opolympichacking e o ocaso do hacktivismo
TRANSCRIPT
Internet’s fallen heroes
#OpOlympicHacking e o ocaso do hacktivismo Anchises Moraes @anchisesbr @garoahc @BSidesSP @CSAbr @RSAFraud
Agenda
Olimpíadas: 05 a 21 Ago.
Paralimpíadas: 07 a 18 Set.
2016 Rio Summer Olympics
Fonte: https://www.rio2016.com/en/news/rio-2016-the-olympic-games-in-numbers
205 Delegações
11.303 Atletas
Rio 2016 – Infraestrutura de TI
12 Datacenters
100k Dispositivos de rede
Fonte: Rio 2016 Committee
850 Servidores
1.4Pt Tráfego de rede
1.2bi Page views
Fonte: ONU
Fonte: Agência Brasil
Primeiros protestos
Fonte: https://www.facebook.com/AnonBRNews/photos/a.286106798104849.59790.276935342355328/995108207204701/?type=3&theater
Primeiros protestos
Fonte: Facebook
Primeiros protestos
Fonte: https://www.facebook.com/AnonBRNews/photos/a.286106798104849.59790.276935342355328/1043958138986374/?type=3&theater
Ago. 05 – Cerimônia de Abertura
Fonte: https://www.facebook.com/AnonBRNews/photos/a.286106798104849.59790.276935342355328/1043958138986374/?type=3&theater
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Fonte: RSA
Canal oficial da #OpOlympicHacking no IRC
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
• Lista de alvos da
#OpOlympicHacking
• Envolvidos em
escândalos de
corrupção
• Governo
• Site oficial Rio2016
• Comitê Olímpico
Fonte: http://pastebin.com/2DvKm0SK
“Hello Rio de Janeiro. We know that many have realized how harmful it was (and still is)
the Olympic Games in the city. The media sells the illusion that the whole city celebrates
and commemorate the reception of tourists from all over the world, many of them
attracted by the prostitution network and drugs at a bargain price. This false happiness
hides the blood shed in the suburbs of the city, mainly in the favelas thanks to countless
police raids and military under the pretext of a fake war. Poverty is spreading throughout
the city, forcing entire families to leave their homes and traditional neighborhoods on
account of high prices of rent and / or removals made by a corrupt city hall and serves
only the wishes of the civil construction. We already manifested in other communications
our repudiation to the realization of megaevents in the middle of the glaring social
inequalities in this country. Still, even after so many words, so many manifestos or
protests on the streets (all always fully supervised by repression, if not repressed with
brutal violence) looks like the goverment will continue ignoring the voices of their own
people. Therefore, we will continue with our operations to unmask the numerous
arbitrary actions of those who are state and therefore its own population enemies.”
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
#OpOlympicHacking Video Manifesto
Fonte: https://www.youtube.com/watch?v=nftyljZQTf8
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Fonte: RSA
• Ferramenta de
DDoS
“opolympddos”
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Fontes: https://twitter.com/AnonBRNews/status/761589130346323970 https://twitter.com/mcaddosteam/status/761602706708373504
https://twitter.com/AnonBRNews/status/761711820226912256
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Fonte: https://www.facebook.com/AnonBRNews/photos/a.286106798104849.59790.276935342355328/1044351235613731/?type=3
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Fonte: https://twitter.com/anonopsbrazil/status/762687492013318144 https://twitter.com/anonopsbrazil/status/762704370635014145
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Fonte: https://twitter.com/AsorHackTeam/status/764106532124491780
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Fonte: https://twitter.com/anonopsbrazil/status/765280152284790785
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Fonte: https://twitter.com/anonopsbrazil/status/765627202562031617
Resumo dos Ataques
Fonte: Arbor, Rio 2016 Committee
12 bi Log Records
50milhões
Alertas de segurança
30milhões
Ataques bloqueados
540Gbps
DDoS Attack (Arbor)
Resumo dos Ataques
16
alvos
Qual a
relevância?
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Cadê os
gringos?
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
Podemos usar a
internet para
manifestar nossas
preocupações e
opiniões politico-
sociais?
Picture source: sxc.hu
Picture source: sxc.hu
Se a comunidade de
segurança não
assumir esse papel,
alguém vai fazer !!!
Fonte: http://www.camara.gov.br/proposicoesWeb/prop_mostrarintegra?codteor=1402571&filename=PL+3357/2015
Fonte: http://www.camara.gov.br/proposicoesWeb/prop_mostrarintegra?codteor=1362667&filename=PL+2390/2015
OBRIGADO @anchisesbr @garoahc @BSidesSP @CSAbr @RSAFraud
Para saber mais • http://anchisesbr.blogspot.com.br/2016/08/seguranc
a-opolympichacking-e-o-ocaso-do.html
• http://anchisesbr.blogspot.com/2016/08/seguranca-opolympichacking.html
• http://anchisesbr.blogspot.com.br
• http://www.slideshare.net/anchises
• https://blogs.rsa.com/major-events-and-hacktivism-opolympichacking/