Site Aims To Be the "Google" of the Underweb

tsu doh nimh writes "A new service in the cyber underground aims to be the Google search of underground Web sites, connecting buyers to a vast sea of shops that offer an array of dodgy goods and services, from stolen credit card numbers to identity information and anonymity tools. From the story: 'A glut of data breaches and stolen card numbers has spawned dozens of stores that sell the information. The trouble is that each shop requires users to create accounts and sign in before they can search for cards. Enter MegaSearch, which lets potential buyers discover which fraud shops hold the cards they're looking for without having to first create accounts at each store.'"

Comments

"Underweb"

[bonch]

"Cyber underground," ooh, scary. Clearly, the author of this article has never visited any onion indexing sites. Seriously though, f this is a publicly accessible web server, and the creator is working directly with fraud shops, it seems like it's only a matter of time before authorities find a way to catch him. Even just by arresting one of the shop owners who might flip.

Re:"Underweb"

[stanlyb]

unless they are operating under the cover of TOR....

Re:"Underweb"

[bonch]

Well, the site is publicly accessible at http://megasearch.cc./ The guy even has his Jabber contact up. It's actually kind of suspicious and makes me wonder if it's all a joke or honeypot.

Re:"Underweb"

[Zamphatta]

I thought the whole thing screams "honeypot". I doubt any of the experiences bad guys will fall for this... which means they'll catch a lot of newbies and people who otherwise wouldn't have tried this line of "work". I wonder if they could get in trouble for entrapment? Hmm. Interesting. Although, I could be totally wrong, I'd still definitely avoid the place like the plague if I was looking to buy or sell there.

Re:"Underweb"

[oztiks]

slashdotted

Re:"Underweb"

[mhajicek]

There's no such thing as "entrapment" any more.

Re:"Underweb"

[mapkinase]

Sometimes I suspect that /. editors consciously flaming.

Re:"Underweb"

[mug funky]

and the headlines would be full of "cyber gang busted" stories regardless.

if you can only catch small fish, you'll shout to the heavens just how many you got.

Re:"Underweb"

[q.kontinuum]

If this is a honeypot, lets create some tinyurl links and post them on e.g. Foxnews website or something to give them some bees :-)
(Disclaimer: This was a joke, not a real encouragement to do any dodgy stuff. If you can't tell the difference better stay out of the internet.)

Re:"Underweb"

[Anonymous Coward]

Even cooler, if I find a way to physically find these shops for a bit of profit myself. You see, if you make money illegally and want no-one to know, you're not likely to contact the cops when I come to sell safety insurance, fire, accidental death,dismemberment and family plans. Obviously these people have money and I have not enough, so logically, I should harvest it from them. It's a job I could enjoy and make my moral blindspots actually work for me. It's like I could be doing a public service and getting paid way too well for it.
        Who could care if some haXor on the take should drop dead from aggravated accidental death? Who could care if I turn out his wife to ho while he gathers the required deposit? Who could care if I get to take a well deserved vacation to Clockwork Orangeland? Watching the keystone kops go through the motions is funny but not as rewarding as driving a dipshits life to surreal ruin at a megaprofit! Sure It's been suggested I'm a litte sick, but isn't it admirable that I can rise above it all to self actualize?

Re:"Underweb"

[jez9999]

Fox news website? I thought you wanted to give them websites that WEREN'T connected to dodgy illegal activities.

Re:"Underweb"

[Anonymous Coward]

Catch him? Hell, they're probably underwriting him.

Remember how they got the Iceman? And notice how it's always the top local narcotics agent who always seems to have a ready supply of your favorite contraband?

Hey, look, crooks are good for the cop business, which is good for keeping undeserving, yet appreciative, mental midgets in positions of luxury, entitlement and authority, rather than having to toil for shit as a reward like some of us.

Anonymous Bitterly Cynical Realist

Re:"Underweb"

[Anonymous Coward]

Or you'll maintain them in a barrel the better to conveniently whip them out for a self-aggrandizing headline or two whenever business is slow and the powers-that-be question the need for paying your salary, particularly in light of your indiscretions and penchant for creating embarrassing situations for them.

Anonymous Friend of Machiavelli

Re:"Underweb"

[TheNastyInThePasty]

People don't understand what entrapment is. It's not an undercover cop going "Hey look, there's a nice gold watch over here that someone left, maybe you should take it." and then arresting you when you do. It's not illegal to provide an opportunity and then catch the criminal in the act. It IS illegal to say "Hey, go steal that guy's gold watch or I'll kill your whole family."

See the difference? Read up on it http://en.wikipedia.org/wiki/Entrapment

Re:"Underweb"

[Anonymous Coward]

Cops cannot sell you drugs and then arrest you for possession. That's entrapment. Cops can have a snitch/narc buy and bust you though. I remember the story of the cops selling crack and then arresting the buyers. Sure they arrested them. Just couldn't stick anything because the cops cannot break the law to catch people who break the law.

Re:"Underweb"

[nurb432]

Especially when you had to go looking for the 'bad guy' in the first place.. its not like they drove up to your house and asked 'hey buddy, want to buy a virus?'

I saw the fed!

[owenferguson]

Honeypot much? Nice try, guys. Way to debut it at the end of the humpday protest cycle.

Re:I saw the fed!

[msauve]

I, for one, am happy to see that some secret US government agency can not only do their job, but make a profit doing so. What a great idea for working both sides!

Re:I saw the fed!

[forkfail]

And provide fodder for the pro-SOPA camp all at the same time... sigh...

Re:Organized trolling campaign by GreatBunzinni

[forkfail]

Not this shit again...

FUCK, SPOTTED THE FED!

[owenferguson]

So sue me, I never actually made it to DEFCON, and having been to Vegas, I hardly want to go back...

Re:FUCK, SPOTTED THE FED!

[Anonymous Coward]

Some antibiotics will clear that rash right up.

Ruining it for the rest of us.

[nitehawk214]

Sites like this are why the general public thinks that laws like SOPA are ok.

Or let me put it another way, if you are creating a search engine for it... it isn't underground.

Re:Ruining it for the rest of us.

[Anonymous Coward]

Awful convenient timing for something like this to be a big story eh?

I felt "left out" after reading about the glorious underground for about 5 seconds. Then I thought.... Who seeks that kind of shit out? nevermind

Re:Ruining it for the rest of us.

[hey!]

You know, that's actually an interesting point about SOPA.

What this guy is doing is illegal under the RICO act, The problem is mechanism: how exactly would you use RICO to shut him down?

Well, you'd start with an investigation. Unless the guy is a money laundering genius, you should be able to trace back from the infrastructure he uses (DNS, Internet access, server hosting) back to some kind of bank transaction that will reveal his identity.

So what happens when you run into a block like a DNS service that keeps domains' admin and technical contacts secret? That's one of the things SOPA is supposed to address. Well, you get a court order. It's not really that difficult. The modicum of difficulty a warrant presents is a good thing. It discourages draconian actions based on frivolous claims.

But what if the trail of evidence leads to another country? Then we're stuck.

Still, we don't need a massive expansion of government regulatory powers or an attempt to impose our laws over foreign territories to deal with that. What we *really* need is some kind of cyber-crime treaty. It'd work like this: Country A detects somebody in country B that is illegal in both countries. The authorities in A contact the authorities in B, and B agrees to pursue the matter, taking regulatory and criminal law actions to shut down any enterprise that *is illegal according to its own laws*. This preserves the due-process barrier to frivolous claims.

So what if B is not a signatory to the treaty? Then we *do* need to have a law which allows us to do some of the things outlined in SOPA, *subject to due process* and with a right of appeal.

Re:Ruining it for the rest of us.

[nitehawk214]

SOPA wont hurt organizations like this. If they cant fight him with standard laws, and they use SOPA to blast his site off the internet, it is trivial for him to emerge on a new domain at a new hosting site.

In the meantime all the other customers of the hosting site will be removed from the internet. Collateral damage abound hurts everyone except and the intended target escapes with only a minor inconvenience.

Granted I don't think Megasearch has any legal purposes, and they are qualifying themselves for an internet Darwin award by announcing their intent... but the government will for certain use this against sites and services that do have legal uses.

Honeypot Detected

[Anonymous Coward]

The last Google of stolen credit cards was run by the FBI.

Re:Honeypot Detected

[ColdWetDog]

The last Google of stolen credit cards was run by the FBI.

Can't trust anybody any more. That's the last time I ever give my credit card number to an FBI agent.

Re:Honeypot Detected

[K. S. Kyosuke]

The last Google of stolen credit cards was run by the FBI.

Can't trust anybody any more. That's the last time I ever give my credit card number to an FBI agent.

You silly. You always have to give an FBI agent someone else's credit card number, that's obvious.

Re:Honeypot Detected

[Kadagan AU]

The last Google of stolen credit cards was run by the FBI.

Can't trust anybody any more. That's the last time I ever give my credit card number to an FBI agent.

You silly. You always have to give an FBI agent someone else's credit card number, that's obvious.

I know of a search engine where you can find one to use!

Re:bonch == TROLL == GreatBunzinni crap flooder

[Anonymous Coward]

Stopped using google because i'd rather see lawyers for father's and mother's then half naked women...sort of figured pricing was being leveraged by google ads, etc...

typical nonsense... also shown a sense of doing the exactly worst thing to do at specific times...etc...(figured it was cookie's, etc...guessed algorythm).

mywot.com and malwarebytes blocked it!

[Anonymous Coward]

Out of curiously, I tried to visit MegaSearch.cc.
1. My 1st block of the site: http://www.mywot.com/en/scorecard/megasearch.cc
2. My 2nd block of the site: My Malwarebytes stopped the site from loading.
I have no desire to visit this site but thought you guys may want to use my apps to help you keep out of trouble.
Just a thought...

Memories

[Anonymous Coward]

Reminds me of a email list that used to send out the addresses of the "Darknet" about 20 years ago. Also why do I have an imagine of Ice T yelling at Keanu Reeves.

Hipster hackers used undergound websites

[Anonymous Coward]

... before they were searchable.

IT'S A CONSPIRACY

[Anonymous Coward]

Funny that this should surface NOW, right before SOPA is voted on.....I smell a conspiracy....Seriously we need another word for conspiracy, mere mention of the word and people think your stark raving mad.

Re:IT'S A CONSPIRACY

[XeroSine]

WHoops! Sorry i thought i was logged in

Hmm

[MeatoBurrito]

Makes me miss astalavista

Re:Hmm

[XeroSine]

Man that place was amazing, such a great search engine. I stayed with altavista and astalavista all the way through college, at least up till Google came around and ruined it all....or was that made it better?

Re:Hmm

[vikingpower]

or was that made it better?

That thing WAS good. Way back in the 90s, you could actually ask an english natural-language question at Altavista, and have a serious chance at getting a response that made sense. Now try THAT at Slashdot in 2012 !

Re:Hmm

[Ash-Fox]

Way back in the 90s, you could actually ask an english natural-language question at Altavista, and have a serious chance at getting a response that made sense

I just asked Google, "What is my IP address?" and it answered "Your public IP address is..." with my IP address.

Did I win a cookie?

Re:Hmm

[dotancohen]

Makes me miss astalavista

Still there!
http://astalavista.box.sk/

Re:Hmm

[Anonymous Coward]

Parent said *ASTAlavista* - it was a "hacking" search engine

Re:Hmm

[mcgrew]

I ask natural language questions at slashdot all the time, and almost always get good answers... from real humans. Which was how AltaVista worked. They didn't use web crawlers, they had humans picking sites. I had a hell of a time getting my site listed with them, although I finally did.

Infoseek was far better, but still not a Google.

Re:Hmm

[Anonymous Coward]

I believe it was hack.box.astalavista.com

Re:Hmm

[Anonymous Coward]

Parent said *ASTAlavista* - it was a "hacking" search engine

If I could upvote you I would. Other commenters are idiots.

Re:Hmm

[Tyrannosaur]

Yes. A tracking cookie.

Othernets are a good idea now

[symbolset]

It doesn't look like these guys plan to give up. Eventually the furor will die down and these bastards will get their way. We can't shut down the Internet to protest every day. The idea is to have a tech solution ready before then. IPV6 should help. We have about 3 months to engineer a resilient, fault-tolerant congress-proof Othernet. Hopefully the Right People are all over this, and a solution will come in time to save us from the CNN'ification of the interwebs. I'm really not looking forward to getting my Internet through a VPN to Vanuatu. The ping times totally suck.

Tips from the master

[Anonymous Coward]

One area where you went wrong is ending your posts with a command to mod the posts down. Slashdotters hate being told what to do. Also, you're mentioning corporations and PR too much without providing any details, so it comes off like random vengefulness, which immediately gets downmods. In addition, your premise is flimsy because the bonch account is perceived as pro-Apple, not pro-Microsoft.

You also need to preview your posts more. You keep getting HTML formatting wrong.

See who's searching for YOUR credit card number

[Anonymous Coward]

More importantly, now there's one place where you can enter your credit card number and see who all has been stealing it.

Here's what I'm getting from this article...

[brennanw]

... indentity theives have to create private accounts in cyber crime stores. o_O

When they're buying their batch of stolen credit card numbers, probably with another stolen credit card number, does the store then steal the stolen credit card number and start using it themselves? Which they might then add to the next batch of stolen credit card numbers... which the identity thief might then buy back the next time he buys a new batch of stolen credit card numbers...

... it's the cycle of crime!

Re:Here's what I'm getting from this article...

[sourcerror]

Yo dawg, I herd you liek stolen cred cards!

Sweet

[proverbialcow]

Now there's a companion to the 'Facebook of pr0n' I keep reading about on the...library.

Google

[jhon_smith12]

The most informative news that i find and i am interested to know more about google. uswebauthority

baby

[alienzed]

i shall return

Just like Google?

[CheerfulMacFanboy]

So they will collect all kind of info about you and sell it to their real customers.

Fuck natural language searches

[Anonymous Coward]

As someone who has been using the internet since before thw www existed (and used Google as early as its second prototype in 1998 and ever since), as well as many other search engines before Google was created (Lycos, Hotbot, Altavista and many, many others) I can say definitively that Google is the success that is today BECAUSE Altavista (note: the op said astalavista, which I think was a search engine aggregator) sucked so badly. In the late 90's, you could only count on an index update on Altavista every 6 fucking months or so! Abd Altavisra was the best of a bad group.

Altavista had some good search options, like stemwords and wildcards and the "near" operator, but its database was a dead pile of shit. It wasn't even steaming. Alravista was good idea in its earlt days, but Digital Equipment (who ownes it at the time) starved it for capital. They were on their downward slide with their hideously overpriced and unbderperfroming Vaxes and uVaxes anyway and they were starved for cash becuae they were arrogant and turbed their noses the internet. hey were pushing big iron and Vaxnet, baby, and they were goiing to tell the world where to go.

Sorry, but fuck natural language searches - thet're for the technically incomperant. If you can't formulate successful Google searches without the anthropomorphizing the seaech, the problem is with YOU, not Google.

I hope that the pedants can live with the spelling

[Anonymous Coward]

errors. I hit submit instead of preview.

If you don't like it, complain to your inflatable dolls.

Need me some stolen credit cards.

[Nyder]

Now let me pay for it with this credit card number. It's real, really. I wouldn't rip you off, sir!

Is this another Kimble scam?

[Anonymous Coward]

Kim Schmitz, aka "Kimble," the snake-oil "hacker" has a thing for the word "mega." He had a custom-built "Megacar," is rumoured to be the one behind "Megaupload.com." And now we have another one, "megasearch."

Attrition.org has a nice dossier on this phoney baloney hacker. Why people keep falling for his scams is beyond me.

Re:Is this another Kimble scam?

[Anonymous Coward]

At least his favorite band is Megadeth, so he can't be all bad.

Re:Is this another Kimble scam?

[3.5 stripes]

Swizz Beats is the Megauploads CEO..

Dodgy

[Anonymous Coward]

I'm not going to give my cc to a dodgy website to test it for possible fraudulent behaviour

Re:bonch is a shill sockpuppet Re:"Underweb"

[Toonol]

He's certainly a problem poster, and is doing a pretty respectable job of completely ruining slashdot; but I'm not getting the pro-microsoft angle from him. He's more of an Apple nutjob. Irrationally anti-google, true, and obviously does use multiple accounts.

I hope the slashdot editors are noticing how they're being gamed by this guy. It's costing them readers. If bonch and similar problems aren't fixed, I'm probably going to stop visiting here.

Google for Stolen Data

[Anonymous Coward]

So their company motto is "Be Evil?"

Re:bonch is a shill sockpuppet Re:"Underweb"

[tehcyder]

Amusingly though, as you seem to be posting this every time bonch posts anything, you now look like a troll bot yourself.

Re:bonch == TROLL == GreatBunzinni crap flooder

[Anonymous Coward]

Stopped using google because i'd rather see lawyers for father's and mother's then half naked women...

I would just take the half naked women first and skip the lawyers. What does viewing half naked women after lawyers have to do with anything, anyway?

Oh no, "anonymity tools"!

[Anonymous Coward]

From TFS:

...an array of dodgy goods and services, from stolen credit card numbers to identity information and anonymity tools.

Nice how "anonymity tools" are lumped in with the truly nefarious stuff. If it is an FBI (or whatever) honeypot, that would fit, as they don't want citizens to have access to any kind of anonymity. After all, if you have nothing to hide...

- T

Re:bonch is a shill sockpuppet Re:"Underweb"

[ForgedArtificer]

Don't let the door hit you.

Pretty much nobody on the internet cares if you threaten to stop reading their site. Slashdot is no different.