#DDoSecrets just released approximately 5 gigabytes of emails, chat logs, members and donor lists and other files from the servers of the far-right extremist group, the Oath Keepers Image
Data from #OathKeepers leaked online after alleged hack dailydot.com/debug/oath-kee…

The breach includes emails, chat logs, and details on members and donors.
Tips for journalists digging into the data:

* Check the GiveSendGo data for crowdfunds referenced in the chats for additional donor data

* Search for member addresses at/near military bases and abbreviations like AFB

* Search for members w/ military/police titles/abbreviations
More tips:

* The backup database includes people who made accounts just to tell the OKers to fxck off (but doesn't impact aggregate_members.csv)

* The scrapes we provided of .mil and .gov addresses need to have their context checked. We cited sources for a reason!
Oath Keepers leak includes 160 U.S. military, government email addresses dailydot.com/debug/military…

The controversial militia's membership list was leaked online after an alleged hack.
Oath Keepers Had Money Troubles After Capitol Riot, Leaked Emails Show thedailybeast.com/oath-keepers-h… #DDoSecrets

Internal emails show that the Oath Keepers went silent after taking money from prospective members.
'Falling behind': Leak reveals Oath Keepers frustrated by 'self-screwing' organization after Jan. 6 rawstory.com/oathkeepers-le… #DDoSecrets
Hack Of Oath Keepers Militia Group Includes Names Of Active NYPD Officers, De Blasio Launches Investigation gothamist.com/news/hack-oath… #DDoSecrets
Oath Keepers Panicked That the Left Would ‘Decapitate’ Them After Failed Capitol Putsch thedailybeast.com/oath-keepers-p… #DDoSecrets

Emails from Oath Keepers leader Stuart Rhodes show extreme paranoia after the Capitol riot, including fears that Joe Biden would cut the U.S. power grid.
Far-right militia group membership surged after Capitol attack, hack shows theguardian.com/us-news/2021/o… #DDoSecrets

Hundreds of people joined Oath Keepers or renewed membership after many of group’s members participated in riot
A charismatic interloper preached readiness and race war to the Oath Keepers. Was he a federal agent or just a 'messed-up vet'? rawstory.com/jim-arroyo/

• • •

Missing some Tweet in this thread? You can try to force a refresh

Keep Current with Emma Best 🏳️‍🌈🏴🏳️‍⚧️

Emma Best 🏳️‍🌈🏴🏳️‍⚧️ Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!


Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @NatSecGeek

3 Sep


a #ransomware group exposing some of the IP addresses of the people who've accessed their files................

.......including the ones that uploaded the files...................
AFAICT, they aren't tor nodes or VPNs, so they're part of the infrastructure the #ransomware group uses, most likely infected machines because despite their mistakes I don't think they'd expose *their* IPs.

But what's significant *is* the lack of tradecraft and sophistication.
This #ransomware group isn't big, but in the past few months they've publicly claimed a few dozen victims and leaked files for about a quarter of them, small batches for each.

They show few signs of technical sophistication. The companies they've hit don't care about that.
Read 4 tweets
3 Sep
One of those #FOIA documents that's too fascinating for what it actually is muckrock.com/foi/san-jose-3…

... ::shakes head:: i need coffee
I always forget how good coffee actually is Image
::Runs caffeine-screaming through the DDoSecrets chat:: Image
Read 4 tweets
1 Mar
All #DDoSecrets is doing is giving data to journalists and researchers.

That's it. The result, is this...

Meanwhile I'm told that Gab's claim about fixing the SQL injection vulnerability is incorrect, and the vulnerability can still be seen in their public codebase.
You can watch Gab scramble to gut their codebase in real-time lol code.gab.com/gab/social/gab…
"We have to destroy the codebase in order to save it" - Gab engineers
Read 4 tweets
26 Feb
Gab's freaking out and #DDoSecrets hasn't even announced anything yet. news.gab.com/2021/02/26/all…

Yes, we have the data.

No, no one's working with the hackers like that.

No, I won't say more right now.

Yes, there'll be more info soon enough.
Read 14 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!