DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Cashier Systems Exploited By .c0mrade

Posted on June 22, 2012 by Lee J

.c0mrade has continued to release documents that show attempt to show proof of exploits for major systems, the latest system as titled suggests is the internal access to 1000’s of cashier systems across the world. The document was uploaded to pastebin and contains a few different messages but all come close to the same message, that this data is critical, that c0mrade will be incontact with them to fix the exploit and that he would like this done asap. Message:

c0mrade ; https://www.twitter.com/OfficialComrade : Cashier Systems ; #FreeSaken Hello, world. #FreeSaken ————————————————————————————————— [-] We’re hog-tied, corporate-side, folks. We’re all prosecutable and crucifiable. We’re living in a corporate world. Moreover, the Feds will do anything to get a crack at you, or me. You’ll have to swallow it though, if you pursue the criminal lifestyle, you have to accept the aftermath too. [-] ————————————————————————————————— [+] Subject: Cashier Systems ; Do I have Calamity with the system? No. The only thing holding me back from being ill-minded is the thought of spitefully ruining the lives of millions. It’s a shame, folks. We’re not malevolent, we’re hungry for knowledge. They set us out to be some evil-minded spirits who want to spitefully dread the thoughts of outsiders and possibly even get them infiltrated. It’s far from that, folks. I love you and that’s one more fuck to give. ; I will contact the companies affected next morning. ; Moreover, here is some Cashier System ^logs. I’m sure some of you will get a kick out of this one: ===================================================================== File Link: https://anonfiles.com/file/9e9eaf5016ea241e0cfb8ef3c827e6c3 Password: 2%^$#^$36JDJAKAKDETRHTOHT24%@^254RkakakK2!21!@#$%^&*() ===================================================================== Furthermore, here’s data that transmits through POS/SVR: 06:02:50 AM POS:SVR:TRANSMITTER:192.168.1.1 8885 1122 RETURN=REQMODE=4ACK=CUR_USR=ESTRELLA MARILYN DB_VER=TransightPOS330d1_Hotfix205(20120605)POS_VER=Version 3.30d RVC=PARKVIEW1LOCK STAT=False +++ TAG = 140 06:02:50 AM POS SVR GET ARRIVED UNLOCK_POS=ULCK_POS +++ TAG = 140 06:02:50 AM arqServer M => Every cashier system that runs POS/SVR is at risk. => Every scan is recorded, logged and cleartexted. => Estimations reveal that 1000’s of systems are vulnerable. ; Here’s a quick snippet of how the output looks like: -sorry removed- ————————————————————————————————— ; I’m looking to get this fixed sometime next weak. The only thing holding me back from being ill-minded is the thought of spitefully ruining the lives of millions. It’s a shame, folks. We’re not malevolent, we’re hungry for knowledge. They set us out to be some evil-minded spirits who want to spitefully dread the thoughts of outsiders and possibly even get them infiltrated. It’s far from that, folks. ————————————————————————————————— Bye, world. #FreeSaken #out // www.twitter.com/officialcomrade

So as you can see he is still attempting to do the right thing and get the word across, its just sad that people cant just go to these people and offer help as they are often turned away or laughed at or worse…reported to the police. The release notes and proof of hack also came with a downloadable file from anonfiles which is a compressed 2mb rar file that contains logs from the cashier systems. > Nasir Bin Olu ‏@OfficialComrade@DiabloAnon@Cyber_War_News – Internal Access – 1000’s of Cashier Systems – https://pastebin.com/dF53qWdP

Also .c0mrade has made a pastebin account "BinLaden" that is surely to raise more questions from bigger media. It was announced via twitter with a bit of comedy to. > Nasir Bin Olu ‏@OfficialComrade Here’s a BIN for you guys – https://pastebin.com/u/binladen – brb I’m going to watch some tech movies so I can make myself feel like I have a life.


Related:

  • KT Chief to Resign After Cybersecurity Breach Resolution
  • Cyber-Attack On Bectu’s Parent Union Sparks UK National Security Concerns
  • A business's cyber insurance policy included ransom coverage, but when they needed it, the insurer refused to pay. Why?
  • Before Their Telegram Channel Was Banned Again, ScatteredLAPSUS$Hunters Dropped Files Doxing Government Employees (2)
  • Attorney General James Secures $14.2 Million from Car Insurance Companies Over Data Breaches
  • Months After Being Notified, a Software Vendor is Still Exposing Confidential and Sealed Court Records
Category: Breach Incidents

Post navigation

← UK’s biggest private security company G4S Hacked, Data Leaked by @le4ky
Time line: Attacks by @le4ky →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Washington Post hack exposes personal data of John Bolton, almost 10,000 others
  • Draft UK Cyber Security and Resilience Bill Enters UK Parliament
  • Suspected Russian hacker reportedly detained in Thailand, faces possible US extradition
  • Did you hear the one about the ransom victim who made a ransom installment payment after they were told that it wouldn’t be accepted?
  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Maryland Privacy Crackdown Raises Bar for Disclosure Compliance
  • Lawmakers Warn Governors About Sharing Drivers’ Data with Federal Government
  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.