opolympichacking e o ocaso do hacktivismo

Internet’s fallen heroes

#OpOlympicHacking e o ocaso do hacktivismo Anchises Moraes @anchisesbr @garoahc @BSidesSP @CSAbr @RSAFraud

Agenda

Olimpíadas: 05 a 21 Ago.

Paralimpíadas: 07 a 18 Set.

2016 Rio Summer Olympics

Fonte: https://www.rio2016.com/en/news/rio-2016-the-olympic-games-in-numbers

205 Delegações

11.303 Atletas

Rio 2016 – Infraestrutura de TI

12 Datacenters

100k Dispositivos de rede

Fonte: Rio 2016 Committee

850 Servidores

1.4Pt Tráfego de rede

1.2bi Page views

Fonte: ONU

Fonte: Agência Brasil

Primeiros protestos

Fonte: https://www.facebook.com/AnonBRNews/photos/a.286106798104849.59790.276935342355328/995108207204701/?type=3&theater

Primeiros protestos

Fonte: Facebook

Primeiros protestos


Ago. 05 – Cerimônia de Abertura


5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Fonte: RSA

Canal oficial da #OpOlympicHacking no IRC

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

• Lista de alvos da

#OpOlympicHacking

• Envolvidos em

escândalos de

corrupção

• Governo

• Site oficial Rio2016

• Comitê Olímpico

Fonte: http://pastebin.com/2DvKm0SK

“Hello Rio de Janeiro. We know that many have realized how harmful it was (and still is)

the Olympic Games in the city. The media sells the illusion that the whole city celebrates

and commemorate the reception of tourists from all over the world, many of them

attracted by the prostitution network and drugs at a bargain price. This false happiness

hides the blood shed in the suburbs of the city, mainly in the favelas thanks to countless

police raids and military under the pretext of a fake war. Poverty is spreading throughout

the city, forcing entire families to leave their homes and traditional neighborhoods on

account of high prices of rent and / or removals made by a corrupt city hall and serves

only the wishes of the civil construction. We already manifested in other communications

our repudiation to the realization of megaevents in the middle of the glaring social

inequalities in this country. Still, even after so many words, so many manifestos or

protests on the streets (all always fully supervised by repression, if not repressed with

brutal violence) looks like the goverment will continue ignoring the voices of their own

people. Therefore, we will continue with our operations to unmask the numerous

arbitrary actions of those who are state and therefore its own population enemies.”

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

#OpOlympicHacking Video Manifesto

Fonte: https://www.youtube.com/watch?v=nftyljZQTf8

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Fonte: RSA

• Ferramenta de

DDoS

“opolympddos”

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Fontes: https://twitter.com/AnonBRNews/status/761589130346323970 https://twitter.com/mcaddosteam/status/761602706708373504

https://twitter.com/AnonBRNews/status/761711820226912256

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Fonte: https://www.facebook.com/AnonBRNews/photos/a.286106798104849.59790.276935342355328/1044351235613731/?type=3

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Fonte: https://twitter.com/anonopsbrazil/status/762687492013318144 https://twitter.com/anonopsbrazil/status/762704370635014145

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Fonte: https://twitter.com/AsorHackTeam/status/764106532124491780

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Fonte: https://twitter.com/anonopsbrazil/status/765280152284790785

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Fonte: https://twitter.com/anonopsbrazil/status/765627202562031617

Resumo dos Ataques

Fonte: Arbor, Rio 2016 Committee

12 bi Log Records

50milhões

Alertas de segurança

30milhões

Ataques bloqueados

540Gbps

DDoS Attack (Arbor)

Resumo dos Ataques

16

alvos

Qual a

relevância?

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Cadê os

gringos?

5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Podemos usar a

internet para

manifestar nossas

preocupações e

opiniões politico-

sociais?

Picture source: sxc.hu

Se a comunidade de

segurança não

assumir esse papel,

alguém vai fazer !!!

Fonte: http://www.camara.gov.br/proposicoesWeb/prop_mostrarintegra?codteor=1402571&filename=PL+3357/2015

Fonte: http://www.camara.gov.br/proposicoesWeb/prop_mostrarintegra?codteor=1362667&filename=PL+2390/2015

OBRIGADO @anchisesbr @garoahc @BSidesSP @CSAbr @RSAFraud

Para saber mais • http://anchisesbr.blogspot.com.br/2016/08/seguranc

a-opolympichacking-e-o-ocaso-do.html

• http://anchisesbr.blogspot.com/2016/08/seguranca-opolympichacking.html

• http://anchisesbr.blogspot.com.br

• http://www.slideshare.net/anchises

• https://blogs.rsa.com/major-events-and-hacktivism-opolympichacking/