Outcast Life

A Life Of An Outcast Person

Medical student, computer geek, web security enthusiast, a person who's always in pursuit of happiness. You might call me radical but that's ME, so follow with caution.

PAGES About Feedback

Rooting T he Anonymous : Part 1

If you know about Anonymous hackers, t he cyber anarchist s, Sri Lanka is no except ion wit h our own Anonymous Sri Lanka (@anonymouslk) hackers, t hey are famous for t heir DNS spoofing
PDFmyURL.com

at t acks on Facebook, Apple, Microsoft , Symant ec and many more websit es. Credit s : This is not my own work but a t eam work t hat includes @ipv10, and @g2kev which I t hink are t he best in t he count ry in infosec work

T he beginning of the investigation.

Today t his begins a series of post s where I publish t he result s of a mont h long invest igat ion in t o finding AnonymousLK, were going t o publish about t he members of t he AnonymousLK one by one. Click to see the enlarged images, so theyll be more clear. T here is no t hing illegal regarding t he info rmat io n were publishing, all t he dat a, pict ures and everyt hing are publicly accessible o n t he int ernet which can be fo und by a simple go o gling.

http://twitter.com/anonymouslk

Ano nymo usLK a t eam o f 4 peo ple : 1. HackerzMafia t he leader and t he person most of t he t ime behind Twit t er which were going t o root now. 2. Zont a 3. ZeroThunder 4. TX
PDFmyURL.com

On t heir Facebook profile pict ure t hey show an email address t o cont act t hem, t he email address is ano nymo ussrilanka@gmail.co m. Which is also t he email address of t heir Facebook account .

T he link between the emails.

The first t hing we did was t o reset t he password of t he email account , no t t o hack t he acco unt , but t o get an idea of t he associat ed cont act info t hat is used t o send t he password reset code/link. When reset t ing anonymoussrilanka@gmail.com account you get somet hing like t his, You can see t he

Password reset form for anonymoussrilanka@gmail.com

anonymoussrilanka@gmail.com account is linked wit h an email wit h 12 digit s t hat begins wit h h
PDFmyURL.com

and ends in an a. and a mobile phone number ending wit h 84. Most people have writ t en t ime and t ime again t hat Anonymouslk is a guy called Dr Sameera De Alwis, a failed wanna be t ech guy who got screwed really bad. So we did a small googling about Dr Sameera De Alwis and we found an old post he made on a forum t alking about his failed xaurora browser Link t o t he post : ht t p://www.skyscrapercit y.com/showt hread.php?p=21993769 . There Sameera De Alwis is giving his cont act informat ion, not e t he email address :

http://www.skyscrapercity.com/showthread.php?p=21993769

hackerzmafia@gmail.co m. A 12 digit email address, t hat begins wit h a h and ends wit h a. So we decided t o check t he associat ed cont act informat ion for t he hackerzmafia@gmail.co m email account , and it comes up like t his,

PDFmyURL.com

reset password form for hackerzmafia@gmail.com

There you can also see t hat t he email account is associat ed wit h a number ending wit h 84 same as t he anonymoussrilanka@gmail.com email account . And in t he pict ure showing Sameera De Alwiss cont act informat ion t here is anot her gmail account belonging t o him, dr.sameera.de.alwis@gmail.co m, so we decided t o reset t he password for t hat email account and t his comes up,

Password reset form for dr.sameera.de.alwis@gmail.com

And t he email account dr .sameera.de.alwis@gmail.com email account is also connect ed t o a mobile number ending in 84. We can see t hat anonymoussrilanka@gmail.com, hackerzmafia@gmail.com, dr .sameera.de.alwis@gmail.com all t hese emails are connect ed t o a
PDFmyURL.com

mobile number ending in 84. So we can assume t hat all t hree email account s are connect ed t o t he same mobile number Which means t he email anonymoussrilanka@gmail.com is creat ed by non . ot her t han Sameera De Alwis himself also known as HackerzMafia. Sameera De Alwis also owns a websit e called hackimpact .com,

www.ewhois.com/hackimpact.com/

If you go t o t he cont act page of hackimpact .com youll get somet hing like t his.

http://hackimpact.com/contact-us
PDFmyURL.com

Weve censored t he name because it belongs t o a lawyer probably Sameeras lawyer however if , , you see t he cont act number of t he websit e owned by Sameera De Alwis (hackimpact .com) t he number is : 077-2516084, well well well what have we here, a number ending wit h 84 t hat is on Sameera De Alwis, so we can assume t hat all t he anonymoussrilanka@gmail.com, dr .sameera.de.alwis@gmail.com and hackerzmafia@gmail.com are linked wit h t he number 077, 2516084.

T he T yping style of AnonymousLK and Sameera De Alwis.

Bot h Anonymouslk and Sameera has a common t yping st yle t hat you can see from t ime t o t ime. For example,

See the underlines phrase..

See t he phrase underlined red, Freedo m fo r all man kind o n eart h, now where have we seen t hat before?

PDFmyURL.com

http://www.skyscrapercity.com/showthread.php?p=21993769

Sameera has used t he very same phrase, Freedo m fo r all man kind o n eart h on his online forum post , and May peace prevail is anot her phrase t hat is being commonly used by Sameera, or should I say Anonymouslk This was t aken from an old blog post made by Sameera De Alwis,

http://tributesrilanka.wordpress.com/2009/09/17/6/

Sameera has used t he exact phrase again.

Who is Sameera De Alwis?

PDFmyURL.com

The guy who created AnonymousLK, Sameera De Alwis

Sameera De Alwis was a wanna be t ech guy, who reversed engineered a popular browser and released it as his own, collect ion money asking for furt her development of t he browser however , people t ook not ice of t his and Sameera had t o st op his browsing advent ure, lost his job as t he head of IT securit y at Maharaja INC and lost his job as a Lect urer of SLIIT. T his art icle gives all t he info mat io n abo ut t he life o f Saeera De Alwis : ht t p://sameeradealwis.wordpress.com/2009/06/16/dr-sameera-de-alwis-can-be-t rust ed/ Sameeras Hi5 pro file where he po st ed pho t o s o f his dead mo t her and her ashes : ht t p://www.hi5.com/hackerzmafia A let t er writ t en by Dr Sameera De Alwis aft er t he t rut h abo ut xAuro ra bro wser was expo sed : english.kalingasblog.com/2008/10/xaurora-t he-fake-web-browser xAuro ra get t ing caught o f being a fake bro wser : ht t p://forum.maxt hon.com/viewt hread.php?t id=74416&ext ra=&page=1 XAuro ra Bro wser Blo g : xaurora.wordpress.com

Final conclusion
PDFmyURL.com

So t he final conclusion is t hat Sameera De Alwis st art ed t he AnonymousLK account s and he also recruit ed t he ot her hackers named Zont a, ZeroThunder and TX. This is t he reason for t he change of language when t weet ing, Sameera is t he one t weet ing wit h bad words while Zont a is t he one who t weet s normally. Hiding your ip is not enough AnonymousLK, In prison the inmates will root you Do wn. Ext ernal links : Sameera De Alwiss do t net fo rum pro file HackerzMafia : dot net forum.lk/forums/p/10216/35030.aspx
Share t his: Like t his:
0

T ango

Be the first to like this po st.

May 11, 2012 by Rukshan Categories: Anonymous, Cyber War, Infosec, Internet, Techno | Tags: Anonymous, cyber security, hacking, infosec, Internet, Sameera De Alwis, Technology, Zonta | Leave a comment

NoLimit Is Not Serving Harmful Toffees, The Trut h Is Out There.

Leave a Reply

PDFmyURL.com

Enter your comment here...

Search

RSS - Posts

FOLLOW BLOG VIA EMAIL Enter your email address to follow this blog and receive notifications of new posts by email. Join 16 other followers

Follow

ME ON T WIT T ER @shareek_hy but sometimes it's cool isn't it? :D 13 hours ago
Fo llo w

ARCHIVES May 2012 (1) April 2012 (6) March 2012 (6)
PDFmyURL.com

February 2012 (6) January 2012 (11)

Blog at WordPress.com. | Theme: Ari by Elmastudio.

PDFmyURL.com