https://krebsonsecurity.com/2022/09/violence-as-a-service-brickings-firebombings-shootings-for-hire/ Advertisement [1] Advertisement [5] Krebs on Security Skip to content * Home * About the Author * Advertising/Speaking Violence-as-a-Service: Brickings, Firebombings & Shootings for Hire September 4, 2022 25 Comments A 21-year-old New Jersey man has been arrested and charged with stalking in connection with a federal investigation into groups of cybercriminals who are settling scores by hiring people to carry out physical attacks on their rivals. Prosecutors say the defendant recently participated in several of these schemes -- including firing a handgun into a Pennsylvania home and torching a residence in another part of the state with a Molotov Cocktail. Patrick McGovern-Allen of Egg Harbor Township, N.J. was arrested on Aug. 12 on a warrant from the U.S. Federal Bureau of Investigation. An FBI complaint alleges McGovern-Allen was part of a group of co-conspirators who are at the forefront of a dangerous escalation in coercion and intimidation tactics increasingly used by competing cybercriminal groups. Prosecutors say that around 2 a.m. on Jan 2, 2022, McGovern-Allen and an unidentified co-conspirator fired multiple handgun rounds into a residence in West Chester, Pa. Fortunately, none of the residents inside the home at the time were injured. But prosecutors say the assailants actually recorded video of the attack as "proof" that the shooting had been carried out. A copy of that video was obtained by KrebsOnSecurity. According to investigators, McGovern-Allen was one of the shooters, who yelled "Justin Active was here" as they haphazardly fired at least eight rounds into the lower story of the West Chester residence. On Dec. 18, 2021, police in Abington Township, Pa., responded to reports of a house fire from homeowners who said it sounded like something was thrown at their residence just prior to the fire. Weeks later, on the day of the shooting in West Chester, a detective with the Westtown East Goshen Police Department contacted the Abington police and shared another video that was circulating on several online message boards that appeared to show two individuals setting fire to the Abington Township residence. The criminal complaint said the two police officers agreed the same suspect was present in both videos. A copy of that video also was obtained by KrebsOnSecurity, and it shows at least two individuals smashing a window, then lighting a rag-soaked Mad Dog 20/20 grape wine bottle and hurling it at the side of the home [Update: My apologies for the file download link, but YouTube just deleted both of the videos included in this story -- for allegedly violating their community standards]. "The Molotov cocktail caused the immediate surrounding area to ignite, including the siding of the house, grass, and the wooden chair," the government's complaint against McGovern-Allen states. "The two suspects then fled on foot toward the street and begin yelling something when the video stops." The government mentions the victims only by their initials -- "K.M." in the shooting and "A.R." in the firebombing -- but said both had been the target of previous harassment by rival cybercriminal groups that included swatting attacks, wherein the perpetrators spoof a distress call to the police about a hostage situation, suicide or bomb threat with the goal of sending a heavily-armed police response to a targeted address. A number of previous swatting incidents have turned deadly. But these more "hands-on" and first person attacks are becoming increasingly common within certain cybercriminal communities, particularly those engaged in SIM swapping, a crime in which identity thieves hijack a target's mobile phone number and use that to wrest control over the victim's various online accounts and identities. The complaint mentions a handle and user ID allegedly used by McGovern-Allen's online persona "Tongue" on the Discord chat service, (user: "Tongue#0001"). "In the chats, [Tongue] tells other Discord users that he was the person who shot K.M.'s house and that he was willing to commit firebombings using Molotov Cocktails," the complaint alleges. "For example, in one Discord chat from March 2022, [the defendant] states 'if you need anything done for $ lmk ["let me know"]/I did a shooting /Molotov/but I can also do things for ur entertainment." KrebsOnsecurity reviewed hundreds of chat records tied to this Tongue alias, and it appears both attacks were motivated by a desire to get back at a rival cybercriminal by attacking the female friends of that rival. Recall that the shooters in the West Chester, Pa. incident shouted "Justin Active was here." Justin Active is the nickname of an individual who is just as active in the same cybercriminal channels, but who has vehemently denied knowledge of or participation in the shooting. Justin Active said on Telegram that the person targeted in the shooting was his ex-girlfriend, and that the firebombing targeted another friend of his. Justin Active has claimed for months that McGovern-Allen was responsible for both attacks, saying they were intended as an intimidation tactic against him. "DO THE PATRICK MCGOVERN ALLEN RAID DANCE!," Justin Active's alias "Nutcase68" shouted on Telegram on Aug. 12, the same day McGovern-Allen was arrested by authorities. Justin Active's version of events seems to be supported by a reference in the criminal complaint to an April 2, 2022 chat in which Tongue explained the reason for the shooting. "The video/is [K]'s house/getting shit/shot/justin active/ was her current bf/ the reason it happened," Tongue explained. "So that's why Justin active was there." The Telegram chat channels that Justin Active and Tongue both frequented have hundreds to thousands of members each, and some of the more interesting solicitations on these communities are job offers for in-person assignments and tasks that can be found if one searches for posts titled, "If you live near," or "IRL job" -- short for "in real life" job. [simrealm-e] A number of these classified ads are in service of performing "brickings," where someone is hired to visit a specific address and toss a brick through the target's window. "If you live near Edmonton Canada dm me need someone bricked," reads on Telegram message on May 31, 2022. "If you live near [address redacted] Lakewood, CA, dm [redacted] Paying 3k to slash the tires," reads another help wanted ad in the same channel on Feb. 24, 2022. "If you live near here and can brick them, dm [address omitted] Richland, WA," reads another from that same day. [callers] McGovern-Allen was in the news not long ago. According to a Sept. 2020 story from The Press of Atlantic City, a then 19-year-old Patrick McGovern Allen was injured after driving into a building and forcing residents from their home. "Police found a 2007 Lexus, driven by Patrick McGovern-Allen, 19, that had lost control and left the road, crashing into the eastern end of the 1600 building," the story recounted. "The car was driven through the steps that provide access to the second-floor apartments, destroying them, and also caused damage to the outer wall." [ma-housecrash] A search on the Inmate Locator of the U.S. Bureau of Prisons website shows that McGovern-Allen remains in federal custody at a detention facility in Philadelphia. He's currently represented by a public defender who has not responded to requests for comment. A copy of the criminal complaint against McGovern-Allen is available here (PDF). ANALYSIS Many of the individuals involved in paying others to commit these physical attacks are also frequent participants in several Telegram channels focused singularly on SIM swapping activity. As a result, the vast majority of the people being targeted for brickings and other real-life physical assaults tend to be other cybercriminals involved in SIM swapping crimes (or individuals on the periphery of that scene). There are dozens of SIM swappers who are now teenage or 20-something millionaires, by virtue of having stolen vast sums of cryptocurrencies from SIM swapping victims. And now many of these same individuals are finding that communities like Telegram can be leveraged to hire physical harassment and intimidation of their rivals and competitors. The primary barrier to hiring someone to brick a home or slash some tires seems to be the costs involved: A number of solicitations for these services advertised payment of $3,000 or more upon proof of successful completion, which usually involves recording the attack and hiring a getaway driver in the town where the crime is to take place (calling a cab or hailing an Uber from the scene of a bricking isn't the brightest idea). My fear is these violence-as-a-service offerings will at some point migrate outside of the SIM swapping communities. This is precisely what happened with swatting, which for years was a crime perpetrated almost exclusively against online gamers and people streaming their games online. These days, swatting attacks are commonly used by SIM swapping groups as a way to harass and extort regular Internet users into giving up prized social media account names that can be resold for thousands of dollars. This entry was posted on Sunday 4th of September 2022 10:59 AM A Little Sunshine Ne'er-Do-Well News SIM Swapping Web Fraud 2.0 bricking firebombing molotov cocktail Patrick McGovern-Allen SIM swapping SWATting Tongue Post navigation - Final Thoughts on Ubiquiti 25 thoughts on "Violence-as-a-Service: Brickings, Firebombings & Shootings for Hire" 1. debt September 4, 2022 FREE RYAN Reply - 2. Ian September 4, 2022 Hiring people to "brick" or shoot someone's house sure seems like a good way to get the feds attention Reply - 1. Dritan Kapllani Jr. September 4, 2022 some guy named dritan did this Reply - 3. FREEPAT September 4, 2022 FREE PAT TILL ITS BACKWARDS Reply - 1. harmful nigga 112 September 4, 2022 Pat will never be freed, hes done for man. Reply - 4. blockchain monster September 4, 2022 wow this is crazy #justin knacker #W #L egirls Reply - 5. Liam Yousri September 4, 2022 #ACG ON TOP Reply - 6. Michelle Gomez September 4, 2022 Now that explains why there's always a shooting when congress wants to ban guns further Reply - 1. Wannabe techguy September 4, 2022 What? Reply - 7. Dritan Kapllani Jr. September 4, 2022 I dropped out of the 9th grade to become a call slave. Reply - 8. meow meow September 4, 2022 free gang- att slave4lyfe Reply - 9. Bob Brown September 4, 2022 YouTube has removed one of the videos. Might want to edit the story or host the video elsewhere. Reply - 10. Luqman Gouled September 4, 2022 Im the original com driller top scorer top striker M1 my bro never got chinged he never begged for his life Reply - 11. RAAH September 4, 2022 FREE PAT Reply - 12. darwin love the kids September 4, 2022 these fellas missed their true calling in tide pod / cinnamon / wall socket challenges hope prison food is your jam dawg - epic prank cell block status includes free tuneups Reply - 13. targhitta September 4, 2022 krebs u baldheaded aaahh dude stop talkin sweet bout my boy Reply - 14. seth b September 4, 2022 arnout lin(ethan hooley) & ryan stenwick were the culprits who paid him to do it. Reply - 15. Catwhisperer September 4, 2022 D4CaaS (Dirty Deeds Done Dirt Cheap as a Service) is nothing new, with organizations going back centuries that specialized in that product. The Internet and cryptocurrency, however, gives the idea another dimension that harkens back to the time of the Nizari. These guys were rank amatures, with bad opsec. I'm sure that is not always the case. All an onion link away... Reply - 16. Tech wannabe September 4, 2022 Excuse my ignorance, but how does "Swatting" keep happening? Don't the cops even think twice? Or don't they care? Reply - 1. . September 4, 2022 partially ignorance, although a lot of swatting calls are actually pretty close to what you would also hear from someone trying to commit suicide by cop. it's pretty wacky. Reply - 1. Tech wannabe September 5, 2022 Cops just shooting someone who doesn't have a clue what's going on is wacky too! Reply - 17. Dritan Kapllani Jr. September 4, 2022 so what if im a call slave? Reply - 18. Dritan brother September 4, 2022 Dritan Kapllani Jr. did this Reply - 19. Justin Layne Clay September 5, 2022 free pat he aint mean to do it foreal -Justin Active was here Reply - 20. Tijhd September 5, 2022 Harming / killing someone because of some 'uncontrollable' urge or rage is horrible enough, but doing so because they get paid for it... is one reason I can still support the death penalty. Reply - Leave a Reply Cancel reply Your email address will not be published. Required fields are marked * [ ] [ ] [ ] [ ] [ ] [ ] [ ] Comment * [ ] Name * [ ] Email * [ ] Website [ ] [Post Comment] [ ] [ ] [ ] [ ] [ ] [ ] [ ] D[ ] Advertisement [7] Advertisement Mailing List Subscribe here Search KrebsOnSecurity Search for: [ ] [Search] Recent Posts * Violence-as-a-Service: Brickings, Firebombings & Shootings for Hire * Final Thoughts on Ubiquiti * How 1-Time Passcodes Became a Corporate Liability * PayPal Phishing Scam Uses Invoices Sent Via PayPal * When Efforts to Contain a Data Breach Backfire Spam Nation Spam Nation A New York Times Bestseller! Thinking of a Cybersecurity Career? Thinking of a Cybersecurity Career? Read this. All About Skimmers All About Skimmers Click image for my skimmer series. Story Categories * A Little Sunshine * All About Skimmers * Ashley Madison breach * Breadcrumbs * Data Breaches * DDoS-for-Hire * Employment Fraud * How to Break Into Security * Latest Warnings * Ne'er-Do-Well News * Other * Pharma Wars * Ransomware * Russia's War on Ukraine * Security Tools * SIM Swapping * Spam Nation * Target: Small Businesses * Tax Refund Fraud * The Coming Storm * Time to Patch * Web Fraud 2.0 The Value of a Hacked PC valuehackedpc Badguy uses for your PC Badguy Uses for Your Email Badguy Uses for Your Email Your email account may be worth far more than you imagine. Donate to Krebs On Security Most Popular Posts * Sextortion Scam Uses Recipient's Hacked Passwords (1076) * Online Cheating Site AshleyMadison Hacked (798) * Sources: Target Investigating Data Breach (620) * Trump Fires Security Chief Christopher Krebs (534) * Why Paper Receipts are Money at the Drive-Thru (530) * Cards Stolen in Target Breach Flood Underground Markets (445) * Reports: Liberty Reserve Founder Arrested, Site Shuttered (416) * Was the Ashley Madison Database Leaked? (376) * DDoS-Guard To Forfeit Internet Space Occupied by Parler (374) * True Goodbye: 'Using TrueCrypt Is Not Secure' (363) Why So Many Top Hackers Hail from Russia [computered-580x389] Category: Web Fraud 2.0 Criminnovations Innovations from the Underground [shreddedID-copy-285x189] ID Protection Services Examined Is Antivirus Dead? Is Antivirus Dead? The reasons for its decline The Growing Tax Fraud Menace The Growing Tax Fraud Menace File 'em Before the Bad Guys Can Inside a Carding Shop Inside a Carding Shop A crash course in carding. Beware Social Security Fraud Beware Social Security Fraud Sign up, or Be Signed Up! How Was Your Card Stolen? How Was Your Card Stolen? Finding out is not so easy. Krebs's 3 Rules... Krebs's 3 Rules... ...For Online Safety. (c) Krebs on Security