{"id":181427,"date":"2019-01-02T06:32:06","date_gmt":"2019-01-02T06:32:06","guid":{"rendered":"http:\/\/www.thetruthseeker.co.uk\/?p=181427"},"modified":"2019-01-04T07:16:06","modified_gmt":"2019-01-04T07:16:06","slug":"hackers-threaten-to-dump-insurance-files-related-to-911-attacks","status":"publish","type":"post","link":"https:\/\/www.thetruthseeker.co.uk\/?p=181427","title":{"rendered":"Hackers Threaten to Dump Insurance Files Related to 9\/11 Attacks"},"content":{"rendered":"<h1 style=\"text-align: center;\">Joseph Cox \u2013 Motherboard Dec 31, 2018<\/h1>\n<div id=\"attachment_139671\" style=\"width: 550px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/www.thetruthseeker.co.uk\/wp-content\/uploads\/2016\/09\/wtc-twin-towers-burn.jpg\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-139671\" class=\"wp-image-139671\" src=\"https:\/\/www.thetruthseeker.co.uk\/wp-content\/uploads\/2016\/09\/wtc-twin-towers-burn-1024x768.jpg\" alt=\"World Trade Center twin towers burn. Click to enlarge\" width=\"540\" height=\"405\" srcset=\"https:\/\/www.thetruthseeker.co.uk\/wp-content\/uploads\/2016\/09\/wtc-twin-towers-burn-1024x768.jpg 1024w, https:\/\/www.thetruthseeker.co.uk\/wp-content\/uploads\/2016\/09\/wtc-twin-towers-burn-300x225.jpg 300w, https:\/\/www.thetruthseeker.co.uk\/wp-content\/uploads\/2016\/09\/wtc-twin-towers-burn.jpg 1368w\" sizes=\"(max-width: 540px) 100vw, 540px\" \/><\/a><p id=\"caption-attachment-139671\" class=\"wp-caption-text\">World Trade Center twin towers burn. Click to enlarge<\/p><\/div>\n<p><span style=\"color: #ccffff;\">On Monday, New Year\u2019s Eve, a hacker group announced it had breached a law firm handling cases related to the September 11 attacks, and threatened to publicly release a large cache of related internal files unless their ransom demands were met.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">The news is the latest public extortion attempt from the group known as The Dark Overlord, which has previously <span style=\"text-decoration: underline;\"><strong><a style=\"color: #ccffff; text-decoration: underline;\" href=\"https:\/\/motherboard.vice.com\/en_us\/article\/ae5w7a\/meet-the-hackers-holding-netflix-to-ransom\">targeted a production studio working for Netflix<\/a><\/strong><\/span>, as well as a host of medical centres <span style=\"text-decoration: underline;\"><strong><a style=\"color: #ccffff; text-decoration: underline;\" href=\"https:\/\/motherboard.vice.com\/en_us\/article\/53dq8k\/hackers-claim-theft-of-data-from-gorilla-glue\">and private businesses<\/a> <\/strong><\/span>across the United States. The announcement also signals a slight evolution in The Dark Overlord\u2019s strategy, which has expanded <strong><a style=\"color: #ccffff;\" href=\"https:\/\/motherboard.vice.com\/en_us\/article\/qkjzpx\/how-a-hacker-is-gaming-the-media-to-extort-his-victims\">on leveraging the media<\/a><\/strong> to exert pressure on victims, to now distributing its threats and stolen data in a wider fashion.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">In its announcement published on Pastebin, The Dark Overlord points to several different insurers and legal firms, claiming specifically that it hacked Hiscox Syndicates Ltd, Lloyds of London, and Silverstein Properties.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">\u201cHiscox Syndicates Ltd and Lloyds of London are some of the biggest insurers on the planet insuring everything from the smallest policies to some of the largest policies on the planet, and who even insured structures such as the World Trade Centers,\u201d the announcement reads.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">It is unclear what exact files the group has stolen, but it is trying to capitalize on conspiracy theories around the 9\/11 attacks.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">\u201cWe&#8217;ll be providing many answers about 9.11 conspiracies through our 18.000 secret documents leak,\u201d the group <span style=\"text-decoration: underline;\"><strong><a style=\"color: #ccffff; text-decoration: underline;\" href=\"https:\/\/web.archive.org\/web\/20181231222357\/https:\/\/twitter.com\/tdo_h4ck3rs\/status\/1079803540472705024\">tweeted on Monday<\/a><\/strong><\/span>.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">A spokesperson for the Hiscox Group confirmed to Motherboard that the hackers had breached a law firm that advised the company, and likely stolen files related to litigation around the 9\/11 attacks.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">\u201cThe law firm\u2019s systems are not connected to Hiscox\u2019s IT infrastructure and Hiscox\u2019s own systems were unaffected by this incident. One of the cases the law firm handled for Hiscox and other insurers related to litigation arising from the events of 9\/11, and we believe that information relating to this was stolen during that breach,\u201d the spokesperson wrote in an email.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">\u201cOnce Hiscox was informed of the law firm\u2019s data breach, it took action and informed policyholders as required. We will continue to work with law enforcement in both the UK and US on this matter,\u201d they added. Lloyds of London did not respond to a request for comment.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">The hacking group published a small set of letters, emails and other documents that mention various law firms, as well as the Transport Security Administration (TSA) and Federal Aviation Administration (The TSA could not provide a statement in time for publication, and the FAA told Motherboard in an email it was investigating.) Those documents themselves appear to be fairly innocuous, but the group says it may release more.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">In its extortion note, The Dark Overlord included a link for a 10GB archive of files it allegedly stole. The group also provided a link to this archive to Motherboard before publishing its announcement. The cache is encrypted, but the hackers are threatening to release the relevant decryption keys, unlocking different sets of files at a time, unless the victims pay the hackers an undisclosed ransom fee in Bitcoin.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">\u201cPay the fuck up, or we&#8217;re going to bury you with this. If you continue to fail us, we&#8217;ll escalate these releases by releasing the keys, each time a Layer is opened, a new wave of liability will fall upon you,\u201d the extortion note reads.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">The Dark Overlord is also claiming to be offering to sell the data on a dark web hacking forum, and is attempting to blackmail individuals who may be included in the documents themselves.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">\u201cIf you&#8217;re one of the dozens of solicitor firms who was involved in the litigation, a politician who was involved in the case, a law enforcement agency who was involved in the investigations, a property management firm, an investment bank, a client of a client, a reference of a reference, a global insurer, or whoever else, you&#8217;re welcome to contact our e-mail below and make a request to formally have your documents and materials withdrawn from any eventual public release of the materials. However, you&#8217;ll be paying us,\u201d the group\u2019s post reads.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">As The Dark Overlord\u2019s announcement notes, the breach itself was <span style=\"text-decoration: underline;\"><strong><a style=\"color: #ccffff; text-decoration: underline;\" href=\"http:\/\/www.globallegalpost.com\/big-stories\/us-law-firm-hack-hits-global-insurer-15490236\/\">previously reported in vague terms<\/a><\/strong><\/span> by a specialist legal publication, and Hiscox Group pointed Motherboard to the firm\u2019s <span style=\"text-decoration: underline;\"><strong><a style=\"color: #ccffff; text-decoration: underline;\" href=\"https:\/\/www.hiscoxgroup.com\/news\/press-releases\/2018\/12-04-18\">own April 2018 announcement of a data breach<\/a><\/strong><\/span>.<\/span><\/p>\n<p><span style=\"color: #ccffff;\">\u201cHiscox recently learned of an information security incident affecting a specialist law firm in the US that provided advice to Hiscox or its policyholders on some of its US commercial liability insurance claims. The incident involved illegal access to information stored on the law firm\u2019s server, which may have included information relating to up to 1,500 of Hiscox\u2019s US-based commercial insurance policyholders,\u201d that earlier announcement reads.<\/span><\/p>\n<p><a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/yw79k5\/hacker-group-threatens-dump-911-insurance-files-dark-overlord\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>On Dec 31, 2018 a hacker group calling itself Dark Overlord revealed it had breached a law firm handling 9\/11 cases and threatened to publicly release sensitive info<\/p>\n","protected":false},"author":39262,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[32,48],"tags":[],"class_list":["post-181427","post","type-post","status-publish","format-standard","hentry","category-September_11","category-Unreported_News"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/181427","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=\/wp\/v2\/users\/39262"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=181427"}],"version-history":[{"count":4,"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/181427\/revisions"}],"predecessor-version":[{"id":181431,"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/181427\/revisions\/181431"}],"wp:attachment":[{"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=181427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=181427"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thetruthseeker.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=181427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}