Anonymous ID: 63807e May 23, 2018, 8:27 p.m. No.1524259   🗄️.is 🔗kun   >>4326 >>4399 >>4458 >>4459 >>4569 >>4642

DOJ TODAY - ANOTHER MEANING FOR FOLLOW THE PEN?

THOUSANDS OF INFECTED HOME AND OFFICE (SOHO) ROUTERS AND OTHER NETWORKED DEVICES UNDER THE CONTROL OF A GROUP OF ACTORS

 

Additional action necessary worldwide to remediate the botnet.

 

Follow the PEN.

Think timing.

Coincidence?

The attacks will only get worse.

They are losing [all] control.

Q

 

AG Sessions.

US Cyber Task Force.

Important.

Q

 

PEN REGISTERS & PEN-TRAP DEVICES

The United States of America, moving by and through its undersigned counsel, respectfully

submits under seal this ex parte application for an order pursuant to l8 U.S.C. S$ 3122 and3123, authorizing the installation and use of pen registers and trap and trace devices ("pen-trap devices") to record, decode, and./or capture dialing, routing, addressing, and signaling information associated with each communication to or from servers and other infrastructure established by the United

States in this investigation.

 

"“This operation is the first step in the disruption of a botnet that provides the Sofacy actors with an array of capabilities that could be used for a variety of malicious purposes, including intelligence gathering, theft of valuable information, destructive or disruptive attacks, and the misattribution of such activities.”

 

Here is the press release:

https://www.justice.gov/opa/pr/justice-department-announces-actions-disrupt-advanced-persistent-threat-28-botnet-infected

Anonymous ID: 63807e May 23, 2018, 8:33 p.m. No.1524326   🗄️.is 🔗kun   >>4459 >>4744

>>1524259

DOJ TODAY - ANOTHER MEANING FOR FOLLOW THE PEN?

 

SPYGATE?

 

WARRANT OF SEIZURE AND SEALING ORDER ON

 

www.toknowall.com

 

Nice Name!

 

Pen-trap devices were also requested. I will post that document in another post.

 

https://www.justice.gov/opa/press-release/file/1066036/download

Anonymous ID: 63807e May 23, 2018, 8:40 p.m. No.1524399   🗄️.is 🔗kun   >>4445 >>4476

>>1524259

Hackers infect 500,000 consumer routers all over the world with malware

 

VPNFilter can survive reboots and contains destructive "kill" function.

 

"FBI agents have seized a key server used in the attack. The agents said Russian-government hackers used ToKnowAll.com as a backup method to deliver a second stage of malware to already-infected routers."

 

“Since the affected devices are legitimately owned by businesses or individuals, malicious activity conducted from infected devices could be mistakenly attributed to those who were actually victims of the actor. The capabilities built into the various stages and plugins of the malware are extremely versatile and would enable the actor to take advantage of devices in multiple ways.”

 

"Cisco researchers believe that, even without the built-in kill command, the attackers can use stage 2 to manually destroy devices."

 

Symantec issued its own advisory Wednesday that identified the targeted devices as:

 

Linksys E1200

Linksys E2500

Linksys WRVS4400N

Mikrotik RouterOS for Cloud Core Routers: Versions 1016, 1036, and 1072

Netgear DGN2200

Netgear R6400

Netgear R7000

Netgear R8000

Netgear WNR1000

Netgear WNR2000

QNAP TS251

QNAP TS439 Pro

Other QNAP NAS devices running QTS software

TP-Link R600VPN

 

sauce:

https://arstechnica.com/information-technology/2018/05/hackers-infect-500000-consumer-routers-all-over-the-world-with-malware/

Anonymous ID: 63807e May 23, 2018, 8:47 p.m. No.1524458   🗄️.is 🔗kun   >>4744 >>4845

>>1524259

Another meaning for follow the pen?

Here is the order for

PEN-TRAP DEVICES

issued TODAY for the DOJ

 

"IT IS THEREFORE ORDERED, pursuant to 18 U.S.C. $ 3123, that the Federal Bureau of

Investigation may install and use pen-trap devices, without geographic limitation, to record, decode, and/or capture dialing, routing, addressing, and signaling information for each communication sent by the malware to the servers and other infrastructure established by the United States, including the date, time, and duration of the communication."

 

https://www.justice.gov/opa/press-release/file/1066046/download

Anonymous ID: 63807e May 23, 2018, 8:57 p.m. No.1524569   🗄️.is 🔗kun   >>4744

>>1524259

Why would the DOJ announce this order TODAY when it was just signed TODAY and ordered to be sealed?

 

ODD and the wording is odd. PIC RELATED

 

IT IS FURTHER ORDERED that the application and this Order are sealed until sealed until further order of the Court, pursuant to l8 U.S.C. $ 3123(dXl).

 

LINK TO ORDER:

https://www.justice.gov/opa/press-release/file/1066046/download

 

LINK TO APPLICATION:

https://www.justice.gov/opa/press-release/file/1066051/download

Anonymous ID: 63807e May 23, 2018, 9:05 p.m. No.1524642   🗄️.is 🔗kun

>>1524259

>>1524459

>Also noted the name Richard Green popped out to me.

 

Me too, anon! Here are the GREEN posts again:

 

For Green.

Q

—end—

 

Archive immediately.

Stringer = code = command.

What stringer was provided (2) days prior to event?

What were the keywords in the stringer?

Confirm.

Green (Yes).

Sky.

Why were keywords provided?

Guide to reading map?

Lord d R.

What was previously stated?

++

Who was the pilot of the plane?

Bad actor?

Who was the pilot of the helicopter?

Green?

What was countered?

Who was on the ground (outside) shortly before the collision?

Who was in the home shortly before the collision?

Learn to read the map.

We may have overestimated your ability.

Q

 

Keywords:

Confirm.

Green.

Sky.

Why were keywords added in the stringer?

What was the purpose?

What was previously stated?

To who specifically?

++

Who countered?

Learn to read the map.

Missing critical items.

Graphic is key.

Ordering is critical.

Q

 

Expand your thinking.

Captain Mike Green.

Conf_D-TT^_v891_0600_yes

_green1_0600

Bunker Apple Yellow Sky [… + 1]

Yes.

Who countered?

Do you believe in coincidences?

Learn how to read the map.

Q

 

Conf_D-TT^_v891_0600_yes

_green1_0600

Bunker Apple Yellow Sky [… + 1]

Yes

Godspeed.

Q

 

NYT/Clowns In America article released today re: Q-group is a DIRECT attack/warning re: what is being dropped here.

Read between the lines.

Why was the article published today?

POTUS has been briefed.

New measures active and in place.

Update the graphic.

 

_DGB79FTWA-0ZjBT_19-T_yes

_Conf_13_pre-lau_yes

_HTzD09BA_conf_yes

_^yRTPCCA-7^DFWTAb_yes

_green1_green2_green3_green4_conf-ZDjTwT9Ry

Godspeed.

Q

 

14.5995° N, 120.9842° E

Conf_UDT_green

^_Sj69ETC-

Godspeed.

 

I have been here since the beginning. I know we also had the pilot Green that gave the ultimate sacrifice but…

 

MULTIPLE MEANINGS

 

Not to mention….maybe it was due to this botnet that Captain Green's mission was compromised.