli mengatakan serangan hari Minggu menyoroti pentingnya keamanan bagi mereka yang memiliki kehadiran online profil tinggi.

"Penyerang hanya harus benar sekali, sementara pembela harus benar sepanjang waktu," kata Richard Henderson, kepala petugas keamanan informasi dengan perusahaan cybersecurity WithYouWithMe.

"Hanya dibutuhkan satu kesalahan untuk memungkinkan penyerang yang terampil masuk, dan begitu mereka berada di dalam permainannya berakhir."

Ruang lingkup serangan, yang melihat penyusup tidak hanya mengendalikan catatan DNS GiveSendGo tetapi juga mendapatkan daftar donor mereka, menunjukkan bahwa mereka memiliki "kendali bebas" di dalam data perusahaan.

"Kami telah melihat ini beberapa kali di masa lalu dengan situs 'peniru' lainnya dengan cepat dilemparkan dengan cepat oleh kelompok-kelompok yang condong ke kanan," katanya.

"Dapatkan sesuatu secara online dengan cepat dengan sedikit atau tanpa perhatian yang diberikan pada keamanan atau penyebaran yang aman, dan yang diperlukan hanyalah peretas yang terampil untuk datang dan merobek semuanya menjadi serpihan."

Ketika kebocoran data pertama GiveSendGo melibatkan ribuan dokumen identitas donor yang dipindai yang ditinggalkan di tempat terbuka, Henderson menyarankan orang-orang memberikan pemikiran serius tentang siapa mereka berbagi informasi sensitif dengan online.

"Orang-orang secara teratur hanya menyerahkan informasi pribadi mereka tanpa mengambil sedetik ekstra untuk mempertimbangkan implikasi keamanan dari melakukannya," katanya.

"Anda benar-benar tidak tahu perlindungan apa yang dimiliki perusahaan untuk melindungi informasi pribadi Anda.

"Jelas dalam kasus ini, ada sangat sedikit."


--------------------------===============


An American tech billionaire, two NASA employees and Canadian civil servants are among a leaked list of nearly 100,000 Freedom Convoy donors, according to information released by hackers responsible for taking down the group’s crowdfunding site.

Late Sunday night, hackers took down the website of GiveSendGo, the U.S.-based crowdfunding website flocked to by convoy organizers after GoFundMe cancelled their multi-million dollar campaign earlier this month.

The hackers also released a spreadsheet of raw donor data containing names, emails and dollar amounts of nearly 93,000 individuals who purportedly donated money to the Freedom Convoy.

GiveSendGo’s website was still offline by late Monday afternoon.

On Sunday night the site’s homepage was replaced with “GiveSendGo IS NOW FROZEN!” in bold, blue text, as well as a manifesto scrolling over a clip from the Disney film Frozen II , depicting Elsa singing Show Yourself while riding across the Dark Sea on a horse made of water.

“Attention GiveSendGo grifters and hatriots,” read the manifesto.

“The Canadian government has informed you that the money you a–holes raise to fund an insurrection is frozen.”

The hacker accused Boston-based GiveSendGo of being complicit in funding last year’s Jan. 6 raid on the U.S. Capitol by Donald Trump supporters, and likewise funding of ongoing blockades and protests in Ottawa and across Canada.

“You are committed to funding anything that keeps the raging fire of misinformation going until that it burns the world’s collective democracies down,” the manifesto read.

While the hacker didn’t identify themselves, an individual claiming responsibility told British news outlet The Guardian they intended to prove Canada was’t immune to foreign political interference.

The immense spreadsheet, available for download Sunday night on GiveSendGo’s hacked website, accounts for $8,421,806.50 in donations from 92,844 individuals.

While most donations came from the United States — 52,000 American donors were listed compared to 36,000 originating in this country, Canadians gave the most money overall, about $4.3 million compared to $3.62 million from U.S. donors.

'An occupation': GoFundMe pulls plug on fundraiser for convoy protesters

Trudeau wants the 'foreign money' funding illegal protests in Canada to stop

While GiveSendGo has yet to issue a statement on the hack or the veracity of the leaked donors list, several names on the spreadsheet were independently confirmed as donors by the National Post. Inquiries for comment were also made to email addresses for major donors on the list but were not immediately acknowledged.

As well, it’s impossible to determine how many opted to donate via bank transfer or cryptocurrency.

All but 686 of received donations were under $1,000.

The largest donation is $215,000 made on Feb. 6, listed as ‘Processed but not recorded’ and without any further data.

The largest named donation — $90,000 — was apparently made on Feb. 9 by American tech billionaire Thomas Siebel, including a $9,000 donation towards GiveSendGo.

That same day saw the largest Canadian donation, $75,000 — plus an extra $1,000 in GiveSendGo’s tip jar— by the president of a New Brunswick-based pressure washer manufacturer.

Other large donations include $25,000 from a London, Ont. based vice-president of the AutoCanada car dealership chain, and $20,000 from the chair of a Cannington, Ont.-based community and family support organization.

Dallas, Texas-based construction magnate Ben Pogue appears to have donated $20,000. According to reports by both ABC News and the Associated Press, Pogue donated over $200,000 to help re-elect former U.S. president Donald Trump, including providing private jet access for Trump’s re-election campaign.

Canadian public employees are also listed as donors, including a Quebec man who used a Correctional Service of Canada email address to donate $102.

Several U.S. donors apparently gave money using U.S. government emails, including the U.S. Bureau of Prisons, the U.S. Department of Justice, and NASA.

A Conservative Party of Canada spokesperson confirmed a $200 donation from a “Candace Bergen” in Saskatchewan was not made by the interim CPC leader, pointing to differences in the spelling of her first name.

Sunday’s hack comes a little over a week after TechCrunch reported security lapses in GiveSendGo’s website , specifically 50 gigabytes of unencrypted cloud storage space that exposed thousands of scanned drivers’ licences and passports submitted by donors as part of the site’s payment process.

Experts say Sunday’s attack highlights the importance of security for those with high-profile online presences.

“Attackers only have to be right once, while defenders have to be right all of the time,” said Richard Henderson, chief information security officer with cybersecurity firm WithYouWithMe.

“It just takes a single mistake to allow a skilled attacker in, and once they’re inside its game over.”

The scope of the attack, which saw intruders not only take control of GiveSendGo’s DNS records but also get their hands on their donor lists, suggests they had “free rein” inside the company’s data.

“We’ve seen this multiple times in the past with other ‘copycat’ sites quickly thrown up rapidly by right-leaning groups,” he said.

“Get something online quick with little to no attention paid to security or secure deployment, and all it takes is a skilled hacker to come along and rip it all to shreds.”

As GiveSendGo’s first data leak involved thousands of donors’ scanned identity documents left out in the open, Henderson suggested people give serious thought about who they share sensitive information with online.

“People regularly just hand over their personal information without taking even an extra second to consider the security implications of doing so,” he said.

“You really have no idea what protections a company have in place to protect your personal information.


“Clearly in this case, there was very little.”

Komentar

Posting Komentar

Postingan populer dari blog ini

PM Kanada Trudeau mencabut Undang-Undang Darurat, sekarang setelah Ottawa memprotes.- Canada's PM Trudeau revokes Emergencies Act, now that Ottawa protest over.

Gambar
  Feb23, 2022 - 5:01 PM. Perdana Menteri Justin Trudeau mengatakan pemerintah dapat mencabut Undang-Undang Darurat sekarang karena krisis di Ottawa dan penyeberangan perbatasan Kanada telah mereda. Trudeau meminta Undang-Undang Darurat, yang menggantikan Undang-Undang Langkah Perang pada tahun 1988, untuk pertama kalinya pekan lalu, mengatakan polisi membutuhkan bantuan ekstra untuk mengakhiri blokade yang telah berlangsung di pusat kota Ottawa selama berminggu-minggu dan telah menyebar ke kunci Kanada-AS. penyeberangan perbatasan. Pada hari Senin, Trudeau mengatakan kekuatan luar biasa yang dibatasi waktu yang diberikan oleh Undang-Undang Darurat masih diperlukan karena pemerintahnya khawatir tentang blokade yang kembali. Trudeau sekarang mengatakan bahwa perintah itu sekarang telah dipulihkan dan bahwa sementara ancaman tetap ada, polisi dan undang-undang yang ada akan cukup untuk mencegah pekerjaan lain. House of Commons mengeluarkan mosi untuk menyetujui langkah-langkah di bawa...
Baca selengkapnya

Protes yang sedang berlangsung di Hong Kong telah mencapai "titik puncak" dan Singapura menyaksikan perkembangan "dengan keprihatinan". - The ongoing protests in Hong Kong have reached a “breaking point” and Singapore is watching the developments “with concern”, said Trade and Industry Minister Chan Chun Sing on Monday (Nov 18). “Unless calm is restored, dialogue commences and constructive actions taken, there will be grave doubts about Hong Kong's future and the sustainability of its current governance model,” said Mr Chan in his comments to reporters at The Treasury. Hong Kong has been rocked by months of unprecedented protests, which started initially from opposition to a controversial extradition Bill, but later evolved into a wider movement calling for democratic reforms and a halt to sliding freedoms under Chinese rule. Clashes between protesters and police have turned increasingly violent, with schools emerging as the new battleground in recent days. “We watch with concern the deterioration of the situation in Hong Kong. This is especially so for those of us with relatives in Hong Kong,” said Mr Chan. He added that Hong Kong's continued success as an economic and financial hub is important for the region and the world, including Singapore. “We wish Hong Kong the very best and sincerely hope that the situation will improve soon,” he said.FOUR LESSONS FOR SINGAPOREMr Chan cautioned that what has happened in Hong Kong can “easily happen” to Singapore if the country is complacent. He also explained four lessons that Singapore can draw from the recent uncertainties in Hong Kong. The first is to have a well-functioning political system, which works closely with the public service to anticipate challenges, execute policies well, resolve problems and improve people's lives. “Regardless of political systems and party interests, the exercise of leadership must be to put people’s and country’s interests foremost,” the minister said. Feedback channels will also be required to enable responsive and responsible governance, he added. “Only with a well-functioning political system, the right political culture and a well-oiled feedback-to-action mechanism can we make adjustments to policies as necessary, execute decisively and communicate effectively.” “Today, too many governments and societies are too focused on the immediate and domestic, without sufficient considerations for the future or external.” As an example, he cited how the access to affordable housing and essential services is fundamental to keeping society stable. “The transfer of land ownership and properties across generations cannot be at the expense of depriving future generations’ opportunities to be rewarded based on hard work and capabilities. It cannot be that those who are rich first will be rich forever without due effort.” Mr Chan noted how there have been suggestions for Singapore to include land sales proceeds in the Budget and allow private developers land bank for longer periods so as to complete projects. “Our rules put national developments, especially public housing, as priority,” he elaborated. “We are careful to not distort incentives for Government to use land sales to maximise profits. Otherwise, it is the public that will ultimately pay. We are also careful to not let private developers’ interest override wider public interest. “Revenue from long-term land sales goes into our reserves to benefit future generations. This is the discipline we adhere to,” he said. Mr Chan then moved on to the third lesson on social cohesion and conflict resolution. “Unity amidst diversity requires all parties to bear in mind the wider good of the country, while championing the respective wants of specific communities. “To insist on maximal individual gains, at the expense of the common and collective good, cannot be the Singapore way,” he said. The “Singapore way” also includes dialogue and constructive actions, instead of violence, when it comes to resolving problems. Mr Chan stressed that conflict resolution requires all parties to take actions that are responsible and constructive. Singaporeans are also ultimately responsible for our their future. “Regardless of what others say, we must bear the responsibilities and consequences of our own choices and actions. This is why we are against foreign interference in domestic politics,” he said. Lastly, the minister noted that it is never easy for small city-states to survive and thrive without a conventional hinterland for supplies, markets and opportunities. “Singapore will have to pick up the pieces ourselves should things go badly wrong,” he said. Therefore, Singapore's continued relevance to the world is “never a given” and the country must continue to work hard, distinguish itself and stay exceptional amid global uncertainties. This includes growing opportunities for local enterprises and workers, as well as providing value to regional and global geo-strategic affairs with principled perspectives and clear-eyed analysis of the challenges and opportunities, among others. 

Gambar
SINGAPURA: Protes yang sedang berlangsung di Hong Kong telah mencapai "titik puncak" dan Singapura menyaksikan perkembangan "dengan keprihatinan", kata Menteri Perdagangan dan Industri Chan Chun Sing, Senin (18 November).  "Jika ketenangan tidak dipulihkan, dialog akan dimulai dan tindakan konstruktif telah diambil, akan ada keraguan besar tentang masa depan Hong Kong dan keberlanjutan model pemerintahan saat ini," kata Mr Chan dalam komentarnya kepada wartawan di The Treasury.  Hong Kong telah diguncang oleh berbulan-bulan protes yang belum pernah terjadi sebelumnya, yang dimulai awalnya dari oposisi ke RUU ekstradisi yang kontroversial, tetapi kemudian berkembang menjadi gerakan yang lebih luas yang menyerukan reformasi demokratis dan penghentian kebebasan geser di bawah kekuasaan Tiongkok.  Bentrokan antara pemrotes dan polisi semakin berubah menjadi kekerasan, dengan sekolah-sekolah muncul sebagai medan pertempuran baru dalam beberapa hari ...
Baca selengkapnya