20-Year-Old Student Surrenders For Hacking PM Yingluck's Twitter Account

[webfact]

Student hacker of PM's twitter account surrenders

A 20-year-old student has surrendered to police to face charges related to the hacking of Prime Minister Yingluck Shinawatra's Twitter account: PouYingluck.

Information and Communications Technology Minister Anudit Nakhonthap brought the student to a press conference held at 2pm.

Anudit told reporters that the student surrendered on his own and promised to use his IT expertise to help the ICT Ministry to fight against other hackers.

The student surrendered to police on Tuesday and claimed that he had no malicious intention in hacking Yingluck's twitter account, Anudit said.

The student will face charges of violating computer laws and will face a prison term of not more than five years or a fine of not over Bt100,000 or both.

Yingluck decided to terminate her Twitter account after a hacker hacked into her account during the weekend.

From 10.20am, eight messages were posted to Twitter@PouYingluck by the hacker, among them: "You can’t protect even your Twitter account. How can you safeguard the country? Think about it my brothers and sisters" and "Education is most important to the country. But why is there a policy for free distribution of tablets instead of a curriculum or wage hike for teachers?"

Anudith on Sunday claimed the hacker had used a mobile phone application to access the PM's account and another app to hide his location.

-- The Nation 2011-10-05

related:

PM Yingluck's Twitter Account Hacked!

[OzMick]

"Education is most important to the country. But why is there a policy for free distribution of tablets instead of a curriculum or wage hike for teachers?"

Good question ! And the PMs response was...................................Yingluck decided to terminate her Twitter account.

[TAWP]

Anudith on Sunday claimed the hacker had used a mobile phone application to access the PM's account and another app to hide his location.

The last part is nonsense.

This is a kid that was an opportunist. Any decent 'hacker' would have been able to cover their tracks well - first step is to not use a cell phone.

[webfact]

Lone male hacker of PM's Twitter account surrenders

BANGKOK, Oct 5 - A 20-year-old university student claiming to be the hacker who penetrated the prime minister's Twitter account on Wednesday turned himself in to police, saying he committed the cyber attack by himself.

Information and Communications Technology Minister Anudith Nakornthap held a news conference Wednesday afternoon with the young hacker, a fourth year architectural student in a Bangkok university, after the student--accompanied by his mother--contacted police for the surrender.

The minister said the student was the sole hacker intruding on the premier's Twitter account. The hacker reportedly told police that he did it out of impetuousness.

Mr Anudith said such action was considered as violating the Computer Crime Act BE 2550 (2007), but the culprit will be given a chance to work with the ICT ministry in thwarting any other hackers.

"The arrest is to be a lesson for anyone who is thinking to break the law that the ministry can track the wrongdoer and bring them for prosecution," said Mr Anudith.

Prime Minister Yingluck Shinawatra's "@PouYingluck" account on the popular microblogging social network was targeted by an unknown person, last Sunday. The hacker denigrated in eight separate posts (or tweets) her Pheu Thai-led government policies and administration.

The premier said earlier that she would temporarily halt communicating via Twitter until the Information and Communication Technology Ministry (ICT) finishes its investigation to find the hacker who discredited her government and policies.

The ICT Minister earlier said the action was a crime violating the Computer Crime Act of BE 2550. Violators could face up to five years in prison and a maximum fine of Bt100,000 (US$3,000). (MCOT online news)

-- TNA 2011-10-05

[prighas]

Who believes this stuff?

[OzMick]

"........ that the ministry can track the wrongdoer.........."

Is this true? How would they track him if he was using an unregistered SIM, and disposed of it afterwards?

[jaidam]

"........ that the ministry can track the wrongdoer.........."

Is this true? How would they track him if he was using an unregistered SIM, and disposed of it afterwards?

This is starting to remind me of the Thaksin assasination attempt where the bomber drove continuously around the block, until he was caught. Smacks of an inside job, just as an excuse to crackdown on dissenting views, and media freedom in general.

Still, its good of them to offer up 8 genuine gripes as a canard.

Good luck to this 20 year old student. I hope he claims it was "politically motivated"....

[webfact]

Thai PM Twitter account hacker busted

BANGKOK, October 5, 2011 (AFP) - A 22-year-old Thai student could face two years in prison for hacking into the prime minister's Twitter account and posting messages accusing her of incompetence, officials said Wednesday.

Akawit Thongdeeworakul surrendered to the authorities after he was contacted by investigators searching for the anonymous hacker who posted eight tweets on Sunday mocking the premier.

"He told me his act was innocent as he didn't realise it would be a big deal," information, communication and technology (ICT) minister Anudith Nakornthap said at a news conference attended by the suspect.

"He was remorseful for what he did and said he will use his computer expertise to help the ICT ministry fight against lese majeste websites (sites that insult the monarchy). He confessed that he did it alone."

The university student, wearing sunglasses and a baseball cap, remained silent and expressionless during the news conference.

Anudith said the suspect could be charged under a section of the Computer Crime Act that carries up to two years in prison.

"I would like this case to be an example for those who would like to do something like this," he added.

Thailand has drawn criticism from rights groups for suppressing freedom of speech using the Computer Crimes Act and lese majeste legislation, which bans criticism of the king, queen, heir or regent.

Yingluck described the Twitter attack as a "violation of people's personal rights" and suspended her account.

The sister of ousted former leader Thaksin Shinawatra was lambasted on a variety of subjects in the tweets, including her response to recent serious flooding and a number of key government policies.

"How can she protect the country, if she cannot protect her own Twitter account? Think about it," said the final post.

-- (c) Copyright AFP 2011-10-05

[Tatsujin]

"The arrest is to be a lesson for anyone who is thinking to break the law that the ministry can track the wrongdoer and bring them for prosecution," said Mr Anudith.

Hackers beware! As stated, they are going to sit down on their arse's, do nothing and wait for you to surrender to them! Classic!

[KRS1]

"........ that the ministry can track the wrongdoer.........."

Is this true? How would they track him if he was using an unregistered SIM, and disposed of it afterwards?

IMEI number and referencing previous locations of the cell phone via cell towers and GPS. iPhones are constantly giving out location info unless stopped, Blackberry stores info via the RIM server.

Twitter has all the other info needed, once they have the number, they can then see what other numbers were called out or received. Track those until a common denominator shows up.

[whybother]

A 20-year-old university student claiming to be the hacker who penetrated the prime minister's Twitter account on Wednesday turned himself in to police, saying he committed the cyber attack by himself.

Information and Communications Technology Minister Anudith Nakornthap held a news conference Wednesday afternoon with the young hacker, a fourth year architectural student in a Bangkok university, after the student--accompanied by his mother--contacted police for the surrender.

...

"The arrest is to be a lesson for anyone who is thinking to break the law that the ministry can track the wrongdoer and bring them for prosecution," said Mr Anudith.

He turned himself in "claiming" to be the hacker. The ministry didn't do any tracking!

[OzMick]

"........ that the ministry can track the wrongdoer.........."

Is this true? How would they track him if he was using an unregistered SIM, and disposed of it afterwards?

IMEI number and referencing previous locations of the cell phone via cell towers and GPS. iPhones are constantly giving out location info unless stopped, Blackberry stores info via the RIM server.

Twitter has all the other info needed, once they have the number, they can then see what other numbers were called out or received. Track those until a common denominator shows up.

But a SIM bought for the job and tossed would only give the general area, and could they work that out after the event (ie no longer active)?

[SAffer]

A 20-year-old university student claiming to be the hacker who penetrated the prime minister's Twitter account on Wednesday turned himself in to police, saying he committed the cyber attack by himself.

Information and Communications Technology Minister Anudith Nakornthap held a news conference Wednesday afternoon with the young hacker, a fourth year architectural student in a Bangkok university, after the student--accompanied by his mother--contacted police for the surrender.

...

"The arrest is to be a lesson for anyone who is thinking to break the law that the ministry can track the wrongdoer and bring them for prosecution," said Mr Anudith.

He turned himself in "claiming" to be the hacker. The ministry didn't do any tracking!

This is funny. Then this is a lesson to learn, turn yourself in and we congratulate ourselves for safeguarding the esteemed PM's Twitter Account.

Miracle!!

[woodyleonhard]

The final post is ludicrous. Twitter accounts get taken over all the time. NBC News, Bank of Melbourne, Chrysler, Ashton Kutcher, Vodafone, several US Senators and Congressmen, PayPal UK, Britney Spears, Facebook's official Twitter account, Huffington Post's, Gawker Media, Fox News, and USA Today have all been hacked - as have tens of thousands of others. Even Barack Obama's Twitter account was compromised at one point.

If the suspect used a particularly clever method for finding K Yingluck's password - broke into the Twitter servers, say, or sniffed a mobile phone transmission - it'd be interesting to know how he found it. If he simply guessed, he just took advantage of a poorly conceived password. That's hardly a "How can she protect the country?" caliber indictment.

[londonthai]

The OP article, from the nation:

"Anudit told reporters that the student surrendered on his own and promised to use his IT expertise to help the ICT Ministry to fight against other hackers"

Anudith Nakornthap said ... he will use his computer expertise to help the ICT ministry fight against lese majeste websites (sites that insult the monarchy) AFP

the minister is inconsistent in his statements

[londonthai]

IMEI number and referencing previous locations of the cell phone via cell towers and GPS. iPhones are constantly giving out location info unless stopped, Blackberry stores info via the RIM server.

Twitter has all the other info needed, once they have the number, they can then see what other numbers were called out or received. Track those until a common denominator shows up.

it's possible to buy mobile for one job and throw it away, no trace whatsoever. The job to be done from the public space, where there are not cameras, not his home. A perfect cyber crime

[volk666]

It was reported that he broke Pou's e-mail password first, once you have control over the e-mail then recovering "lost" Twitter password should be a piece of cake. He should have tweeted from some open wifi, too. Also you can't buy iPhone Sim in 7-11, you would have to cut it to microSim size yourself.

It's not tweeting that's interesting, it's the fact that he could break into her e-mail, you can a lot of fun if you have that - access sites like Amazom, eBay, pizza deliveries, pr0n or personal banking.

[serenitynow]

I just knew it had to be an educated person. I doubt if it was an "inside job" as their aren't any amongst them with the finesse to do anything but blow things up and bludgeon people to death. I hope the young man inspires many others to other acts of civil disobedience. He's a hero in my book.

Edited October 5, 2011 by serenitynow

[warfie]

actually, I don't know who deserves the bigger laugh, the careless amateur hacker or the authorities who claim to have tracked him down after he surrendered... still...

[sulasno]

my theory is the crab gave the password to the hacker so that publicity can be generated

[Emptyset]

He turned himself in "claiming" to be the hacker. The ministry didn't do any tracking!

The AFP report says he turned himself in after being 'contacted by investigators' which implies that they did indeed do some tracking.

[Emptyset]

The OP article, from the nation:

"Anudit told reporters that the student surrendered on his own and promised to use his IT expertise to help the ICT Ministry to fight against other hackers"

Anudith Nakornthap said ... he will use his computer expertise to help the ICT ministry fight against lese majeste websites (sites that insult the monarchy) AFP

the minister is inconsistent in his statements

Why do you think he is inconsistent and not the reporting? Seems more likely to be the latter.

[unanimosity]

Lone male hacker of PM's Twitter account surrenders

BANGKOK, Oct 5 - A 20-year-old university student claiming to be the hacker who penetrated the prime minister's Twitter account on Wednesday turned himself in to police, saying he committed the cyber attack by himself.

Information and Communications Technology Minister Anudith Nakornthap held a news conference Wednesday afternoon with the young hacker, a fourth year architectural student in a Bangkok university, after the student--accompanied by his mother--contacted police for the surrender.

The minister said the student was the sole hacker intruding on the premier's Twitter account. The hacker reportedly told police that he did it out of impetuousness.

Mr Anudith said such action was considered as violating the Computer Crime Act BE 2550 (2007), but the culprit will be given a chance to work with the ICT ministry in thwarting any other hackers.

"The arrest is to be a lesson for anyone who is thinking to break the law that the ministry can track the wrongdoer and bring them for prosecution," said Mr Anudith.

Prime Minister Yingluck Shinawatra's "@PouYingluck" account on the popular microblogging social network was targeted by an unknown person, last Sunday. The hacker denigrated in eight separate posts (or tweets) her Pheu Thai-led government policies and administration.

The premier said earlier that she would temporarily halt communicating via Twitter until the Information and Communication Technology Ministry (ICT) finishes its investigation to find the hacker who discredited her government and policies.

The ICT Minister earlier said the action was a crime violating the Computer Crime Act of BE 2550. Violators could face up to five years in prison and a maximum fine of Bt100,000 (US$3,000). (MCOT online news)

-- TNA 2011-10-05

So which is it, did he surrender or was he tracked and aprehended? "Yep, we took him in custody the moment he walked in the door, don't mess with us."

[ludditeman]

Anudith on Sunday claimed the hacker had used a mobile phone application to access the PM's account and another app to hide his location.

The last part is nonsense.

This is a kid that was an opportunist. Any decent 'hacker' would have been able to cover their tracks well - first step is to not use a cell phone.

Correction

First step, is not to use YOUR OWN cell phone.

[developer3d]

"........ that the ministry can track the wrongdoer.........."

Is this true? How would they track him if he was using an unregistered SIM, and disposed of it afterwards?

IMEI number and referencing previous locations of the cell phone via cell towers and GPS. iPhones are constantly giving out location info unless stopped, Blackberry stores info via the RIM server.

Twitter has all the other info needed, once they have the number, they can then see what other numbers were called out or received. Track those until a common denominator shows up.

But a SIM bought for the job and tossed would only give the general area, and could they work that out after the event (ie no longer active)?

Par for the course for TV - bad information handed out by people positioning themselves as "experts"

Only an complete idiot would use their home PC or their 30,000 baht Apple Iphone pride and joy to be up to no good.

In the phone world its the cheapest handset you can buy and a prepaid sim paid for with cash at a small shop without chance of security camera's

Used for one task ie and then disabled and thrown away totally untraceable.

Don't underestimate what the cyber crimes boys in Bangkok can do - there is still a lot of tech sharing going on from the US - to suggest they are incompetent is very very naive.

[unanimosity]

"........ that the ministry can track the wrongdoer.........."

Is this true? How would they track him if he was using an unregistered SIM, and disposed of it afterwards?

IMEI number and referencing previous locations of the cell phone via cell towers and GPS. iPhones are constantly giving out location info unless stopped, Blackberry stores info via the RIM server.

Twitter has all the other info needed, once they have the number, they can then see what other numbers were called out or received. Track those until a common denominator shows up.

But a SIM bought for the job and tossed would only give the general area, and could they work that out after the event (ie no longer active)?

Yeah, so much for the sim but what about the mac address of the phone? You'd have to have never used the phone for anything else and then disgard it, unless you spoofed the mac address for the hack.Google Kevin Mitnick, read him and about him. Social engineering is the key method for discovering vulnerabilities.

Edited October 5, 2011 by unanimosity

[volk666]

Just proves that he is an amateur, imagine what real criminals can do if breaking PMs e-mail is that easy.

Abhisit lost 100k from an ATM with a pin written on it and it took him a year to notice. Anyone knows his e-mail?

[newermonkey]

"........ that the ministry can track the wrongdoer.........."

Is this true? How would they track him if he was using an unregistered SIM, and disposed of it afterwards?

IMEI number and referencing previous locations of the cell phone via cell towers and GPS. iPhones are constantly giving out location info unless stopped, Blackberry stores info via the RIM server.

Twitter has all the other info needed, once they have the number, they can then see what other numbers were called out or received. Track those until a common denominator shows up.

Except none of these methods were used as he "Gave Him Self Up dint he" :jap:

[TAWP]

"........ that the ministry can track the wrongdoer.........."

Is this true? How would they track him if he was using an unregistered SIM, and disposed of it afterwards?

IMEI number and referencing previous locations of the cell phone via cell towers and GPS. iPhones are constantly giving out location info unless stopped, Blackberry stores info via the RIM server.

Twitter has all the other info needed, once they have the number, they can then see what other numbers were called out or received. Track those until a common denominator shows up.

But a SIM bought for the job and tossed would only give the general area, and could they work that out after the event (ie no longer active)?

Yeah, so much for the sim but what about the mac address of the phone? You'd have to have never used the phone for anything else and then disgard it, unless you spoofed the mac address for the hack.Google Kevin Mitnick, read him and about him. Social engineering is the key method for discovering vulnerabilities.

That is why a laptop with an altered MAC address and drive-by of an unsecured wi-fi outside apartment complex or cafe is much better...

[volk666]

Can't jailbroken iPhone spoof both the IMEI and MAC addresses?