Information Warfare: Forum Shill Gets Busted Due To Software Bug

Posted: June 12, 2015 in SWIG
Tags: ,

Hacker-Isloate

Some explanation is in order because the source article assumes its readership can read between the lines with Internet savvy. So, back in the first half of 2013 an Internet operative (shill) was exposed due to a bug in Windows Virtual Server remote clipboard management. Instead of copying and pasting some shill text, some remote clipboard error text was posted instead. An astute forum user quickly summarized what he was seeing in the post and took a screenshot before it was deleted. It was determined that the op was with the National Clandestine Service, a branch of the CIA, after some intense googling. Threads regarding the exposed shill were started on two separate forums, Above Top Secret and Godlikeproductions, but were quickly deleted by the administrators.

A Forum Shill gets busted. Something very interesting happened over at GLP March 24th [2013] at 9:28 pm. Something that did not go unnoticed by GLP posters and many others around the interwebz. On page 7 of a thread titled “Medical Type Says Sandy Hook is Total BS”, a user from “Kazakhstan” posted the following:

Re: Medical Type Says Sandy Hook is Total Bullshit

[0x1a970000, 0x1ab00000, 0x27570000>
[rdpclip.exe, “iostatZd15.1”]

you copied a large amount of data onto the clipboard …Do you want to save this data on the clipboard?

User ID: 35850666 Korea
User ID: 36689081 Korea
User ID: 33951304 Kazak
User ID: 36809983 Kazak

N.C.S. logo.jpg

//SECRET
C:\SharePoint012USNCSSAD_Wrkc9inet-N-7339.tx​t
**********************************
REMINDERS —— NOTES
**********************************
Sensitivity Level

Action Code

Team 5.A/
SITE
Location of official Agency folder
None NPRC
Team Contact
Sheila N******

CHECKLIST

Do any of the respondents display the urge to supply information that could be helpful to your mission?

Full Story @ [insanemedia]

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s