Donate for the Cryptome archive of files from June 1996 to the present

8 May 2012

Informancy Industry

An informancy industry provides undercover informant services to governments and corporations by use of multiple identities and nyms on the Internet. They recruit, entrap, sting, and gather evidence for indictment and prosecution. They brag about doing this to invite attack for the purpose of tracing attackers.

The exchanges below are allegedly between a US Special Agent Daniel Porsek, possibly FBI, <2023459771@unknown.email>, and an informant, possibly Jennifer Emick, Backtrace Security <infinitysnake@gmail.com>. These exchanges may be legitimate or leaked as bait.

They exemplify use of informants on the Internet, especially for social media, texting, IRC and open and closed bulletin boards. Several names and nyms mentioned are familiar: Hector "Sabu" Monsegur, Corey "Xyrix" Barnhill aka "Kayla," ("Kayla" also attributed to Ryan Ackroyd), Justin "Null" Perras, Michael "Virus" Nieves, Sam Bowne, "jester," "lugg." Hundreds if not thousands more are active on the Net.

Informants are notoriously unreliable and likely to exaggerate, lie, accuse without substantiation, and claim to be more knowledgable than they are. Some claim to be informants for entertainment, for humor and for invitation to become an actual informant. Some see the role as an easy way for monetary reward, to revenge against an enemy, to escape prosecution, or get a job with the agency running them. Some establish firms to provide services of experts in the trade, assuming variously white, gray and black hatted roles. Annual security conferences are marketing and recruiting frenzies for informants. More insidious are the forums where threats and counterthreats are eloquently hawked by rising stars of duplicitous informancy operating under banner of freedom of information.


http://pastebin.com/qmZc6NC2

Subject: SMS with Special Agent Daniel Porsek
------------------------

From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Fri, Apr 22, 2011 at 3:09 PM
To: infinitysnake@gmail.com


Email dsmithers13@yahoo.com
----------
From: <infinitysnake@gmail.com>
Date: Tue, May 17, 2011 at 8:36 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Looks
----------
From: <infinitysnake@gmail.com>
Date: Tue, May 17, 2011 at 8:37 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Sorry wrong person
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 6, 2011 at 10:58 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


See email..developments
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 7, 2011 at 11:43 AM
To: Special Agent Daniel Porsek <12023459771@unknown.email>


Sent email

----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jun 7, 2011 at 11:45 AM
To: infinitysnake@gmail.com


Got it. Thanks.
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jun 7, 2011 at 11:49 AM
To: infinitysnake@gmail.com


Expecting call. Thanks!
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jun 7, 2011 at 10:25 PM
To: infinitysnake@gmail.com


Keep your ears open for any new intel. Talk tomorrow.
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 9, 2011 at 12:31 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Emailed.
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Thu, Jun 9, 2011 at 12:34 PM
To: infinitysnake@gmail.com


Read it. Thanks. Will call in a minute
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 9, 2011 at 8:22 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


The brzilian twitter followers appear to be compromised computers-kaylas bots
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Thu, Jun 9, 2011 at 8:24 PM
To: infinitysnake@gmail.com


Thx for the info.
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 9, 2011 at 9:53 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Someone posted document from nhs..dated today on pastebin

----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 9, 2011 at 10:05 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


also evidence of possible carding via bitcoin

----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 13, 2011 at 11:13 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Sent email
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Mon, Jun 13, 2011 at 11:13 AM
To: infinitysnake@gmail.com


Thx.
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 13, 2011 at 4:06 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Theyre in the senate.gov site
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 13, 2011 at 4:12 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Nut their pron.com hack was manufactured, I think

----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 14, 2011 at 4:15 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Appears they just lifted half a million from bitcoin?!?
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jun 14, 2011 at 5:38 PM
To: infinitysnake@gmail.com


Wow!
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 14, 2011 at 5:42 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Yeah...apparently this is the second theft...looks like the 'lulz' are cover?
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jun 14, 2011 at 5:45 PM
To: infinitysnake@gmail.com


So not lulz/anon?
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 14, 2011 at 5:46 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Its them.
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 14, 2011 at 5:47 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Almost a million dollars in two days
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 14, 2011 at 6:01 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Also one of the former members of MoD tells me solar is also involved, found 
some relation to wildcardsecurity irc
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 14, 2011 at 6:15 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Might be mining bc via botnet
----------
From: <infinitysnake@gmail.com>
Date: Wed, Jun 15, 2011 at 2:51 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


There are tons more thefts...ia anyone looking into this?
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Wed, Jun 15, 2011 at 2:54 PM
To: infinitysnake@gmail.com


Passed it on. I'm traveling today will call u later tonight.
----------
From: <infinitysnake@gmail.com>
Date: Wed, Jun 15, 2011 at 3:21 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


K, thanks
----------
From: <infinitysnake@gmail.com>
Date: Fri, Jun 17, 2011 at 10:01 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Caseys freaking out hard
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Fri, Jun 17, 2011 at 10:22 PM
To: infinitysnake@gmail.com


Why.
----------
From: <infinitysnake@gmail.com>
Date: Fri, Jun 17, 2011 at 10:24 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Everyone is awre of his identity
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Fri, Jun 17, 2011 at 10:24 PM
To: infinitysnake@gmail.com


What I figured. Thx
----------
From: <infinitysnake@gmail.com>
Date: Fri, Jun 17, 2011 at 10:41 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Some wag called his school...eesh
----------
From: <infinitysnake@gmail.com>
Date: Sun, Jun 19, 2011 at 10:40 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Been a weird morning..kayla says headed for spain. 
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Sun, Jun 19, 2011 at 12:32 PM
To: infinitysnake@gmail.com


Thanks
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 20, 2011 at 1:00 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Found a david lugg in canada who knows a lot about hbgary and claims to 
know kayla in person.  Worse, he works for NCR (cash machine co) in security
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 20, 2011 at 1:14 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


And they just posted another manifesto on banks/antisec
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Mon, Jun 20, 2011 at 12:49 PM
To: infinitysnake@gmail.com


Got it. Thanks.
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 21, 2011 at 12:40 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Haha, nice!
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 21, 2011 at 5:31 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Sabu making hostage jokes
----------
From: <infinitysnake@gmail.com>
Date: Wed, Jun 22, 2011 at 3:22 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Azazel has phone and plans to call
----------
From: <infinitysnake@gmail.com>
Date: 2011/6/22
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Aka sanguine et al
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Wed, Jun 22, 2011 at 6:05 PM
To: infinitysnake@gmail.com


Ok. Thanks. Will call u tomorrow.
----------
From: <infinitysnake@gmail.com>
Date: Wed, Jun 22, 2011 at 6:06 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Thanks, have fun

----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 23, 2011 at 4:55 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Developments..got a scared one
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Thu, Jun 23, 2011 at 5:52 PM
To: infinitysnake@gmail.com


Will call later tonight to get details.
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 23, 2011 at 7:36 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Williams number is 860 801 0728
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Thu, Jun 23, 2011 at 7:50 PM
To: infinitysnake@gmail.com


Thx.
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 23, 2011 at 9:20 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Sam bowne looking for emergency lapd infosec contact, any ideas?
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Thu, Jun 23, 2011 at 9:24 PM
To: infinitysnake@gmail.com


Who is sam bowne?
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 23, 2011 at 9:25 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Netsec guy at ucsf..app he heard/saw something
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 23, 2011 at 9:36 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


I just got an overseas call:/
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Thu, Jun 23, 2011 at 9:43 PM
To: infinitysnake@gmail.com


K's friend?
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 23, 2011 at 9:44 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Sam? No sam's legit, white hat
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Thu, Jun 23, 2011 at 9:44 PM
To: infinitysnake@gmail.com


What did bowne see?  Tell him to call fbi los angeles. They will put info 
to joint terr task force or appropriate people.
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Thu, Jun 23, 2011 at 9:45 PM
To: infinitysnake@gmail.com


K's friend, was that the overseas call?
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 23, 2011 at 9:54 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Oh...no idea.  They called from guatemala
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Thu, Jun 23, 2011 at 9:58 PM
To: infinitysnake@gmail.com


10-4. Going to bed. Chat with u tomorrow.
----------
From: <infinitysnake@gmail.com>
Date: Thu, Jun 23, 2011 at 9:59 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Kk
----------
From: <infinitysnake@gmail.com>
Date: Fri, Jun 24, 2011 at 3:16 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Email again....also got told a nuts storu about brazil
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Fri, Jun 24, 2011 at 3:57 PM
To: infinitysnake@gmail.com


Ok. Was called by will. Suppose to be sending me logs to yahoo acct. 
Not there yet.
----------
From: <infinitysnake@gmail.com>
Date: Fri, Jun 24, 2011 at 3:58 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Theres a lot
Hes going through...said gigs of stuff
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Fri, Jun 24, 2011 at 4:01 PM
To: infinitysnake@gmail.com


Ok. How is he going to send it? Multiple zipped emails?
----------
From: <infinitysnake@gmail.com>
Date: Fri, Jun 24, 2011 at 4:17 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


I think so, but hes afk

----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Fri, Jun 24, 2011 at 6:58 PM
To: infinitysnake@gmail.com


No call yet from lugg.
----------
From: <infinitysnake@gmail.com>
Date: Fri, Jun 24, 2011 at 6:59 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


? I doubt lugg will call, I just worry hell try to leave the country
----------
From: <infinitysnake@gmail.com>
Date: Fri, Jun 24, 2011 at 7:00 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Ill try and see
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Fri, Jun 24, 2011 at 7:06 PM
To: infinitysnake@gmail.com


Ok. I will prob pass him to another agent on my squad who can work with 
him. May want to let him know I will talk with him briefly first.
----------
From: <infinitysnake@gmail.com>
Date: Fri, Jun 24, 2011 at 8:31 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Sure...thing hes asleep, he was up late.
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Fri, Jun 24, 2011 at 9:50 PM
To: infinitysnake@gmail.com


Going to sleep soon as well. Will catch up tomorrow. Thx for all your help.
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Sat, Jun 25, 2011 at 9:16 PM
To: infinitysnake@gmail.com


Got your message re sabu. Will have peeps look into. Thx.
----------
From: <infinitysnake@gmail.com>
Date: Sat, Jun 25, 2011 at 9:33 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Dave says his father will "fix" evrrything.  They quit today, publicly.  
Ryan bell also mafe his facebook acct publiv
----------
From: <infinitysnake@gmail.com>
Date: Sat, Jun 25, 2011 at 11:33 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


http://pastebin.com/raw.php?i=iVujX4TR
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 1:07 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


I got jesters folks to take down sabus address, but one of thrm would 
like to talk to you?  Some skeptiscim there
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Mon, Jun 27, 2011 at 1:46 PM
To: infinitysnake@gmail.com


Any additional info on brazilian gov stuff?  Your chat was forwarded to 
them.  Very helpful. 
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 1:49 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Just that so fat.  Also heard from sergio fava same t ok me, you must 
be chatting?  Lol
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Mon, Jun 27, 2011 at 2:27 PM
To: infinitysnake@gmail.com


Is sergio the guy that u chatted with, who wanted u to pass the vuls to sabu?
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 2:28 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


No, brazilian fed police guy
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 2:28 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Guy with the vulns is bruno something
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 2:56 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Tflows ip and email in their own leak, btw
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 4:48 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Kayla tells me he pulled the plug on lulz over strong objectins from sabu
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Mon, Jun 27, 2011 at 5:17 PM
To: infinitysnake@gmail.com


Ok. Thx
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 5:18 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Him and topiary both chatty
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 8:01 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Had a real intersting convo with a friend of sabu Apparently he and mike 
and justin all went tobedstuy together
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 9:00 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


High school, that is
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 11:44 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Just been told mtgox released one of the thieves accts, and its tflow
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jun 27, 2011 at 11:45 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Trying to confirm
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 28, 2011 at 6:58 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Oh, someone hates tflow.  That hackforums dump has a real ip
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 28, 2011 at 7:39 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


86.178.50.126
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jun 28, 2011 at 8:27 AM
To: infinitysnake@gmail.com


Got it. Thx
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jun 28, 2011 at 8:28 AM
To: infinitysnake@gmail.com


Mike who and justin who? Nicks?
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jun 28, 2011 at 9:37 AM
To: infinitysnake@gmail.com


Nevr mind. Reading email. Thx
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jun 28, 2011 at 8:34 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Laurelai went to gawker >.<
----------
From: <infinitysnake@gmail.com>
Date: Wed, Jun 29, 2011 at 2:10 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Hector appears to be answering justin perras phone, incriminated himself
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jul 4, 2011 at 3:28 AM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Believe laurelai is letting kayla use her skype acct, is connected from 
a kitchener, ontario ip
----------
From: <infinitysnake@gmail.com>
Date: Mon, Jul 4, 2011 at 7:04 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Also kayla dumb enough to throw hints about my vpn...Have to laugh, 
because I confirmed her ip, but means I cant do much with laurelai now
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jul 5, 2011 at 5:17 PM
To: infinitysnake@gmail.com


Because they know your vpn?
----------
From: <infinitysnake@gmail.com>
Date: Tue, Jul 5, 2011 at 5:18 PM
To: Special Agent Daniel Porsek <2023459771@unknown.email>


Yeah, the vpn is open to view on irc, and laurelai dropped in, made a 
private chat, checked and left, wjich is what clued me to check the skype connections
----------
From: Special Agent Daniel Porsek <2023459771@unknown.email>
Date: Tue, Jul 5, 2011 at 5:19 PM
To: infinitysnake@gmail.com


Ok.


 Found on 04/27/12 using keyword search antisec and a threshold of 1.