Calling on Hacker Trackers

[frostbyte5014]

OK Guys two of my friends FaceBook accounts got hacked this morning and this guy is making a mess. We have tried contacting facebook but they don't seem to be in a hurry to help. Does anyone know how I can track this guy down and get his ip?

 

[frostbyte5014]

This guy is hopping through their friends list and is threatening me now. I don't thik this guy is using a virus to get his info. Facebook support sucks major ass though. They have no desire to help.

 

[AtYourService]

easy way to get his ip , send him a msg and say that you have his info on your website and he'll prolly click the link

you can either do this with your website and look through the logs
or open netcat on port 80 and have a dyndns type name pointing to your ip and itll show him connecting and even give you some browser info so you know what type of system he's running

that'll start you off

if you have a screen name of him you can try my site ive been working on
http://tracksomebody.com its just a website that links to other free search sites for certain info
be sure to read the article i wrote here http://tracksomebody.com/?cat=5

 

[Cue]

Do you know how his account got compromised?

Computer/network hack?
Bad password?

 

[Kenhelms]

things to consider:

If he is using facebook, does he have access to the email as well?
how strong was the password he had in place?
Does your friend log on from home or at work as well?
How long has it been compromised?
How is the grammar in the messages?
Send him a message on facebook, letting him know that you are going to pursue this if he doesnt desist. It may be a prank, in which case it would be bad to have a friend arrested.


while his computer may be infected, realistically, the only kind of person that would sent hate mails, etc. would be a script kiddie(which would not infect from a website most likely) or someone your friend has made angry.
Not to contradict ACG, but if it was a infection due to a popup, etc, the amount of computers infected would be so massive that to have a blackhat(most likely chinese) send out hate mail, etc would be so against the odds, that it can usually be ruled out.

Most likely the infection was due to a keylogger in place, either hardware or software.
In which case everything typed would be compromised.
I would look for anything plugged into the keyboard port on the tower if he has one. Otherwise check the process' and run a hijack this.
facebook has measures in place to resist brute force attacks, so unless he used spoofing, etc. etc. that wouldnt have worked, in which case if he used advanced techniques you prolly cant track him down anyway(on account of proxys, etc)

As has been said before, there are a number of ways to get a IP, but to actually translate that into anything more than a town location, requires a court order. Unless you compare it with known emails on your own.

Remember, if you do by the grace of god, track him down...do not do anything offensive to him, if this was to ever to go to court(like if he siphons money, exposes trade secrets, etc) then you will also in turn be prosecuted.

Also facebook more than likely will not be any help(except perhaps changing passwords, etc), while I am sure they log IP addys, they more than likely wont release, like most companies wont...without a court order.

Remember anything you do will be null if a keylogger remains on the computer or if it is reintroduced again.

I guess my point is, that he most likely knows the person, he may work with them, etc.

If you have any questions feel free to message me, Ill try to respond as quick as I can.

 

[frostbyte5014]

I still have not heard anything from FB support. When the guy found out I was after him he ceased all activity and returned the accounts to the users. I hope to still get his IP from facebook so I can get him.

I personally don't think he was a hacker. I think it was someone the family knows very well.

Thanks for everyone's help

 

[Menaice]

do yourself a favor and get off of social networking sites. I know they are a great way of marketing and keeping in touch but i read article recently that ID theft is very high on Social networking sites such as facebook, myspace and they other places that people insists on updating there every emotion everytime you login. lol

 

[rusty.nells]

Unless this guy is an idiot, you're not going to get his real IP address. And even if you got it, about all you could do is complain to his ISP...unless you have some connections.

 

[frostbyte5014]

If he is a local like I suspect he will go to jail.

 

[Davis Computer Services]

If he is a local like I suspect he will go to jail.

It is pretty unlikely that they will go to jail just for sending some emails out.

 

[AtYourService]

not likely

 

[frostbyte5014]

It is pretty unlikely that they will go to jail just for sending some emails out.

He hacked two facebook accounts and defamed the family. He also hacked their yahoo and msn accounts.

I'll post the article when it hits the local paper. This guy made a mess and he will pay for it. That's a promise.



Update! I got his ip address from an email he threatened me with. Here's a tip. If you get an email from a facebook user
you can get the ip even though it is encoded. Look for X-Facebook: from zuckmail ([cgdtetejMdxLjEf2NfS4f0NA==]) ( I changed the original so no body would see his ip ).
Copy the code between ([ ]) and go to http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/Default.aspx and paste the code to
translate. It worked like a charm. As I suspected he is local. I'll be visiting my friends at the local isp tomorrow to get his info.

 

[frostbyte5014]

See my update!

 

[Davis Computer Services]

He hacked two facebook accounts and defamed the family. He also hacked their yahoo and msn accounts.

I'll post the article when it hits the local paper. This guy made a mess and he will pay for it. That's a promise.



Update! I got his ip address from an email he threatened me with. Here's a tip. If you get an email from a facebook user
you can get the ip even though it is encoded. Look for X-Facebook: from zuckmail ([cgdtetejMxLjE2NS40NA==]) ( I changed the original ).
Copy the code between ([ ]) and go to http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/Default.aspx and paste the code to
translate. It worked like a charm. As I suspected he is local. I'll be visiting my friends at the local isp tomorrow to get his info.

1. You can't prove it was him just from an IP.

2. The act of obtaining his IP is illegal, and you could find yourself in trouble with the law.

Why not just drop it? He didn't hurt anything.

 

[14049752]

1. You can't prove it was him just from an IP.
2. The act of obtaining his IP is illegal, and you could find yourself in trouble with the law.
Why not just drop it? He didn't hurt anything.

Yeah, you should do one of two things: Drop it, or turn all of the information you have over to the authorities right now. Stop chasing the person and forward everything you have to law enforcement.

If you don't accept either of those things and want to be some vigilante, by all means....but understand that this person can easily go to law enforcement and get you in trouble if you do anything against them.

 

[Sn@Ke]

I would like to see how this pans out, fairly certain the ISP isn't going to give you anything without some type of privacy laws being broken.
You cant do much with an IP nowdays, they even recently ruled that an IP isn't sufficient evidence in filesharing / piracy cases.



But hopefully you can find them.
If you can track this person I will buy you a beer.

1. You can't prove it was him just from an IP.

2. The act of obtaining his IP is illegal, and you could find yourself in trouble with the law.

Why not just drop it? He didn't hurt anything.

I don't think obtaining an IP is illegal? It can be.... otherwise we'd all be breaking just using outlook (IP is in header)

 

[MHCG]

2. The act of obtaining his IP is illegal, and you could find yourself in trouble with the law.

This is ridiculous. Don't spread 'truths' you learned from internet lawyers.

 

[Kenhelms]

your going to have to take it to a investigator.

the ISP wont do anything without a court order. there are ways of translating the IP address into a pyshical home address, all of them which will be a breach in someway or another. I seriously wouldnt attempt it. We dont even attempt it when conducting a investigation, the ISP does that. It is specifically designed that way, so predators and the like can not find victims, hence there is EXTREME regulation to it.
What happens if this isnt his IP, but the neighbors or worse yet a public library? Now you may be using questionable techniques against a federal building.....

as has been said however, IP does not qualify as reasonable doubt so....

After the ISP confirms that it was him, his computer will have to be looked at.
Investigations range to multi thousand dollar deals. sure he may have used his home computer, but what if he used a friends laptop, the library, his work computer, his coworkers computer, the internet cafe, etc. etc. any computers he may have been in contact with will be looked at. that all takes a lot of time, and usually costs. Whos going to pay for that? what if he used a library computer, what judge is going to have probable cause to issue a order to look at that when tons of people use them everyday? then all the work stops, and you become the bad guy in the eyes of anyone that the "hacker" talks to. then there is the impact of the investigation to be taken account of. There is a reason that small hacking stuff goes unpunished. If he threatened people, you might be lucky and live in a state that has laws against cyber stalking. He would have broke those for sure.

Besides the obvious security breaches, you have defamation of character, and slander...but the same rules apply, you have to look as his computer, in which case it could backfire.

All around, if everyone knows he got hacked, and no-one is not talking to him on account of that...you should really just drop it.
Playing the high road is nice, but if he doesnt get convicted, itll be you vs. him and may be negative twords your business in the long run.
by the time the investigation ends and it goes to trial...everyone will have forgot about this anyway. You are also counting on a judge that will be favorable twords your case, which many may not see it the way you want.

Bear in mind, that most states define "cyberstalking" as when you threaten them....but in some its a grey area, and what you are attempting might qualify for it....

 

[Sn@Ke]

I think if you can find his address via your friends at the ISP (Presuming they are willing to bend the rules) you should totally just go to the address and suss it out, it's probably some kid at a school or libarary as stated above. If its a house, just knock and confront them, I bet its some teenager that will probably **** their pants anyway...

Just give em a scare If any legal issues arrise (doubt it) just deny it, lucky guess it was that person

update us

 

[frostbyte5014]

I don't know where some of you get your information or theories from. If you give up that easy you'll never succeed. I got the hackers ip from the threatening email he sent me. Traced it to our local ISP. Just left the Sheriff's dept after filling out a prerequsite to get the records from the ISP. Talked with the ISP and they looked up the guy's ip and found his records. The cool thing was he had that ip all day, so theres no chance of overlapping with another isp customer. Soon as my friend gets off work and fills out a police report they can go pick him up. The Sheriff says he is looking at federal charges. I have gathered all of our evidence together from four facebook users, all with the hackers ip included. I will post the newspaper article as promised when it comes out.

Thanks for those that tried to help!

P.S. The investigator was working on another case that involved messages sent from facebook. He asked me to take a look at the message. I decoded the ip and he is now getting the records to bust that guy. Two for one!