Hacker anti-LulzSec campaign turns into snipey squabble over who is Sabu

Everyone is Sabu. Welcome to Sabu. At Sabu, everything is possible. WELcome to Sabu.

By Kevin Fogarty  Add a new comment

Remember how elegantly ironic it seemed that LulzSec, a notorious group of hackers, had attacked TheSun.co.uk in retaliation wrongful hacking in the case of News of the World's decade-long, blatantly illegal and unethical practice at News of the World of hacking into the voice mail of story subjects to steal personal information?

Especially because of all those times LulzSec scored Lulz on big companies like Sony and a host of really random sites they'd probably cracked for practice, by posting lists of their customers, with personal email and personally identifiable data included?

And how ironic it was that they pissed off other hackers so much the other hackers hacked LulzSec – also as punishment for hacking wrongfully?

They're still at it (both LulzSec, which disbanded but didn't go away, and the LulzSec haters, even after an international sweep by the FBI that raked in a total of 16 people, some of whom may or may not be involved with either LulzSec or Anonymous).

Now most of the Lulz-hating energy seems to be directed at unmasking and punishing one of the chief Lulz, who goes by the tag Sabu.

One of the more effective Lulz-haters – TheJester( th3j35t3r), who has doxed a number of Lulzers, taunted, criticized and exposed their (alleged) means of making a living – is now counterexposing "TheRealSabu," who tweets at @anonymousSabu, as a fake Sabu.

The real Sabu was identified and doxed convincingly in June as a Webmaster in Portugal by WebNinjas -- a group founded specifically to grief the griefers in LulzSec.

TheJester finished what wasn't so much a doxing as a solid wallpapering that included what he said was Sabu's proper name (Hugo Carvalho), server addresses, private phone numbers, domain-name registration logs and possibly (I didn't read down far enough) a printout of Sabu's DNA sequence.

Carvalho energetically denies he's Sabu, to anyone who would listen.

"I'm Hugo Carvalho, and the story behind me and this nick guy Sabu is a complete lie," he said via email to CNET's Elinor Mills.

"Someone stole my photo from one of my Web sites and started to spread the rumor that I was affiliated with this hacking group," the e-mail said. "Feel free to post this e-mail in your Web site and state that there is no relation between me and anyone related to that hacking stuff."

The mass excitement over attempts to unmask Sabu is so great, Mills pointed out, that it inspired a Sabu parody site – a tribute to infamy or undeserved fame given usually to egotistical actor Twits or fake-serious statesmen like former congressman Anthony Weiner.

Unfortunately, it's not any funnier than the real Sabu.

Hugo or not, The Real Sabu taunted TheJester online in a series of rapid fire tweets early in the week:

"OK You found me. I am Hugo. I am in Portugal. Next question is: Can you stop me? ;)" he tweeted on Monday," according to a story in The Atlantic Wire.

"After The Jester's post Wednesday he went into rapid fire mode, tweeting and retweeting dozens of times an hour about the claims. "Extradite me, then I impress," he tweeted at The Jester just after the blog post went live. "The government of Portugal will not extradite me," he tweeted a few minutes later. "Lets see how far they will go. If you can extradition rights within Portugal I will impress. Next question is: where in europa?" he tweeted to a question from @revmagdalen about the claims. "So make it happen. I am personally challenging you to force your gobernment to force my gobernment to give me up. Your new task," he said in a follow up tweet."

Atlantic Wire points out it's easy to change domain name registrations and much of the other evidence TheJester

TheJester isn't buying it, though. He pointed out another posting, from an alleged associate of Sabu, who also accuses Hugo Carvalho of being Sabu, offering evidence completely different from Jester's to support the point.

The Real Sabu denies (although some followers believe The Real Sabu is now another LulzSec'er who goes by the name Topiary, fronting for the shamed, doxed, hiding or imprisoned Sabu).

anonymouSabu The Real Sabu

FYI: Ignore impersonators making believe they are Sabu. My only twitter is = @anonymouSabu and irc.anonops.li Nickname = Sabu

Sounds like a different punk to Jester:

th3j35t3r JESTER ✔ Genuine

Ahaa finally @anonymousabu - you sound strangely different.... what could it be?

anonymouSabu The Real Sabu

@th3j35t3r I'm the same person mate, hop on irc.anonops.li to confirm its me.

All clear now. Good.

(Sabu is actually @Spartacus, btw, but the FBI will never find him because the rest of the Lulz will all spoof his tag.)

Photo Credit: 

LulzSec, th3j35t3r

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question