User:W1tchkr4ft 00/sandbox/PhinFisher

= Phin Fisher Draft =

Phineas Fisher (Phineus Phisher, Subcowmandante Marcos) is an unidentified anarchist hacktivist who is notable for having hacked targets in the surveillance software industry such as Hacking Team and Gamma International, the ruling party of Turkey, AKP as well as Cayman National Bank. She typically releases a communique with each hack containing information about the breach, technical information in a how-to format, ASCII art, poetry as well as leftist and anarchist propaganda.

The name Phineas Fisher is a play on the name of the spyware name FinFisher created by Gamma International.

AKP hack
PhinFisher claimed responsibility for a Justice and Development Party (AKP) in solidarity with Rojava in the Kurdish–Turkish conflict. Releasing.

Mossos D'Esquadra union attack
In may 2016 Phineas Fisher breached and leaked data from Sindicat De Mossos d'Esquadra (SME), Catalonia's police union, uploading a thirty-nine minute video to YouTube of the attack and a link to a cache of personal data of officers such as full names, addresses, bank accounts and telephone numbers for more than five thousand officers, a quarter of the total force. The attacker also defaced and compromised the SME Twitter page with images of alleged police brutality and images from the documentary Ciutat morta which was claimed to be an inspiration for the attack.

The Minister of the Interior, Jordi Jané i Guasch, stated that the leak "does not compromise the work or investigations of the agents, but does compromise their privacy."

Arrests
In early January 2017 the mossos in conjunction with national police raided and arrested three people in suspicion of the attack, a man in Salamanca, Spain and two in the Sants district of Barcelona. A few hours after the raids were reported in the Spanish press Vice Motherboard reported that they had been in contact with an email address previously associated with Phineas who claimed to be free at the time of contact. f contact.

Mossos attack video: https://vimeo.com/167411059

Bug Bounty
In her 2019 Cayman Bank hack communique, ''Hackback! Una guÃ­a DIY para robar bancos (Hackback! A DIY guide to robbing banks) Phineas offered hackers up to US$100,000 in either of the Bitcoin or Monero cryptocurrencies to carry out acts of hacktivism that lead to public disclosure of documents ' of public interest ' naming it the 'Hacktivist Bug Hunting Program'.'' In the communique Phineas states that "this program is my attempt to make it possible for good hackers to earn a living in an honest way by revealing material of public interest, instead of having to go selling their work to the cybersecurity, cybercrime or business industries.", citing examples of companies to targets such as extraction industries in the Americas, Private Military Contractors, mentioning Blackwater and Halliburton by name as well as operators of private prisons.

In 2020 Phineas claimed to have payed out US$10,000 of her 'Hacktivist Bug Hunting Program' to an anonymous hacker who leaked over two gigabytes of emails and documents from several email accounts belonging to Chilean military personnel, hosted under the name 'Milico Leaks' by Distributed Denial of Secrets. The cache of documents included over three thousand emails and one thousand documents, some related to 'intelligence, finance and international relations '. The Chilean military confirmed the breach in an official document via twitter.

Note2Self: Find link to Milico Leaks, ddossecrets link is down.

Identity
Here discuss the suspicions that Phin is spanish-catalan (likely, almost certain, but not confirmed with actual sources), Russian agent as the dumb yankees think, and other theories by reputable sources.

EOF
- the mining, logging and livestock companies that plunder our beautiful Latin America (and kill land and territory defenders trying to stop them)

- companies involved in attacks on Rojava such as Baykar Makina or Havelsan - surveillance companies such as the NSO group -

war criminals and birds of prey such as Blackwater and Halliburton -

private penitentiary companies such as GeoGroup and CoreCivic / CCA, and corporate lobbyists such as ALEC

Hackback! A DIY guide to robbing banks

https://www.vice.com/en/article/vb5agy/phineas-fisher-offers-dollar100000-bounty-for-hacks-against-banks-and-oil-companies

'Hackback! A DIY guide to robbing banks' (Hackback! Una guÃ­a DIY para robar bancos) Communique released in spanish: Friday, 15 November 2019

https://limn.it/articles/the-public-interest-hack/ written by an interesting Prof. Should examine further

Hacking_Team

Taken from the Gamma Group page:
 * In 2014, Gamma Group was hacked and a 40 Gb dump of information was released detailing Gamma's 'client lists, price lists, source code, details about the effectiveness of FinFisher malware, user and support documentation, a list of classes/tutorials, and much more.' Further details about Gamma's capabilities can be found in the Surveillance Industry Index.


 * Despite this hack and the extent of negative publicity about Gamma's activities, FinFisher was reported to be gaining in popularity around the world with numerous governments.

Sources that can be used:
https://www.vice.com/en/article/vb5agy/phineas-fisher-offers-dollar100000-bounty-for-hacks-against-banks-and-oil-companies Phin's bounty program released with the 'How to rob a bank' release.

https://www.vice.com/en/article/ne8p9b/offshore-bank-targeted-phineas-fisher-confirms-hack-cayman-national-bank Cayman National Hack.

https://www.schillingspartners.com/news-and-opinion/crime-by-another-name---the-rise-of-political-hacktivism 2019

Big Fish, Little Fish, Critical Infrastructure: AnAnalysis of Phineas Fisher and the ‘Hacktivist’Threat to Critical Infrastructure

Audio about Phin, Verified statement relating to the accusations of being a Russian Agent. (note: This accusation is common among the fucking yanks, it should always be taken with a pinch of salt.)

https://www.youtube.com/watch?v=BpyCl1Qm6Xs Viceland article with Her after FinFish and Hacking Team hacks as a 'legally distinct from Kermit' puppet.

Note: Check infosec stuff on bookshelf, but most is probably to old for anything substatial. Access newer books that reference her through libgen if possible.

https://www.ibtimes.co.uk/gamma-international-leaked-data-confirms-uk-spyware-export-bahrain-1460291 Gamma International hack . https://www.vice.com/en/article/78kwke/hacker-phineas-fisher-hacking-team-puppet The Puppet interview. Before AKP, I THINK.

https://www.vice.com/en_uk/article/vb5agy/phineas-fisher-offers-dollar100000-bounty-for-hacks-against-banks-and-oil-companies Bounty source 1.

https://www.vice.com/en_uk/article/wxeykb/phineas-fisher-says-they-paid-dollar10000-bounty-to-person-who-hacked-chilean-military Bounty source 2. another source wrt to bounty is Banks communique.

Communiques of Phin:
https://github.com/Alekseyyy/phineas-philes/blob/master/cayman-english.md - Hackback - A DIY guide to rob banks. - Ceyman hack, 2020.

https://dl.packetstormsecurity.net/papers/attack/hackback-bankrobbing.txt ^mirror2

TODO

 * A paragraph of her attacks against the Spyware companies and fallout
 * About anonymity, guesses as to identity, including farcical Russian accusations and the false claim as to arrested after the Calatlonian (?) Police hack.
 * AKP hack and support for Rojava.
 * Cayman hack
 * Hackback documents.
 * Write about her bounty program.
 * Response from the 'infosec community'.