HACKERS...MASTERMIND

Posts 5 · Viewed 8016 · Go to Last Post

· Snapshot

Like · Likedby · 0

My brother was applying f-1 visa to the University of Missisipi (MVSU)and he got the i-20 with the full scholorship..later he got the mail which i have attached below...what u guys think?hackers..a real mastermind in internet world..

Note: forwarded message attached.

Forwarded Message: Fw: I HACKED ALL OF YOU!

Fw: I HACKED ALL OF YOU!

Monday, May 12, 2008 10:33 PM

From:

"Shekhar Acharya" <info@dikshya.com>

To:

arsen_shrestha@hotmail.com, freakon_srz@yahoo.com, dev_sadpd@yahoo.com, uniquepokharel@gmail.com, "Milan Banjara" <vidhyamilan@yahoo.com>, sizzling_regmi@yahoo.com, karkiarjen90@yahoo.com, anilpant71@yahoo.com, anilpant71@yahoomail.com, rkishor_7@yahoo.com, pantaguy@yahoo.com, paudel_ank@hotmail.com, onenonlyone_je@hotmail.com, sht_sangeet1@hotmail.com, aashishgr@yahoo.com... more

please read this mail

Shekhar Acharya
Director

Dikshya International Pvt. Ltd.
Putalisadak, Kathmandu,Nepal
Phone No. 977-1-443 4874
Cell No. 977-98510 14770
E-mail: info@dikshya.com
URL: www.dikshya.com

----- Original Message -----

From: Paul Hopkins

To: bbufkin@mvsu.edu

Cc: Shekhar Acharya ; arvind595@yahoo.com

Sent: Friday, May 09, 2008 3:08 AM

Subject: I HACKED ALL OF YOU!

To introduce myself, I am Mr. Paul Hopkins from Mexico. I am a professional web-hacker. I was in need of some money and for that I hacked mvsu.edu and made some money out of it.

I am really sorry for what I did, but there was no way out.

I hacked mvsu.edu, created a Paypal account in its name, collected money from the students in the name of security deposit and application fee, and transferred the money into my personnal account.

The administrator of mvsu.edu may not believe it, but its true. Well, I hacked it in such a secured way that noone other than me can find it. In this process, I had to hack some other sites as well. Let the name of those other sites be hidden.

arvind595@yahoo.com (from whose email I received all the payments) may not be able to log in his paypal account. I am sorry I had to disable his account for my security reasons. He may get the remaining money of his paypal account by contacting the paypal office. I could not hack his remaining money. Mr. Bhagat, I am really very sorry.

This is my first hack in the world of web. This is also a small threat to educational institutions and a message to be careful in the future.

From now, this email address will be left unattended. In case anyone tries to contact in this email, he/she will get the automated reply. In the automated reply, they will get this same message.

Finally, I would like to request MVSU to give the students (whose documents have been sent) scholarships as much as possible, as it is MVSU's fault for its site being hacked.

May God bless all the students.

Once for all, GOOD BYE.

Mr. Paul Hopkins
A Professional Web-Hacker

Mexico

USA

Saajha

· Snapshot

Like · Liked by · 0

@nayan19,

Paul Hopkins' email makes a complete sense; whether it's a hoax or a statement based on the truth is a different story - but it sure has a legit attack vector. Here's what I understood by reading your attached email and the brief intro:

First off, you initially called it: University of Missisipi (http://www.olemiss.edu/) which you probably didn't mean. It really was MVSU (Missisipi Valley State University).

So - looks like Arvind (your bother?) applied to this institution through Shekhar (Director of 'Dikshya' - a Putalisadak based agency). Paul Hopkins claims to have 'hacked' into the web server/script; and possibly redirected the existing payment link to his paypal account, which would let the prospective students transfer their money to this guy's wallet! And here's a bitter truth --- it's absolutely Possible!

The email was sent to bbufkin@mvsu.edu (Dr Ben Bufkin ?) - supposedly a Finance guy - must be with the payroll/payment dept or such ! The email was Carbon Copied to Shekhar and Arvind as well. Now at this point, Bufkin is well aware of this 'hack', and so are Shekhar and Arvind. So, if (when) Bufkin checks his (the University's) paypal account and doesn't see the money transferred from Arvind or Shekhar(Provided that one of these guys - or perhaps 'Bhagat' did make a payment through paypal in the past), he knows for sure that it really went to a third party - which means the Hack attempt worked!! If he indeed received the money, then it's a complete lame n00b (newbie) show off!!!

At the end of the day, did it really matter to you or your brother? Not quite! Since Hopkins could only screw around with MVSU site, there's no trivial way for his 'professional' hacking mind to manipulate the paypal site; meaning he can't (at least in this case could not) access the bank info saved within Paypal. Meanwhile, as you mentioned, your brother already got accepted at the University (with full scholarship). So, cheer up -- relax -- and keep your eyes open to see a plethora of new initiatives carried out by modern day 'hackers'!

~@~

Last edited: 17-Jul-08 06:55 PM

sunko_lota

· Snapshot

Like · Liked by · 0

to me it sounds like some "wannabe" trying to get some attention. either that or soemone's playing a prank. first rule of hacking is to keep your hacks a secret and not brag about it! and this guy claims to be a "professional" hacker haha. and towards the bottom of his email he contradicts himself by saying its his "first hack". anyways, i get so annoyed with ppl like these. i would just ignore this guy cause he's nothing more than an annoyance!

nayan19

· Snapshot

Like · Liked by · 0

ya can c..the kind of mail he send seems like he is trying to get attention..but the reality is ..he send the fake i-20 on the name of mvsu to more than 60 nepalese students including my brother..and he took the preocessing fee through paypal which is needed for the processing..

might be he has just put the different name in the mail he send...might be?