Syrian Electronic Army Exposed

Hy Friends .. As i promised you to prove that the infos shared by FBI are wrong

So i will share the full infos about SEA

First of all Lets Talk about The History of SEA

Hmm to know the full story i will let you with these screens by A friend named "Ravan" (Remember this name ;) )

Hmm Interesting :D .. Now let talk about FBI Report

"All three alleged SEA members were using Gmail and Facebook accounts to coordinate and pass around stolen data. The Feds managed to track their activities after obtaining court orders to search their online accounts, which helped them identify the hackers"

And This is totally wrong because everybody know that SEA members use IRC to chat not gmail or any social media ...

Another thing even if these guys in the FBI report logged to Th3Pr0 and The Shadow Email it dont mean that they are the real shadow and the pro :) .. simply because SEA members share there logins and password with the other members in the team and here is a little proof ;)

Link Of The Tweet : https://twitter.com/ViCt0r_SEA/status/214774880057565186

Now Lets Talk About The Members Of SEA

Lets Star With the Famous One "Th3Pr0"

The First thing You should hear about is that th3pr0 is not a syrian :) u may be shocked but this is the truth and here is the proof

One Day i got a msg in my FB from a guy that were using the name "warez duck" as i remember and he claimed to be th3pr0 and to be moroccan and he asked me why i put SEA in my homepage deface

and like all of you i started laughing and thinking he is just a lammer that claim to be th3pr0 and looking for fame

but this guy Gave me many proof that prove that he is th3pr0

PS : The Acc That he used to talk to me was with no friends - no posts - and just created

And This Was The First Proof

created

As You see he gave me the logins of leak subdomain as a proof that he is the real pro and in the same time he was talking about the deface of TG (when they defaced leak.sea.sy) .. of course he wasn't scared if i changed the dns and hijack leak.sea.sy because he know im not this kind of guys and because he was online so if i changed the dns he will get it (he changed the pass few minutes later)

The Second Proof Was A Pic from Microsoft twitter

I talked to him for long time and as i expeted he look like the real pro (A good hacker - and he can reply any question i ask about sea - and did anything i ask him for to prove that he is th3pr0)

And About How SEA members are working here is his answer :)

As you see these guys are just a kind of defacers from many countries that hack for syria vs some money donated to them by a guy from bachar al assad family :)

And if we go back to the dox shared by "intelcrawler investigation" about SEA you can see that the got the same conclusion (Th3Pr0 is moroccan) .. You can find there full article here : (http://www.slideshare.net/RDSWEB/intel-crawler)

Now lets focus on another message sent to me by th3pr0

OH Oh Oh But wait !! Ravan (The guy who told me the full story of SEA is moroccan too :o )

Yeah wait .. no lets go to a message sent by ravan to mee when i asked him about his old nickname

yes ravan = vict0r :) so there is 3 moroccans in SEA (the pro - the shadow - vict0r)

The only syrians in the Team Are (The soul and Hawk and syrian 34gle)

there is a third guy named "TiGER" From KSA (And An old Sec4ever forum member and maybe this is his real name "Talal Qahtani" )

The Rest of members are from (Iran - Yemen - Libanon - India - Iraq )

Now i will tell you another thing :) .. if we take a look to th3pr0 twitter we will found that he is incative since a long time ago .. its simply because Th3Pr0 got kicked out from SEA

its amazing but it might be true "i got this infos from ravan" .. he said also that he was kicked coz he made FB acc without the permission of the Team and he star talking to many moroccan defacers and show them the progress of the team (the same thing he did with me) .. PS : this can be true but maybe its just a lie made by them when they realized that i got there infos

and here is a proof from the discussion between (The Shadow - And Ravan) "he sent me this picture in FB"

as you see this is why Th3Pr0 acc is inactive and this is why SEA isn't able to de more defaces !! Coz there best player is out of the game now !! xD .. PS : 99% ths password of Th3Pr0 twitter acc was changed by the shadow when he kicked the pro from the team

here is another proof that vict0r - shadow - thepro are moroccans

The infos we can get from this pic is that SEA IRC channel name is : "#Underground_SEA"

The IDs Of members are : jp.morgan@xmpp.jp for vict0r and avunit@xmpp.jp for the shadow

And for th3pr0 is leaved hacking now and he is using this fake FB acc now : https://www.facebook.com/100009706728025 (the name and the pic are fake)

Now Let Me Tell you a secret about Th3Pr0 that i got from an old girl he was looking to marry her .. so he told here the full truth about him :) .. this truth is that he can't react to girl just if he put a thing named "strapon" close to a plastic dick in his ass .. it might be as a joke but i swear this is the truth and here is a part of our conversation about that and coz of that he don't married this girl "coz there is no arab girls that can admit to marry a man like that" .. and coz of it too he married an europe girl (christian) maybe coz its normal to marry this kind of men in europe

Ok .. Now Lets See How These guys work :)

The Only Thing I will tell you guys is that behind every deface of SEA there is two possibilities (The Got access to it alone or the bought the target from another underground blackhats)

and one of the biggest targets they bought is "army.mil" because even th3pr0 don't know how they got access to it ;)

Now Forgot that and let's talk about how they got access to big twitters acc alone

First of all you need to know the hacking system used in SEA

The system is when the leaders (The guys who pay them "from assad family" ) chose a target they post it in the IRC room "#Underground_SEA" and then all members work on it .. then the first one who got access to it post the methode he used and he send the infos to the leaders and then they pay them "70% of the price for the member who got it and 30% of the price for the rest of members" .. and if none were able to hack it then they will search someone out of the team able to did that and they will pay him (it easy to find this kind of guys in darknet since it full of old underground blackhats that search for money and don't give a fuck about fame"

Conclusion : SEA members are just Mercenaries that work for money and none of them give a fuck about whats happening in syria ;) they stand with bachar just because he pay them

Now lets talk about the famous Phising methode they made (or maybe they bought the idea too from another one) .. so as you know every big community use a webmail service for example (aljazeera.net) webmail is (https://mail.aljazeera.net) so the idea is easy just go and buy another domain with a close name to your target ;)

Example : for aljazeera.net u can buy a domain with this names (aljaseera.net - aljazera.net - aljjazeera.net - etc ...) then made a phishing page close the webmail home page with the same path - url etcc .. like that (https://mail.aljjazeera.net/owa/auth/logon.aspx?url=https://mail.aljazera.net/owa/&reason=0 or https://mail.aljazeera.net/owa/auth/logon.aspx?url=https://mail.aljazeera.net/owa/&reason=0 or https://mail.aljaseera.net/owa/auth/logon.aspx?url=https://mail.aljazeera.net/owa/&reason=0 etc...

And the last step is easy just send a fake message to an admin (for security issues please update ur pass in this link blablabla etc...) with mailer inbox "using the adress of the support and its done

Its Close to spam .. and here is another proof that this is the only methode used by SEA

this is the phishing page that was used to hack FCBarcelona twitter acc .. coded in spanish and with a url close to the real one

End Of Part I .. Exept in the part II the dox of all members ;) And audios of my phone call with them