Anatomy of a cyber-attack

It is hard to operate in cyberspace without leaving a trail. The September 25th cyber attack on deproxfraud.info, and whistleblower Richard Marsh’s personal Facebook, Google, Gmail, Twitter, Dropbox, Vimeo, WordPress, YouTube and Twitter accounts shows a particularly grubby set of fingerprints that the Norfolk CID will doubtless be familiar with…

Richard Marsh is resident in Saskatchewan, Canada, and has been since January 2017. Thus when social media sites detected “persons unknown” logging in to the administration areas of his websites and pages from locations in Norfolk UK, they automatically sent out Security Alert emails to the page or website owner.

From the flurry of security alerts received on the 25th and 26th September, an exact timeline of the hacker’s activity can be constructed. Note that the email times are for Saskatchewan, which is 7 hours behind the UK. The hacker started by illegally accessing Richard’s Twitter account at 20.33 from a location in King’s Lynn, Norfolk. This generated the security alert below at 13.33 Saskatchewan time.

fentiman hack

September 25th, 2017

13.33 Twitter new login from King’s Lynn, Norfolk

13.40 Facebook password reset

13.47 Twitter password reset

13.54 Twitter email address changed

14.34 WordPress (deproxfraud.info) email address changed

15.22 Vimeo account deleted

15.23 Gmail account security alert: Sign in from a Blackberry device in the UK

18.31 Dropbox account accessed from Terrington St. Clement, Norfolk

19.33 New email address “rubbish@sasktel.net” added to LinkedIn account

September 26th, 2017

01.58 Romer Photonics Company page removed from LinkedIn

05.16 Facebook account login from Whittlesford, UK

The directors of Hygiene Solutions Ltd and their partners in crime might like to contemplate the fate of young Gareth Crosskey, who was sentenced to a year in prison for hacking a Facebook Account.

fentiman hack facebook

Advertisements

Victory! Judge dismisses Fentiman’s gagging order.

The Honourable Mr. Justice B.A. Barrington-Foote has dismissed Hygiene Solutions’ application to register a gagging order against Richard Marsh, and awarded costs to the applicant.

Canadian justice has thus defended the right of a whistleblower to speak out in defence of the life and health of hospital patients worldwide. The deproxfraud.info website will continue its exposure of the fraudulent and astonishingly ineffective Deprox and Ultra-V hospital decontamination systems and the criminal activities of Hygiene Solutions’ directors.

Justice.PNG

Justice

Fentiman attacks whistleblower…again.

Stung by the damning exposure of the Ultra-V’s incredibly poor performance against C. difficile (log0.1 – log1.1) Hygiene Solutions Ltd. director, Rick Fentiman made a further attack in the Regina Court of Queen’s Bench on Friday against whistleblower Richard Marsh.

Fentiman’s lawyer, F. William Johnson QC spoke for almost a hour, on the theme “Corporations have a right to defend their reputation.” Judge The Hon. Brian Barrington-Foote, was not persuaded, and has reserved judgement.

Fentiman is attempting to register a gagging order that would prevent Richard Marsh from disclosing any further information about “Hygiene Solutions Ltd, its directors, employees or Deprox product.”  As a precaution, Richard has put in place a comprehensive backup plan to ensure that deproxfraud.info continues to publish unhindered even if the gagging order is passed.

This contingency plan depends on the fact that the gagging order is specific to Richard Marsh, and limited in its scope to Saskatchewan. The first two elements in the plan have already been enacted:

  • The ownership of the website has been transferred to an anonymous third party in Asia.
  • The Editorship of the site has been transferred to Dr Ecosse, who is not a Canadian resident.

The final element, which will only be put in to effect should the gagging order be allowed, is to transfer authorship of the blog posts to Dr Ecosse. It should be noted that Dr Ecosse has very deep personal reasons of his own to take issue with Hygiene Solutions, he is in no sense acting as an agent, and is certainly not being remunerated for his efforts. Dr Ecosse is also exceptionally well qualified to review and comment on the fraudulent activities of Hygiene Solutions Ltd. from a medical and scientific standpoint.

Whistleblower3 Ultra-V

Once this final step has been taken, deproxfraud.info will continue to publish indefinitely without any input whatever from Richard Marsh, and Hygiene Solutions’ lawyers will have the interesting task of tracking down Dr. Ecosse, who may prove to be rather elusive…

Whistleblower Ultra-V