Revision as of 08:31, 24 September 2016 edit90.148.162.197 (talk)No edit summary← Previous edit | Revision as of 12:28, 24 September 2016 edit undoC.Fred (talk | contribs)Autopatrolled, Administrators278,355 edits Undid revision 740937460 by 90.148.162.197 (talk) - back to referenced versionNext edit → | ||
Line 6: | Line 6: | ||
| type = Hacking | | type = Hacking | ||
|membership = 3 | |membership = 3 | ||
}}The '''OurMine Security Group''' is a ]. The group uses ] of celebrity internet accounts to advertise their commercial services.<ref>{{cite web|url=https://www.wired.com/2016/06/meet-ourmine-security-group-hacking-ceos-celebs/|title=Meet OurMine, the ‘Security’ Group Hacking CEOs and Celebs|publisher=]}}</ref><ref>{{cite web | |||
}}The '''OurMine Group''' is a security organization of 3 members, mainly known for ] Hack and ] Hack, And also the group claimed to attack Servers | |||
|url=http://qz.com/700043/nobody-likes-the-hackers-who-broke-into-mark-zuckerbergs-twitter-account/ | |||
|publisher=] | |||
|title=What we know about the despised hackers who broke into Mark Zuckerberg’s social media accounts | |||
|date=6 June 2016 | |||
|author=Josh Horwitz | |||
|quote=OurMine appear to be neither educators nor activists. They hack the accounts of high profile individuals or entities seemingly at random, for their own amusement or personal gain.}}</ref><ref>{{cite web|url=http://www.pcworld.com/article/3097513/security/ourmine-is-now-breaking-into-minecraft-accounts.html|title=OurMine is now hacking into Minecraft accounts|publisher=]|quote=In emails, the group has said it merely wants to help the public become aware of today's cybersecurity problems, including the use of weak passwords. }}</ref> | |||
In 2016, they hacked the ] accounts of ] co-founder ],<ref>{{cite web|url=http://www.ibtimes.com/wikipedia-co-founder-jimmy-wales-twitter-account-hacked-ourmine-2404899|title=Misplaced Pages Co-Founder Jimmy Wales’ Twitter Account Hacked By OurMine|date=21 August 2016|publisher=]|quote=...a member belonging to the hacking group insisted that it’s just promoting stronger security, claiming that if the group didn’t hack famous accounts someone else would. }}</ref> ] creator ],<ref>{{cite web|url=https://techcrunch.com/2016/08/01/pokemon-go-creator-niantics-ceo-hacked-on-twitter/|title=John Hanke is hacked’ By OurMine|date=July 31, 2016|publisher=]|quote=}}</ref><ref>{{cite web|url=http://www.forbes.com/sites/ryanmac/2016/07/31/hacker-explains-why-he-took-over-pokemon-go-creators-social-media-accounts/|title=Hacker Explains Why OurMine Took Over 'Pokémon GO' Creator's Social Media Accounts|first=Ryan|last=Mac|publisher=]}}</ref> Twitter co-founder ],<ref>{{cite web|url=http://mashable.com/2016/07/09/jack-dorsey-twitter-hack/|title=Jack Dorsey is hacked’ By OurMine|date=July 9, 2016|publisher=]|quote=}}</ref> ] CEO ],<ref>{{cite web|url=http://thenextweb.com/google/2016/06/27/someone-just-hacked-google-ceo-sundar-pichais-quora-account/|title=Sundar Pichai is hacked’ By OurMine|date=June 27, 2016|publisher=]|quote=}}</ref> and ] co-founder ], whose ] was also hacked.<ref>{{cite web|url=http://www.wsj.com/articles/mark-zuckerbergs-twitter-and-pinterest-accounts-hacked-1465251954|title=Mark Zuckerberg is hacked’ By OurMine|date=June 7, 2016|publisher=]|quote=}}</ref> Besides the social media accounts, the group hacked the website ].<ref>{{cite web|url=https://www.theguardian.com/technology/2016/jul/26/techcrunch-ourmine-hacking-group-attack|title=TechCrunch falls victim to OurMine hacking group|first=Samuel|last=Gibbs|date=26 July 2016|publisher=|via=]}}</ref><ref>{{cite web|url=http://www.lemonde.fr/pixels/article/2016/07/27/le-groupe-de-hackeurs-ourmine-pirate-le-site-specialise-techcrunch_4975353_4408996.html|title=Le groupe de hackeurs OurMine pirate le site spécialisé TechCrunch|date=27 July 2016|publisher=|via=]}}</ref><ref>{{cite web|url=https://www.engadget.com/2016/07/26/ourmine-techcrunch-compromise/|title=OurMine 'hackers' are targeting news sites now|publisher=]}}</ref> | |||
On April 3, 2014, OurMine Started Their Group with a twitter account ( Suspended Now ) and they hacked a lot of known youtubers , They hacked ] ,] and more | |||
The group makes money from charging for vulnerability assessment, where hackers attempt to break into corporate networks to check how safe they are. | |||
The OurMine team set up a site where you can pay them to “scan” your website, personal account, or even the entire corporation for security vulnerabilities. | |||
== Their Targets == | |||
=== '''] is Hacked''' === | |||
On Jun 6, 2016, The Group Hacked Mark Zuckerberg Twitter & Pinterest accounts , and they wrote " Hey Mark, We Got Access to some of your accounts, please dm us for contact " and after that their twitter account is hacked! | |||
=== '''] Attack''' === | |||
On 18 July 2016, The Group claims they launched cyber attack on ] Servers because another group took down the game, and so that they could help make buggy app more stable | |||
The attack hit ]’s login servers, making it all but impossible for players to get online. | |||
OurMine said that they launched an attack that made ] unavailable for much of the weekend. It came just a day after another hacking group, Poodlecorp, took the app down in a similar attack – and was launched in response to it, hackers affiliated to OurMine said. | |||
OurMine hopes that their attack on the app can help show the developers behind ] that the app should be made secure. | |||
The problems over the weekend were just the most extreme version of connectivity issues that have blighted ] ever since it was launched. Many users have struggled to get online, and the game’s international rollout has been staggered to try and allow developers to cope with the huge amount of interest in playing. | |||
The group said that it was carrying out the attack to force developers to get in touch with them. | |||
“No one will be able to play this game till Pokemon Go contact us on our website to teach them how to protect it!” the group wrote on its website. | |||
Another hacker claiming to be part of the group said that the attack had been launched after the huge outage caused by a group called Poodlecorp, on Saturday. OurMine wanted to help those behind Pokémon Go make the game more stable so that it wouldn’t be attacked in the future, the group said. | |||
=== '''] is Hacked''' === | |||
On May 24, 2016, The Group Hacked ] ] account | |||
=== '''] is Hacked''' === | |||
On Jun 27, 2016, The Group Hacked ] Twitter and Quora accounts | |||
] tweeted the message: “Hey, it’s OurMine,we are just testing your security, to upgrade your security please visit our website”, and posted a similar statement to his ]. It was deleted a few minutes later, but it put the CEO in the company of a number of other celebrities who’ve been hacked by the same group in the past few weeks. | |||
=== '''] Vulnerability''' === | |||
on Jul 19, 2016, The group, OurMine, made the claim on Tuesday in a video demonstrating its hack. The attack is aimed at the user login page run by ]'s developer, ]. | |||
OurMine isn't revealing all the details behind the hack. The group said it works by stealing the Internet cookies from the site, which can be used to hijack any account. All that OurMine needs is the victim's email address. | |||
To test the hack, IDG News Service created a user account on ], emailed OurMine and asked the group to break into it, which the group did. To show proof, the group renamed the user profile to "OurMine Team." | |||
The hack could allow the group to change the account's password, too, OurMine claimed. But the hacking team says it has no malicious purpose in exposing the ]. | |||
"We found this exploit because we don't want other hackers to know it," the group said. | |||
] hasn't responded to a request for comment. | |||
The hack specifically targets the user account system that customers rely on to access the PC and Mac versions of the game. OurMine said it will reveal the entire hack to ] once the developer contacts the group. | |||
In emails, the group has said it merely wants to help the public become aware of today's cybersecurity problems, including the use of weak passwords. | |||
=== '''] is Hacked''' === | |||
Hey, its OurMine, we are testing your security," reads the first Twitter message posted by the group. It later added, "You have been hacked by OurMine Team Visit our website to secure yourself." | |||
"We are a security group, not a hacking group," it said. "We will give his account back immediately if he contact us." | |||
OurMine indicates the takeover was intended to test the security of Yoshida's account. A number of the tweets contain links to their websites and an email address, which he can use to get in touch and supposedly reclaim control. | |||
At the time of writing, Yoshida has not regained control of his Twitter account. | |||
=== '''] is Hacked''' === | |||
The Twitter chief executive, ], had his Twitter and Vine accounts hacked. | |||
The publicity-hungry hackers posted their standard message – that they were “testing your security” – along with the last video they posted. | |||
As with every previous hack carried out by OurMine, Twitter itself was not the source of the compromise. This time, the hackers appeared to have gained access to Vine, and used their access there to post to the main feed. Previous weak links used by the group have included ] and ]. | |||
Of course, this time is slightly more embarrassing, given that ] also owns Vine. Many Vine users log in through Twitter, which allows them to protect their accounts using the app’s two-factor authentication, but older Vine users may also have a separate username and password. This could be how Dorsey’s account was compromised. | |||
Twitter said: “We don’t comment on individual accounts for privacy and security reasons.” The company pointed the Guardian to a post from June this year on how to secure your account, but didn’t say whether the problem was Dorsey failing to follow his own company’s advice, or the advice not being enough to actually secure your account. | |||
What OurMine’s hacks lack in technical skill, they make up for in persistence, and they underscore that in technology’s connected ecosystem, any weak link can be enough to lead to an embarrassing breach | |||
To protect themselves against similar hacks, users should ensure that not only are their social media accounts locked down, with two-factor authentication and secure passwords, but that so too is every other account that can post to their main feed. That includes Quora, Bitly and Vine, as well as many more. Dorsey won’t be the last hit by OurMine, but it’s hard to think of someone who would be more embarrassed. | |||
==References== | |||
{{Reflist|30em}} | |||
==External links== | ==External links== | ||
* {{Official website|https://ourmine.org}} | |||
{{Sister project links|OurMine|b=no|q=no|v=no|voy=OurMine}} | |||
* | |||
] | ] | ||
] | ] | ||
] |
Revision as of 12:28, 24 September 2016
OurMine | |
Formation | September 18, 2014 |
---|---|
Type | Hacking |
Membership | 3 |
The OurMine Security Group is a hacker group. The group uses hacks of celebrity internet accounts to advertise their commercial services.
In 2016, they hacked the Twitter accounts of Misplaced Pages co-founder Jimmy Wales, Pokemon Go creator John Hanke, Twitter co-founder Jack Dorsey, Google CEO Sundar Pichai, and Facebook co-founder Mark Zuckerberg, whose Pinterest was also hacked. Besides the social media accounts, the group hacked the website TechCrunch.
References
- "Meet OurMine, the 'Security' Group Hacking CEOs and Celebs". Wired (magazine).
- Josh Horwitz (6 June 2016). "What we know about the despised hackers who broke into Mark Zuckerberg's social media accounts". Quartz (publication).
OurMine appear to be neither educators nor activists. They hack the accounts of high profile individuals or entities seemingly at random, for their own amusement or personal gain.
- "OurMine is now hacking into Minecraft accounts". PC World.
In emails, the group has said it merely wants to help the public become aware of today's cybersecurity problems, including the use of weak passwords.
- "Misplaced Pages Co-Founder Jimmy Wales' Twitter Account Hacked By OurMine". International Business Times. 21 August 2016.
...a member belonging to the hacking group insisted that it's just promoting stronger security, claiming that if the group didn't hack famous accounts someone else would.
- "John Hanke is hacked' By OurMine". TechCrunch. July 31, 2016.
- Mac, Ryan. "Hacker Explains Why OurMine Took Over 'Pokémon GO' Creator's Social Media Accounts". Forbes.
- "Jack Dorsey is hacked' By OurMine". Mashable. July 9, 2016.
- "Sundar Pichai is hacked' By OurMine". TheNextWeb. June 27, 2016.
- "Mark Zuckerberg is hacked' By OurMine". The Wall Street Journal. June 7, 2016.
- Gibbs, Samuel (26 July 2016). "TechCrunch falls victim to OurMine hacking group" – via The Guardian.
- "Le groupe de hackeurs OurMine pirate le site spécialisé TechCrunch". 27 July 2016 – via Le Monde.
- "OurMine 'hackers' are targeting news sites now". Engadget.