Hello :D
Today I want to talk about Riphub.
Most of you know me as Locksec, but I quit that scene — not because of Riphub, but because I have a life, a job, and I still do programming. I still make exploits and malware on my own time, so things are going fine. I’m also working on a wiki about Riphub, which I’m calling “Hell of Skids.”
Story
Me and idontlarp used to be Roblox exploiters. We met while exploiting on Roblox, and eventually started getting into real hacking through different groups. That’s how we found Riphub — back then they went by another name, maybe Demonbin or something like that.
At first we thought we found the right people, but things quickly got out of hand — as they usually do when script kiddies are involved. One day on voice chat, I was making harmless jokes about kids (which I don’t usually do), and suddenly they started calling me a script kiddie and trying to doxx me.
One of them, Homicide, had his friends try to doxx me because he couldn’t do it himself — he doesn’t actually know OSINT or anything serious. He’s basically the master skid of his group because he created Riphub.
He even tried to rat me using a GitHub RAT called Discord-RAT
, but failed because I ran it in a virtual machine. He claimed he could bypass it, but never did. I used Wireshark to trace the RAT traffic back to him since he forgot to use a proxy (or the RAT didn’t even support proxies). I got his IP, but I won’t post it here because this happened in 2024 and it’s probably changed by now.
Anyway, he thought he could ruin my life by exposing personal stuff about my mom and sisters that he pulled from an old Facebook account. Everything he posted was outdated and harmless. He even tried to get my address from my IPv4, which doesn’t work — you can’t get a street address from an IP. He ended up swatting the wrong house.
After all that, they still wouldn’t leave me alone, so I reported them to the FBI. Their website ended up getting taken down by the feds — here’s the archived link:
https://web.archive.org/web/202405090339...riphub.co/
Apparently, they were trying to make it look like they were running ransomware, which backfired hard.
They also claimed they leaked my data on the dark web I honestly don’t care. TOR links change constantly and it’s not worth chasing.
After everything, idontlarp and I made up. He realized Riphub was the wrong crowd, and now we’ve both moved on — staying away from toxic hacking groups and just living our lives.
Operation Nova
In a decisive international operation dubbed Operation Nova, the Riphub Ransomware Task Force consisting of CID Esslingen / Baden-Württemberg, the Federal Bureau of Investigation (FBI), and several European law enforcement agencies, working closely with Europol — delivered a crippling blow to the notorious Riphub ransomware syndicate.
Using legal channels across EU Member States and backed by a seizure warrant issued under 18 USC 1030 by the United States District Court for the Eastern District of Michigan, the coalition successfully dismantled Riphub’s network and seized their infrastructure.
The ongoing forensic analysis of the confiscated digital data, along with the continued pursuit of Riphub’s operators, marks the end of their so-called “reign of digital extortion.”
