WikiLeaks Version 2 In the days leading up to the Julianâ by IntelOps Medium
pSign upppSign inppSign upppSign inppHomeppFollowingppLibraryppStoriesppStatsppIntelOpsppFollowppppListenppShareppIn the days leading up to the Julian Assangeâs Extradition appeal at the UKâs Royal Courts of Justice on 20â21 of February an unknown group registered and created WikiLeaksV2 The group state that âwe are the followers of Julian Assangeâs case which has lived lives and will live despite all the difficulties faced by the international organization WikiLeaksâ In this blog IntelOps will analyse our finding of the WikiLeaksV2 site and present our findingsppJulian Assange has been in a UK prison since 2019 and is wanted by the US for disclosing secret military files in 2010 and 2011 to the site WikiLeaks that he founded in 2006ppDuring this time Assange posted documents on corruption in Kenyra Tibetan unrest in China and drone strikes in Yemen Along with the military documents posted in 2010 Wikileaks also published thousands of confidential documents supplied by Chelsa Manning a former UK intelligence analyst In 2019 US authorities charged Assange with 18 offences including breaking into its military databases following publications on the alleged killing of civilians by US forces in Afghanistan In 2021 the UK High Court ruled that he should be extradited dismissing claims that his poor mental health meant he might take his own life in a US jail In 2022 the Supreme Court upheld that decision Forward to February 2024 and Assange is again appealling the UK Homesecretaryâs decision and court ruling to fight against the extradition to the US The 5 day case is currently ongoin and a decision has yet to be determinedppFollowing the creation of WikiLeaks it was reported in 2023 by the New York Times that over 50 spinoffs including BaltiLeaks BritiLeaks BrusselsLeaks Corporate Leaks CrowdLeaks EnviroLeaks FrenchLeaks GlobaLeaks Indoleaks IrishLeaks IsraeliLeaks Jumbo Leaks KHLeaks LeakyMails Localeaks MapleLeaks MurdochLeaks Office Leaks Porn WikiLeaks PinoyLeaks PirateLeaks QuebecLeaks RuLeaks ScienceLeaks TradeLeaks and UniLeaks have been created something that the spokesperson of WikiLeaks Kristinn Hrafnsson has welcomedppOn 16th February 2024 the domain âwikileaksv2comâ was created with the registrar NiceNICppâNiceNICNET is an ICANN Verisign Godaddy HKIRC gTLDs ccTLD new gTLDs Accredited Domain Registrar and Hong Kong TOP Data CenterAlibaba Cloud Baidu Cloud Tencent Cloud cooperated Hosting Server Provider founded in 2006 based in Hong Kong Chinaâ â httpsnicenicnetppThe domain points to the IP address 3141244100 which is Hosted on the ISP Cat Technologies Co Limited also registered in Hong Kong The hosting provider is however geolocated in RussiappThe WikiLeaksV2 landing page features a very similar structure to the original WikiLeaks site It includes a Featured section and a search bar Additionally the webpage has the same categories of information disclosure âIntelligence Global Economy International Politics Corporations Government and War and Militaryâ However the new addition on WikiLeaksV2 is the âHealthcareâ category It also includes the ability to Donate and submit datappWHO ARE WEppWikiLeaksV2 define themselves as long time followers of Julian Assange and WikiLeaks They state that they believe countries have blocked âtruthful information at all levels of legislative posterâ and the corporations public authorities and commercial companies are their own discretion on the public disclosure of information They states the regardless of the outcome of the February 20â21 court hearing they will continue to disclose and make available the truth to everyone They state that they currently own 20TB of information which will gradually be published A Twitter link and email address are also providedpphttpstwittercomwikileaksv2ppwikileaksv2tutaioppLAW ENFORCEMENT CONTACTSppWikiLeaksV2 has listed multiple US organizations such as the Police FBI Intellectual Property Rights Homeland Security etc but interestingly added the quick dial number for the Serbian Police An interesting and unusual inclusion Additionally they ask visitors to the site to raise compaints about their data accuracy through two linksppEU InterSoft Consulting âintersoft consulting services AG specializes in consulting services in the areas of data protection IT security and IT forensicsâ based out of GermanyppUSA SEC USA Securities and Exchange Commission âOur mission requires tireless commitment and unique expertise from our staff of dedicated public servants who care deeply about protecting the investing public and others who rely on our markets to secure their financial futuresâppCONTACTS OF LEGAL ORGANIZATIONSppAmusingly the contact information for Organizations listed in the posted data is to a âlaw companyâ called MorganMorgan in the USA The link takes visitors to the following webpage for the company who claims to be âAmericaâs Largest Injury Law FirmâppDONATEppFor those inclined to donate to WikiLeaksV2 you can do so via Cryptocurrency The site lists Bitcoin Etherium and Tron cryptowallets to send payments toppBTC bc1q9dxajsllwj8lh56punny6c63v2sx57fqkeyd94ppETH 0xe9DedeB549C79C8cd2A9e4a54ffD5B7f1531440dppTRX TSfqGNc1CZmGcNxtWRQtX1YHH6fHFf8NGQppSUBMITppThey offer the option to send data via the website however which this is not yet available they provide an anonymous email addressppPUBLISHED DATAppSo whatâs published so far on the WikiLeaksV2 site Well two organisations under the HealthCare âCardio Vascular Consultantsâ and âEyeDocs Ottowaâ The date of disclosure on the site are listed 22nd February 2024ppAnd one organisation under âCorporationsâ Wacoal published on 21st February 2024ppInsider disclosure or Ransomware victim datappSo did Wikileaks âget their hands onâ confidential information and patient data via disclosure of concerned employees or did they acquire the information via another meansppAll three of these organizations appear on the Data Leak Site for Qilin RansomwareppQilin or Agenda ransomware were first observed in July 2022ppCARDIOVASCULAR CONSULTANTSppThe Data differs on the two sites however the operators of WikiLeaksV2 may have yet finished posting the datappEYEDOCS OTTAWAppThe data published to WikiLeaksV2 is exactly the same the group have unzipped the contents and published the files in a new rar formatppWACOALppThe dataset published on both sites is of the exact same sizeppSo far it appears that the operators of WikiLeaksV2 have merely acquired already leak data from the Qilin Ransomware group retrieving the already publicly disclosed data and republishing it to their website No notable publications reside on the site at this point in timeppSOCIAL MEDIAppAs mentioned already WikiLeaksV2 also has a Twitter account httpstwittercomwikileaksv2 Currently the account has very limited numbers of followers and whilst has posted their support for Julian Assange and his ongoing case they have not yet linked visitors to their website which is still under developmentppCONCLUSIONppItâs clear that this website was created by a group announcing their support for what appears to be Julian Assangeâs last attempt to overrule the UKâs decision to extradite the founder of WikiLeaks to the US However unlike WikiLeaks this site appears to merely disclose the data of 3 victims of Qilin Ransomware whose data was already accessible from the Data Leak Site of the ransomware group However the operators of WikiLeaksV2 have gone through lengths to create a Twitter profile listed cryptowallets and create their website As the we move towards a decision it will be interesting to see what further information is listed on this siteppwwwbbccomppenwikipediaorgppppppHelpppStatusppAboutppCareersppPressppBlogppPrivacyppRulesppTermsppText to speechp