[liberationtech] Hacking attacks on activists in Azerbaijan

[Joseph Lorenzo Hall]

I don't know of an organization like that... it can be a crap shoot,
trying to recover on some of these services. Apple's iCloud tends to
be very good (you get a human in a security role that will walk you
through recovery even though all accounts are locked for 8 hours after
an event). I don't think there is any resource, org, or other thing
that does this across platforms... and I suspect in some cases
recovery may not be practical, so migrating to a new account and using
that as an opportunity to activate two-step login, use a password
manager, etc. would be good. best, Joe

On Fri, Oct 14, 2016 at 1:26 PM, Katy Pearce <katycarvt at gmail.com> wrote:
> Hi all.
> In recent days a number of high profile activists in Azerbaijan report their
> Gmail, Facebook, and Twitter accounts either fully hacked or multiple logins
> that were not the owner's were attempted. Additionally, beyond the daily
> troll army, a few fake profiles with doxxing information have been created.
>
> We've seen this all before, but this is a sudden increase in quantity and
> depth.
>
> Before you ask, yes, there are a lot of people that do not engage in the
> best personal security hygiene - two level authentication etc should be
> turned on, but getting individuals to change their behavior is never easy.
> Proactive and preventative behaviors aren't the topic right now.
>
> What I'm looking for here are people - an organization or otherwise - that
> can help with retroactive help - help in closing down fake profiles, help in
> recovering accounts.
>
> An additional challenge is that a great deal of the materials designed to
> help people report malicious or nefarious activity are in English. Some
> people are trying to make screen shot instructions on what things to click
> on, but the ongoing need to help with translation, etc. is an issue too.
>
> Please contact me privately if you have some ideas. I don't wish for this to
> be a list-wide discussion, for the privacy of these individuals.
>
> Thanks,
> Katy
>
>
> --
> Liberationtech is public & archives are searchable on Google. Violations of
> list guidelines will get you moderated:
> https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe,
> change to digest, or change password by emailing moderator at
> companys at stanford.edu.



-- 
Joseph Lorenzo Hall
Chief Technologist, Center for Democracy & Technology [https://www.cdt.org]
1401 K ST NW STE 200, Washington DC 20005-3497
e: joe at cdt.org, p: 202.407.8825, pgp: https://josephhall.org/gpg-key
Fingerprint: 3CA2 8D7B 9F6D DBD3 4B10  1607 5F86 6987 40A9 A871

Tech Prom, CDT's Annual Dinner, is April 20, 2017! https://cdt.org/annual-dinner