Cybermidnight Club– Hackers, Cyber Security and Cyber Crime

Features a conversation with Alberto Daniel Hill and his friends, where Alberto asserts that Twitter (now known as X) is "completely compromised".

The core of Alberto's concern stems from an alleged GitHub hack that specifically targeted the Twitter repository, impacting entries for the Chirp contest. He explains that an AI system called Co-pilot, owned by Microsoft and Open AI, was trained on open-source data and is somehow involved. This situation led to the leak of API keys from over 3,200 apps. While API keys are generally meant to allow applications to interact with Twitter's content, Alberto suggests that this leak could enable malicious actors to hijack accounts, even those with two-factor authentication. Such a compromise could allow them to create or take over verified accounts belonging to major news stations or public figures, subsequently promoting fake news, manipulating markets, or running cryptocurrency scams.

This alleged vulnerability is particularly alarming due to Twitter's significant role as a news source. Alberto highlights that 90% of people trust Twitter most for news, especially breaking news. This trust makes the platform a powerful tool for manipulation, as forcing specific news into users' feeds could effectively change who people vote for in elections. He calls this "major" and capable of "literally changing the news in countries".

The security concerns on X extend beyond just leaked API keys. Forbes reports that 200 million X user records were released by a "data enthusiast" named ThinkingOne, building upon a January 2022 vulnerability that allowed access to user data via email or phone number. ThinkingOne claims that 2.8 billion records were exfiltrated, potentially making it the "largest social media breach ever". This extensive dataset includes sensitive profile metadata such as:

• X screen names and user IDs
• Full names and locations

The platform is also grappling with a significant bot problem. Estimates vary widely, with some posts from early 2025 suggesting that 60% to 85% of accounts could be bots, while others peg it around 15% or 64%. These bots, particularly the malicious ones, are implicated in:

• Spreading fake news and misinformation
• Manipulating public opinion and political propaganda
• Engaging in scams and spamming
• Causing ad sales volatility and diminishing advertisers' return on investment

Twitter, under Elon Musk's leadership, has undergone numerous changes, with rules and policies shifting frequently. While Twitter has implemented measures like detecting and suspending malicious bot accounts and introducing bot labels for transparency, a former security chief, Peiter Zatko, alleged "extreme, egregious" cybersecurity vulnerabilities, claiming that nearly half of Twitter's employees had access to critical software, making it highly susceptible to hacks. He also alleged that Twitter misled the public about the number of fake accounts and bots on its platform. The Political Studies Association asserts that despite Twitter's efforts, these measures are "not enough" because sophisticated bots can bypass safeguards, and even simple bots can survive for thousands of tweets. Furthermore, the sheer volume of automated content makes it nearly impossible for humans to correct all false information, and corrections may not be seen due to the platform's structure.

The constant issues, including data breaches, bot proliferation, and the potential for information warfare, contribute to a sense of frustration and skepticism among users and even insiders, as conveyed by Alberto. Despite Twitter's claims of taking privacy seriously and implementing new policies, critics argue that the actual fixes are either too slow or indicative of a deeper issue, possibly even incompetence or a desire for manipulation. This situation leaves the platform's integrity and its role as a reliable source of information in question.

ALBERTO DANIEL HILL

https://x.com/ADanielHill

https://linktr.ee/adanielhill

Ciberseguridad en Uruguay, según lo analizado en las fuentes:

• Justicia:

  • Las autoridades uruguayas, principalmente a través de AGESIC, CERTuy y la Unidad de Cibercrimen de la Policía Nacional, han respondido a estos ataques. Se han iniciado investigaciones y se han realizado arrestos, como en el caso del incidente de la DNIC.
  • Uruguay ha fortalecido su marco legal y regulatorio con la Estrategia Nacional de Ciberseguridad 2024-2030 y el Decreto 66/025, promulgado en febrero de 2025, que establece obligaciones claras para entidades públicas y privadas críticas en cuanto a informes de incidentes y adopción del Marco de Ciberseguridad de AGESIC. También se está avanzando en una nueva legislación que tipifica nuevas categorías de ciberdelitos y aumenta las penas para los existentes.
  • Además, Uruguay ha aceptado la invitación a adherirse al Convenio de Budapest sobre Ciberdelincuencia, un paso clave para mejorar la cooperación internacional en la persecución de ciberdelincuentes transnacionales.
  • Sin embargo, figuras como el experto en ciberseguridad Alberto Daniel Hill y el hacker "gov.eth" han criticado la falta de transparencia en los procesos judiciales, la percepción de que las autoridades persiguen "chivos expiatorios" como el joven "Vlatty" en lugar de las verdaderas organizaciones criminales, y una supuesta incompetencia de las fuerzas del orden en crímenes informáticos.

• Medios de Comunicación:

  • Los medios de comunicación desempeñaron un papel importante en la difusión de información sobre estos ciberataques, a menudo reportando tanto las afirmaciones de los hackers como las declaraciones oficiales.
  • No obstante, se ha observado una variabilidad en la transparencia y puntualidad de las divulgaciones oficiales. En algunos casos, como las fugas de datos del MIDES o la supuesta fuga de AGESIC, empresas de seguridad externas fueron las primeras en reportar públicamente las brechas, lo que a menudo precedió o impulsó las declaraciones oficiales.
  • Existe una "batalla por la percepción" y un posible "déficit de confianza en la ciberseguridad" entre la población uruguaya. Cuando las comunicaciones oficiales se demoran o se perciben como incompletas, y los atacantes o terceros son más rápidos en revelar detalles de las brechas, los ciudadanos pueden depender más de fuentes no oficiales, lo que podría erosionar la confianza en la capacidad del gobierno para proteger los datos y comunicarse de manera transparente.
  • Alberto Daniel Hill criticó la falta de "cero bola" (ninguna atención) por parte de los principales medios a las explicaciones directas de los hackers, a pesar de sus esfuerzos por proporcionar información y pruebas a través de plataformas como Twitter Spaces y etiquetando a periodistas.

• Narrativas del Hacking:

  • Los actores de la amenaza han utilizado diversos canales para comunicar directamente sus acciones y mensajes, incluyendo defacements de sitios web y publicaciones en foros como BreachForums.
  • El alias "gov.eth" ha sido recurrentemente asociado con varios incidentes, aunque parece representar a diferentes individuos o grupos con motivaciones variadas.
  • Las motivaciones de los hackers son diversas: desde el lucro (Grupo Alfa en Paysandú), hasta el activismo o la protesta política (LaPampaLeaks, BogotaLeaks, Uruguay1337 en DINACIA, con mensajes anti-progresistas y anti-corrupción), o incluso la exposición de vulnerabilidades y la "justicia" (en referencia a la situación de "Vlatty", como mencionan "gov.eth" y Alberto Daniel Hill).
  • Se observa una contradicción entre las narrativas de los hackers (que a menudo afirman un acceso profundo y exponen vulnerabilidades) y las declaraciones oficiales (que tienden a minimizar la gravedad de las brechas). Esta asimetría en la comunicación permite a los atacantes dar forma a la percepción pública inicial de un evento.

ALBERTO DANIEL HILL

https://x.com/ADanielHill

https://linktr.ee/adanielhill

Uruguay presents a complex cybersecurity landscape, showcasing a paradoxical situation where its high regional standing in cybersecurity maturity coexists with a significant surge in detected cyber incidents and notable discrepancies in the public narratives surrounding these attacks. This "cybersecurity trust deficit" is further exacerbated by the gaps between official and media portrayals of incidents versus the explanations offered by hackers like "gov.eth".Uruguay's Cybersecurity Position and the Apparent Paradox: Uruguay has achieved a strong position in global cybersecurity benchmarks, ranking as the second-best in Latin America in the 2024 Global Cybersecurity Index (GCI) with an overall score of 18.93 out of 20, just behind Brazil. This high ranking reflects its strengths in areas such as Technical Measures (perfect 20/20 score), indicating advanced infrastructure, a national Computer Security Incident Response Team (CERTuy), and incident response readiness. It also excels in Organizational Measures (19.13), demonstrating a robust national strategy and coordination, and Capacity Development (19.45), showing commitment to training and awareness.However, this strong posture seemingly contradicts the alarming increase in cyber incidents. In 2024, CERTuy, managed by AGESIC, reported 14,264 cyber incidents, nearly tripling the 4,968 aggressions in 2023. This represents a 65% increase from 2023. While this volume appears concerning, official sources, including AGESIC Director Hebert Paguas, attribute this surge not solely to a worsening threat environment but also, critically, to Uruguay's improved detection capabilities, better tools, and methodologies. The establishment of a 24/7 Security Operations Center (SOC) in 2016 and continuous enhancements have provided a more sensitive sensor grid, allowing the nation to detect and catalog a vast number of low-level attacks previously unseen. Thus, the high incident count paradoxically indicates a "visibility dividend" and institutional maturity.Despite improved detection, the landscape is genuinely heightened, with incidents ranging from phishing and unauthorized access to malware installations and proactive breaches. Only 0.48% of the 14,264 incidents in 2024 were classified as "high" or "very high" severity, but these critical events carry a disproportionately large financial impact, with an average immediate mitigation cost of USD $75,000 per incident. This figure, however, represents only the immediate containment and excludes long-term recovery, reputational damage, and business interruption costs, which international analyses show can be much larger.Recent Hacks and Narrative Gaps: The period between 2024 and 2025 witnessed several significant cyberattacks against Uruguayan government entities, which created distinct conflicting narratives between official reports, media coverage, and the hackers themselves.1. Hacker's Perspective (Gob Athereum/Alberto Daniel Hill): A prominent hacker using the alias "Gob Athereum" claimed responsibility for some defacement incidents, offering a perspective that sharply contrasted with official accounts.•

ALBERTO DANIEL HILL

https://x.com/ADanielHill

https://linktr.ee/adanielhill

This document is an eBook titled "Underground: Hacking, madness and obsession on the electronic frontier" by Suelette Dreyfus, with Julian Assange credited as a researcher. Released in 2003 and last updated in 2024, the text explores the world of computer hacking and phreaking through a collection of true stories focusing on individual hackers and their interconnected experiences within the international computer underground. It details various incidents, including the WANK worm attack on NASA, the legal repercussions faced by hackers in different countries, and the personal lives and motivations of those involved, often highlighting their rebellious nature and intellectual drive. The material also touches upon the evolution of hacking techniques, the challenges of law enforcement in dealing with cybercrime, and the psychological aspects of this subculture.

ALBERTO DANIEL HILL

https://x.com/ADanielHill

https://linktr.ee/adanielhill

November 2021: Direct Interaction with Interpol (Pivotal Moment)

• Hill visits Interpol's Uruguay offices to retrieve seized belongings and opens a live Twitter Space to document his experience.
• Astonishing Request: The Director of Computer Forensics at Interpol Uruguay (the same official who questioned Hill during his arrest and denied knowledge of his past reports) approaches Hill live on the space and asks him to teach Interpol staff about cryptocurrencies and online fraud tactics. He admits their cybercrime unit has no idea how to deal with fraud on platforms like Mercado Libre.

Cybermidnight Club Podcast Analytics Report.

The source showcases a data analysis project focused on the performance of a Spotify podcast titled "Cybermidnight Club." It begins by illustrating Python code utilizing the pandas library to load and inspect podcast data from a CSV file, revealing information about columns like "Hora (UTC)," "Reproducciones" (Plays), "Streams," "Horas de consumo" (Consumption Hours), and "Seguidores" (Followers). Subsequent code demonstrates data cleaning (filling missing values), descriptive statistics, and the generation of visualizations using matplotlib, including time-series plots for plays and followers, and a scatter plot comparing plays to streams. Finally, the source presents a summary of key podcast metrics and provides interpretations of the generated graphs, offering insights into the podcast's reach and growth.

The "Cyber Midnight Club" is a trailblazing daily True Crime podcast hosted by Alberto Daniel Hill, a Uruguayan cybersecurity expert. It boasts over 100,000 plays across all platforms, including 12,000 plays on Spotify. Launched in December 2018, the podcast features 522 episodes with an average length of about one hour.

The podcast's unique content is largely drawn from raw, unscripted, live conversations that unfold organically in Twitter (now X) Spaces, hosted by Hill. Hill's compelling personal story is central to the podcast's authenticity and impact. He experienced profound trauma, first as Uruguay's pioneering IT expert working on child exploitation cases, which "poisoned his worldview" and led to severe burnout. Later, he was unjustly imprisoned for eight months in 2017 for a computer crime he vehemently denies committing, becoming the first person in Uruguay jailed for such an offense. During this period, the media "completely destroyed his image" and "doxed" him, effectively silencing him in traditional media.

After his release, Hill leveraged his cell phone as his "most valuable asset" to connect with a global audience on Twitter, realizing that if his country of "only 3 million people might not listen," "there are 78 billion people out there that are willing to listen to my story". His use of social media evolved from an "unfiltered outpouring" of anger into a "calculated strategic move for global reach and ultimately vindication and impact".

A core element of his approach is "radical transparency," where he openly shares profoundly personal details, including past mistakes and his own experiences with cyberattacks (e.g., admitting to being hacked and even "hacked myself out of curiosity once"). This candor immediately disarms skepticism and builds immense trust, creating a safe space for others to share vulnerable stories, and allowing him to leverage his firsthand knowledge of criminal methodologies to prevent future harm. He credits an "epiphany" from interacting with victims for understanding the damage he had done, which now fuels his fervent advocacy.

The podcast, drawing from these spontaneous Twitter Spaces, covers a vast array of urgent and complex topics, including:

• Sophisticated criminal operations like alleged cartel exploitation of Mexico City's surveillance cameras to target FBI informants.
• Digital deception and scams, exploring psychological and technological aspects, including the use of AI deep fakes.
• Legal and justice system flaws, such as the perceived injustices in cases like his associate "Vladi's" detention, and the "glaring lack of cyber security expertise within legal systems across Latin America".
• Advanced surveillance technologies and privacy concerns, with claims of grave vulnerabilities in Apple and Android operating systems and implied government-corporate collusion.
• Hacktivism and digital activism, delving into the decentralized nature of Anonymous, threats like state actor infiltration, and exposing the dark web.

Alberto Daniel Hill's advocacy has had a significant, tangible impact on Uruguay's cybersecurity and legal system. His personal ordeal serves as a "living, breathing example" of systemic flaws. As a result, former directors of cybersecurity at Interpol and Uruguay's CERT, and the head of security for the presidency, have been removed or replaced. A completely new, dedicated cybersecurity unit with trained professionals and a cybercrime prosecutor familiar with his case have been established. Hill is now being asked to advise the Uruguayan Congress on new cybersecurity laws. He actively combats the "shame and victim blaming" that prevent people from reporting cybercrimes, emphasizing that his story can "save just one person from being hurt". His journey exemplifies how personal trauma and digital platforms can be leveraged for widespread advocacy and systemic change.

Alberto Daniel Hill's podcast, "Cyber Midnight Club," launched in December 2018

Personal trauma and digital platforms can be leveraged for widespread advocacy and systemic change through a multi-faceted process that involves radical transparency, community building, and the strategic dissemination of raw, authentic narratives. Alberto Daniel Hill's journey provides a compelling real-world case study for this transformation.

Here's how this leveraging occurs:

• Initial Trauma and Silencing: Alberto Daniel Hill experienced profound personal and professional trauma, including his harrowing work with child exploitation material that "poisoned his worldview" and led to severe burnout. Later, he was unjustly imprisoned for a computer-related crime he denies committing, becoming Uruguay's first person jailed for such an offense. During this time, the media "completely destroyed his image," painting him as "the worst cyber criminal" and doxing him, effectively turning him into a public pariah and stripping him of his identity. Critically, traditional media outlets in Uruguay refused to give him a voice, leaving him "effectively silenced".

• Turning to Digital Platforms for Expression and Global Reach: With local avenues for truth closed, Alberto's "most valuable asset" upon release was his cell phone, which became his "immediate tangible connection to the outside world" and soon, his "connection to a global audience". He realized that while his country of 3 million might not listen, "there are 78 billion people out there that are willing to listen to my story". This strategic revelation redefined his path forward.

• Evolution from Emotional Outpouring to Strategic Advocacy:

  • Raw Emotional Release: Initially, Alberto used Twitter as an "unfiltered outpouring" for his feelings of "hate and anger" towards the system and the injustice he felt. This served as a "vital coping mechanism" to release immense pressure.
  • Strategic Purpose: He recognized that these negative emotions, while natural, wouldn't help him move forward constructively. After years, especially once his legal case closed in early 2022, he began to process and accept his losses without internal pain. This marked a "profound internal transformation". The realization that the "digital world offers boundless possibility" despite his local world shutting him out, transformed his use of the platform from a "desperate emotional outlet to a calculated strategic move for global reach and ultimately vindication and impact".
  • Organic Growth of Twitter Spaces: He started an "initial test space" on Twitter, originally with a sarcastic intent about romance scams. However, an "unplanned convergence of victims, former criminals, and experts" joined, turning the discussion into a "serious, profoundly empathetic discussion platform" with "organic depth and raw candor". This revealed a huge unmet need for "raw, direct, unscripted conversations" on sensitive topics.

• Radical Transparency and Authenticity as a Foundation for Trust:

  • Deliberate Tactical Core: Alberto adopted "radical transparency" as a "deliberate tactical core theme". He openly shared "profoundly personal detail," including past mistakes and experiences with cyber attacks (e.g., admitting "I have been hacked" and even "hacked myself out of curiosity once").

Este informe ofrece una descripción general y un análisis del uso exhaustivo de X Spaces por parte de @ADanielHill, destacando su importante presencia como profesional de la ciberseguridad en la plataforma desde octubre de 2020. Detalla la frecuencia y consistencia de sus Spaces, señalando un aumento reciente en la actividad. El análisis examina además sus colaboraciones con diversos oradores, el alto valor y el compromiso de sus discusiones, y ofrece una comparación con cuentas similares dentro de la comunidad de ciberseguridad. En general, el informe muestra la interacción dinámica e influyente de @ADanielHill en X Spaces, lo que refleja su estrategia en evolución para la interacción comunitaria y el alcance profesional.