On Friday, the defendant in an ongoing case involving hacking into and leaking details from Nintendo's servers plead guilty to his charges. 21-year old Ryan Hernandez, otherwise known as RyanRocks, was brought up on charges of illegally obtaining information from Nintendo's servers, and for possession of child pornography. Originally, Hernandez's first offense was back in 2016--when he was still a minor at the time--where he managed to use a phishing technique in order to get ahold of a Nintendo employee's credentials to download pre-release promotional information about the Nintendo Switch, and then distribute it to the public.

His actions were reported to the FBI, who then visited Hernandez in the following year, informing him that he needed to stop the malicious and illegal behavior. Hernandez promised that he wouldn't continue to do such things, but the warnings were quickly disregarded, as in 2018, he hacked directly into Nintendo servers, once again obtaining information that he broadcast to others across the internet, even bragging publically about his exploits. In the middle of 2019, the FBI once again visited Hernandez, seizing technology involved in the hack, along with hard drives and "circumvention devices used to access pirated video games and software". It was there that not only did the FBI find the ill-gotten Nintendo files, but also hundreds of child pornography-related media.

Nevertheless, from at least June 2018 to June 2019, HERNANDEZ returned to his malicious activities, hacking into multiple Nintendo servers and stealing confidential information about various popular video games, gaming consoles, and developer tools. HERNANDEZ boasted about his hacking exploits on several online and social media platforms, such as Twitter and Discord, and leaked some of the stolen information to others. HERNANDEZ further operated an online chat forum called “Ryan’s Underground Hangout” in which he and others discussed Nintendo products and shared information about possible Nintendo network vulnerabilities, and on which he shared some of the confidential information he had stolen.

The maximum sentence for illegally hacking is only 5 years in prison, while possession of child pornography is a far greater issue, and has a maximum prison time of 20 years. Due to Hernandez's guilty plea, the lawyers involved with the case have recommended a sentence of 3 years, though this could be altered by the judge at the time of sentencing, which will take place on April 21, 2020. Additional stipulations to the case also include Hernandez agreeing to pay $259,323 in damages to Nintendo, and being forced to register as a sex offender, once he is free from prison.

Under the terms of the plea agreement, prosecutors and defense attorneys, will recommend three years in prison. However, the ultimate sentence is up to the judge and could be up to the statutory maximums of 5 years in prison for computer fraud and abuse, and 20 years in prison for possession of child pornography.

HERNANDEZ has agreed to pay $259,323 in restitution to Nintendo for the remediation costs caused by his conduct. Under the terms of the plea agreement, HERNANDEZ also will be required to register as a sex offender following his conviction.

The case was investigated by the FBI, Seattle Cyber Task Force. The case is being prosecuted by Assistant United States Attorney Steven Masada.

Source

 

[Joom]

How do we really know the FBI didn't plant the CP to make it seem like a bigger bust? A federal agent got caught sniffing a 3 year old's panties, it wouldn't shock me too much anymore.

Could have happened. They let him go the first time because they probably recognized that he wasn't a real hacker, but could act as a useful idiot thanks to his big ego. That just screams "informant" to me. So, he ran out his usefulness, and the FBI now wants to make sure he just gets buried in the legal system.

The hacking one? Yeah, fuck him.
Sounds like a dumbass hacker if he didn't have encryption and failsafes to prevent being caught, though.

He was a script kiddy at best. Also, sex crimes and technology crimes are treated much differently for obvious reasons. Sure, Nintendo was "hurt" here, but not in the same way that sex victims are. 5 years is a common sentence for many crimes in the US; from drugs to not paying your taxes. They weigh the actual damage of the crime. The reason why people tend to go away for longer for these lesser crimes, though, is because they commit several of them at once. Not to mention, he has to pay $250k to Nintendo. So there's that, too.

 

[MikaDubbz]

How do we really know the FBI didn't plant the CP to make it seem like a bigger bust? A federal agent got caught sniffing a 3 year old's panties, it wouldn't shock me too much anymore.

But why though? What makes this case so special that they should needlessly tack on some pedo charges here? Isn't it more possible that this douche just also happens to be a pedo creep? People can have multiple aspects to how they are, including being some sort of hacker and being a pedo at the same time.

 

[the_randomizer]

Can people stop using phishing attacks and hacking into nintendo and threatening to leak massive amounts of data



Failoverflow tease a lot more than they release but they do release stuff sometimes

I don't exactly have a lot of faith in them since the Wii U era

 

[Joom]

But why though? What makes this case so special that they should needlessly tack on some pedo charges here? Isn't it more possible that this douche just also happens to be a pedo creep? People can have multiple aspects to how they are, including being some sort of hacker and being a pedo at the same time.

See, the thing with script kiddies is that they weasel their way into circles with bigger fish. The FBI could have thought that he'd lead them to a nice payday since he managed to phish someone important, but probably didn't act alone. Now that he isn't useful, might as well ruin his life to the fullest extent just to do away with him like he's garbage. After Epstein, is any of this not plausible? I mean, according to other articles I've read, he had it in a folder on his desktop named "Bad Stuff". That amount of carelessness comes off as really convenient.

 

[MikaDubbz]

See, the thing with script kiddies is that they weasel their way into circles with bigger fish. The FBI could have thought that he'd lead them to a nice payday since he managed to phish someone important, but probably didn't act alone. Now that he isn't useful, might as well ruin his life to the fullest extent just to do away with him like he's garbage. After Epstein, is any of this not plausible?

I just don't understand the mentality that there has to be a conspiracy here, and that things can't just be what they are at face value in this situation. If I saw any indication that some sort of conspiracy has taken place here, I'd be at least intrigued and consider the possibility of said conspiracy. But in this case, all I'm hearing is, "This COULD have happened this way and they're not telling us that, so let's assume that's how it is."

 

[Joom]

I just don't understand the mentality that there has to be a conspiracy here, and that things can't just be what they are at face value in this situation. If I saw any indication that some sort of conspiracy has taken place here, I'd be at least intrigued and consider the possibility of said conspiracy. But in this case, all I'm hearing is, "This COULD have happened this way and they're not telling us that, so let's assume that's how it is."

The only reason I'm speculating these things is because it's incredibly suspicious that he was just given a slap on the wrist for a felony. I made this point in another post above. As someone that's been heavily involved in the malware and underground infosec scene for quite a long while, it's not the first time I've seen the FBI use a loudmouth as their rat.

 

[MikaDubbz]

The only reason I'm speculating these things is because it's incredibly suspicious that he was just given a slap on the wrist for a felony. I made this point in another post above.

3 years for having a folder of CP seems pretty typical honestly.

 

[Joom]

3 years for having a folder of CP seems pretty typical honestly.

He's getting 20 years for that (possibly more if the judge bases the sentence on the individual images). The slap on the wrist I'm referring to is the fact that the FBI already confronted him once on Nintendo's behalf, and he promised to be a good boy. Also, read my edit. He frequented places like HackForums, which is a known honeypot for law enforcement because it's nothing but kids wanting to be 1337 h3krs.

 

[MikaDubbz]

He's getting 20 years for that (possibly more if the judge bases the sentence on the individual images). The slap on the wrist I'm referring to is the fact that the FBI already confronted him once on Nintendo's behalf, and he promised to be a good boy. Also, read my edit. He frequented places like HackForums, which is a known honeypot for law enforcement because it's nothing but kids wanting to be 1337 h3krs.

20 years is the max he could serve, but the lawyers involved with the case have recommended a sentence of 3 years, though this could be altered by the judge at the time of sentencing, which will take place on April 21, 2020.

Regardless, none of that really indicates to me conspiracy. Seems more like a dude that did stuff he shouldn't do over and over thinking he was so smart that he'd never get caught.

 

[Joom]

Seems more like a dude that did stuff he shouldn't do over and over thinking he was so smart that he'd never get caught.

The perfect patsy, heh. I know this kind of conspiracy is really out there in the video game world, but in blackhat, not so much.

 

[MikaDubbz]

The perfect patsy, heh.

Or that's just legit how it is...

 

[Joom]

Or that's just legit how it is...

I mean sure. But like I said, this isn't the first case of this happening.

 

[MikaDubbz]

I mean sure. But like I said, this isn't the first case of this happening.

I guess, but it's not like this scene is pure and this is completely impossible. Look no further than TheCruel for that. He's proof that this very thing happens and isn't unheard of at all.

 

[Subtle Demise]

I just don't understand the mentality that there has to be a conspiracy here, and that things can't just be what they are at face value in this situation. If I saw any indication that some sort of conspiracy has taken place here, I'd be at least intrigued and consider the possibility of said conspiracy. But in this case, all I'm hearing is, "This COULD have happened this way and they're not telling us that, so let's assume that's how it is."

Well, it is kind of convenient that two people who crossed Nintendo just happened to be found with CP. It's somewhat common in the US for law enforcement at all levels to plant evidence. Maybe they wanted to look like heroes who caught a hacker pedophile who took on one of the biggest companies in the world. Another theory is that they were pinning their own crimes on some script kiddy nobody. In my eyes, the actual most logical series of events is that the "CP" in question is closer to what they call "jailbait". He wasn't old enough to be tried as an adult just a few years ago. He could have had lewd images of girls around his age, and if just one was 17 or younger, they can hit with the child porn charge.

 

[MikaDubbz]

Well, it is kind of convenient that two people who crossed Nintendo just happened to be found with CP. It's somewhat common in the US for law enforcement at all levels to plant evidence. Maybe they wanted to look like heroes who caught a hacker pedophile who took on one of the biggest companies in the world. Another theory is that they were pinning their own crimes on some script kiddy nobody. In my eyes, the actual most logical series of events is that the "CP" in question is closer to what they call "jailbait". He wasn't old enough to be tried as an adult just a few years ago. He could have had lewd images of girls around his age, and if just one was 17 or younger, they can hit with the child porn charge.

Wait, so you think TheCruel was set up too? I recommend you do some research on that guy before you start defending him.

 

[the_randomizer]

My question is, with civil lawsuits like this, how does one even pay 200K?

 

[sarkwalvein]

Mind the tinfoil hat, but I'm starting to believe that the FBI plants CP whenever they want to put a harmful hacker in jail.

 

[the_randomizer]

Mind the tinfoil hat, but I'm starting to believe that the FBI plants CP whenever they want to put a harmful hacker in jail.

And I thought I was cynical

 

[guisadop]

man, american laws are really messed up. 5 years for hacking and stealing private information, but 20 years for possessing/viewing some pictures?

 

[The Catboy]

Well, it is kind of convenient that two people who crossed Nintendo just happened to be found with CP. It's somewhat common in the US for law enforcement at all levels to plant evidence. Maybe they wanted to look like heroes who caught a hacker pedophile who took on one of the biggest companies in the world. Another theory is that they were pinning their own crimes on some script kiddy nobody. In my eyes, the actual most logical series of events is that the "CP" in question is closer to what they call "jailbait". He wasn't old enough to be tried as an adult just a few years ago. He could have had lewd images of girls around his age, and if just one was 17 or younger, they can hit with the child porn charge.

Lol, TheCruel was convicted of possessing CP years before he got involved with the scene and was caught the first time because he was posting on a public forum. This was in his criminal record and part of the second court case, which existed before he was part of the scene.
As for the idea of the FBI planting CP, your actual conspiracy makes no sense. There's no gain for them planting CP on his computer and really isn't backed up by any previous busts from the FBI. Looking up how many hackers were caught with child porn really only brought up 2 cases, this one and another one from 2017, including TheCruel, that only makes like 3 cases. This isn't that widespread an issue compared to the number of hackers caught without CP.

man, american laws are really messed up. 5 years for hacking and stealing private information, but 20 years for possessing/viewing some pictures?

Imagine dismissing an act of carrying CP as "some pictures," then thinking American law is what's messed up.