🔓 Как голландская полиция управляла Hansa, крупнейшим черным рынком дарквеба
На Wired замечательный #longread про тайную операцию "Штык" голландских полицейских, которые взяли под контроль крупную биржу по продаже наркотиков и тайно управляли ей на протяжении 10 месяцев
https://www.wired.com/story/hansa-dutch-police-sting-operation/Там прекрасно все! Цитаты для затравки:
The Dutch police quickly realized that after AlphaBay was shut down, its refugees would go searching for a new marketplace. If their scheme worked, AlphaBay's users would flood to Hansa, which would secretly be under police control.
They rewrote the site's code, they say, to log every user's password, rather than store them as encrypted hashes. They tweaked a feature designed to automatically encrypt messages with users' PGP keys, so that it secretly logged each message's full text before encrypting it, which in many cases allowed them to capture buyers' home addresses as they sent the information to sellers. The site had been set up to automatically removed metadata from photos of products uploaded to the site; they altered that function so that it first recorded a copy of the image with metadata intact.
Hansa offered sellers a file to serve as a backup key, designed to let them recover bitcoin sent to them after 90 days even if the sites were to go down. The cops replaced that harmless text document with a carefully crafted Excel file, says Boekelo. When a seller opened it, their device would connect to a unique url, revealing the seller's IP address to the police. Boekelo says that 64 sellers fell for that trap.
Приятного чтения! ✌️
