It's not uncommon for users to try to get attention by circulating false statements or taking credit for something others did.
Over the weekend, a tweet was posted announcing that KrebsOnSecurity had been hacked, exposing stolen information to the public.
Analysis of the data reveals that there is no connection to Brian Krebs, as the information does not match any database that may exist on the security blog.
Twitter user Narcocachos (@N4rCochaos) posted a link to Pastebin that allegedly contained names, passwords, and email addresses of KrebsOnSecurity.
The first indication of fraud is the availability of passwords, because, in reality, no user account is required to access the website's information or comment on the articles.
Trying to determine the origin of the data, one will realize that it actually comes from an old blogger article. This is easy to find with a Google search.
Narcocachos' intent remains unclear, but he may have done it to gain some attention. This can be a dangerous game, as the real hackers may have just discovered a new target.
