When we mocked Hacking Team and began their hunt


Received: from relay.hackingteam.com ( by
EXCHANGE.hackingteam.local ( with Microsoft SMTP Server id; Fri, 13 Sep 2013 17:18:01 +0200
Received: from mail.hackingteam.it (unknown []) by
relay.hackingteam.com (Postfix) with ESMTP id 53609621B3 for
<[email protected]>; Fri, 13 Sep 2013 16:15:23 +0100 (BST)
Received: by mail.hackingteam.it (Postfix) id B9A952BC1E8; Fri, 13 Sep 2013
17:18:01 +0200 (CEST)
Delivered-To: [email protected]
Received: from [] (unknown []) (using TLSv1 with
cipher AES256-SHA (256/256 bits)) (No client certificate requested) by
mail.hackingteam.it (Postfix) with ESMTPSA id 935EF2BC1A3; Fri, 13 Sep 2013
17:18:01 +0200 (CEST)
Message-ID: <[email protected]>
Date: Fri, 13 Sep 2013 17:18:09 +0200
From: Ivan Speziale <[email protected]>
User-Agent: Mozilla/5.0 (X11; Linux i686;
rv:10.0.12) Gecko/20130116 Icedove/10.0.12
To: Alberto Ornaghi <[email protected]>, Marco Valleri
<[email protected]>
Subject: Re: Article on us…
References: <[email protected]l>
<[email protected]>
In-Reply-To: <[email protected]>
X-Enigmail-Version: 1.4.1
Return-Path: [email protected]
X-MS-Exchange-Organization-AuthSource: EXCHANGE.hackingteam.local
X-MS-Exchange-Organization-AuthAs: Internal
X-MS-Exchange-Organization-AuthMechanism: 10
Status: RO
MIME-Version: 1.0
Content-Type: multipart/mixed;

Content-Type: text/plain; charset=”UTF-8″

Date un occhio a questo

Karl Constantine ‏@Nexus23_Labs 5m
.. and their infected files have names so ridiculous …
Karl Constantine ‏@Nexus23_Labs 9m
We ‘re currently finding Hacking Team new hidden IPs .. with success …

Ivan Speziale
Senior Software Developer

Hacking Team
Milan Singapore Washington DC

email: [email protected]
mobile: +39 3669003900


Hacking Team : “Date un occhio a questo”

transl. “Take a look to this”

Hacking Team considered us a danger for their operations.

And we are still that danger.

After 5 years we are still logging and blocking Hacking Team IP Addresses with success.

Now we suggest to their Seniors to broadcast eMails beginning with this:

Karl Constantine: “HTeam: All your C2 and Infection IP Vectors belong to us.”


ipfilterX by Nexus23 Labs
%d bloggers like this: