cyberwar in argentina!

[coderman]

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Sunday, September 20, 2020 1:37 AM, Punk-BatSoup-Stasi 2.0 <punks at tfwno.gf> wrote:
...
> A friend of mine is (or was...) the owner of this channel
>
> https://www.youtube.com/losliberales
... [ provocations, good trouble ] ...
> A few days ago the account was 'hacked', the two factor authentication somehow defeated, the content deleted and replaced with advertising for some kind of ethereum scam, and at that point the account was suspended by jewtube because of 'violation of terms of service'.

more common than attacking 2nd factor is session riding or browser jacking, using the existing auth token exfiltrated. you're then "the target" and can do as you please (until session expires).

if you can attack over wifi or LAN, this is almost always easiest.



> He's talked to jewtube and he might get the account back.

they can identify this behavior as "anomalous".  if they want to help or not, good luck...



> So at face value this was an ordinary hack, but it seems it's also possible that, say, the argie government got the channel closed by indirect means.

the oldest tricks still the best tricks. if you can jack session and achieve ends, without exotic exploits or extraordinary access, all the better!



> *he had at least one video with +1 million visits and tens of videos with 100-200k views.

sounds like a target :)


best regards,