/5/ - Chaos

it's being posted all over the place, many different websites

The janny finally cleaned it up; yay

dae5ca36879db292fb2ce21f7f14b6d19c160c694404e99d98b6a1fcb24df26e.jpg
[Hide] (51.1KB, 480x320)

Thank you for your effort, Pope.
In the future, consider sliding (bumping other thread) instead of flooding - this site locks the board if too many threads are created in a short time, so that someone can't just wipe all the threads off the site when jannies are sleepy.

Thankfully, I did not see it this time.

Was it R*ssian CP spam or soytroon CP spam?

>>16427
Luckily I didn't see the picture because it was squished.
It was commercial spam, not a raid, but it wasn't one of the standard known-Russian ones we're used to, it was someone using Tor on Linux, posting just an .onion link ending with "/chat".

ClipboardImage.png
[Hide] (23KB, 277x286)

Their zzzchan thread is still up. Link is the same, different image and filename, so image metadata filtering is probably out.
If we're lucky, they'll be too dumb to change the site URL format.

>>16427
I've seen it all (unintentionally, it got posted without being obvious what it was somewhere else), how would someone be able to tell the difference?

>>16428

What IP address(es) did they use?

>>16431

The two guys from Omsk (the most prolific CP spammers on imageboards) always post shit like "free p*e*d*o* porn girls aged 5 - 17 [link]" with an attached picture of naked little girls.  It's actually just a scam to get retarded pedophiles to install their malware.

Soytroons usually will spam shit like Daisy's Destruction and other extreme hurtcore material with "edgy" and "ironic" captions like "Scully won".  Most of them are underage grooming victims themselves.

From what it sounds like, this was someone else entirely - most likely someone running a different malware scam.

>>16433
>What IP address(es) did they use?
A Tor exit node IP, before switching to the onion address and posting.

I haven't seen the IBs targeted by those soybois, but I was on one targeted about five years ago by /pol/ raids where one bought VPSs to spam CP. And like you said, the format is clearly different - aiming to offend and often gloating or being edgy, posting many times. The commercial scam spammers hit-and-run and have a clear advertising angle, like sharing links or putting them in the picture, and often not even using CSAM in the picture (I think these ones, while still abusive, were clothed model shots rather than graphic content, and I've seen ads use anime loli and images of pedobear).

As for the Omsk malware claim, I'd be interested if you can share evidence for this. It's plausible, although the most prolific spammers I've seen are using the Vladivostok timezone rather than Omsk.

>>16434

>As for the Omsk malware claim, I'd be interested if you can share evidence for this.

They've flat-out forgotten to turn their VPNs on when spamming CP on altchans before.  It's a guy in Omsk and his friend in the same city.  Reporting them to the authorities did no good because Russia is a lawless hellhole.

>>16433
>modus operandi
It wasn't hurtcore.
I also didn't see any obvious malware, there was no requirement to install anything.
It was a chat with a variety of CP being shared, some of it hardcore.

I'm not really sure what the motive would be for this spammer besides something like a data collection honeypot.
Or maybe it's just a retarded MAP that thinks spamming is a good way to advertise (it's not, it attracts unwanted attention).