Uncovered

with 7 comments

The Sabu Connection

Handle: Sabu
Aliases: Xavier De Leon, Xavier Kaotico, Xavier Monsegur, Sabu
Real Name: Hector Xavier Monsegur
Race: Puetro Rican
Last Known Location:
***Address Purposely Withheld***
New York City
Family: ***Information Purposely Withheld***
AIM: Encryption (last publicly known sn)
Twitter: @anonymouSabu
Notes: Python, php, perl. Politically motivated even in years past. Active in AOL ‘hacking’ scene during 90s. Searches reveal several published vulnerablities, exploits and code from 90s and on, including AOL. Intelligent writer when publicly speaking but when in private conversations and non-public forums frequently uses slang normally associated with African-Americans and Puerto Ricans. Consistent dialect and word usage throughout old and new writings. Associated with other hackers from same era, many references to Nullbyte aka Haris Tahir. Nullbyte’s personal blog links to XavSec’s blog under the category ‘Lost Souls.’ Tahir’s blog makes direct reference to Anonymous & LulzSec, obviously a supporter (specifically of OpMalaysia among others). Pure-elite is seen in websites, mailing list posts and IRC. Gamer referenced by #ps3test chat logs linked to prvt.org. Prvt.org appears in several places. New York Giants fan, which coincides with NYCPug, NY perl/python lists, etc. Operated several websites and maintained personal blogs.  Several talks with insiders and self-proclaimed friends have described him as Puerto Rican and have provided the first name ‘Hector’. References to Hamas, Palestine and Middle East. Quote usages in Twitter feed have direct word-for-word correlation with older forum and mailing list posts.

Email Addresses: (past and present)
Xavier@tigerteam.se
Xavier@sentinix.org
Sabu@sentinix.org
Xavier@nycpug.net
Xavier@Intifadah.org
R.Ahmed@safe-mail.net
Xavier@pure-elite.org
Sabu@pure-elite.org
Xavier@sabu.net
Sabu@mad.scientist.com
Monsegur@mad.scientist.com
Sabu@prvt.org
Compromise@gmail.com
X*************R@gmail.com (exact address unknown but Xavier[ ]Monsegur fits perfectly)

Websites: (past and present)
Twitter.com/anonymouSabu
Tigerteam.se
Sentinix.berlios.de
Sentinix.org
Nycpug.net
Intifadah.org
Myspace.com/Intifada
Sabu.net
Pure-Elite.org
Gfy.com (Member of forum)
XavSec.Blogspot.com
Flickr.com/photos/38442511@N00
Several Google Profiles
Prvt.org

Pictures:

Website Screenshots: (some images credited to Sabu.pdf by @Le_Researcher, validated and reused to save time)


Pure-elite.org | Notice the poster named ‘erika’
‘Erika’ comments on myspace

Sabu.net

Personal blog

Sentinix

Sabu offers python help

NY Giants fan

Went by Sabu during aol days
Politically motivated defacement referencing Puerto Rico

Xavier starting NYC group

There are many more connections made that were taken down in hand written notes, which will not be scanned and uploaded. The complete set of all digital research, notes and images is available in the Research section of this website.
Specific personal information has been withheld to avoid harm to non-involved family members and others.
The majority of this information was found using open source intelligence methods. Some specific details and key parts were obtained through insider information, privately leaked chat logs and other methods that will not be disclosed or published for privacy and security reasons.

Written by admin

August 17, 2011 at 17:11

7 Responses

Subscribe to comments with RSS.

  1. I’d like to note that Xavier uses the word “brothers” similar to Sabu on the following site:

    http://web.archive.org/web/20060103072655/http://tigerteam.se/dl/exploits/TSEAD-200510-4.txt

    Just an observation….

    Jon Doe

    August 23, 2011 at 00:41

  2. […] https://ceaxx.wordpress.com/uncovered/ – Possibly the biggest hunk of research into Sabu’s identity out there. (Extreme props to the author of this post.) […]

  3. […] rumors have circulated for months that Sabu had been turned by the feds, and his identity was successfully exposed online several times already (a process known as “doxing” within Anonymous […]

  4. […] bitch 6:19:29 PM virus: yes, I believe he cut a deal to save himselfBack in November, Jester and others uncovered Sabu’s real name, email address, address, pictures and other personal details. Here […]

  5. […] rumors have circulated for months that Sabu had been turned by the feds, and his identity was successfully exposed online several times already (a process known as “doxing” within Anonymous […]

  6. […] rumors have circulated for months that Sabu had been turned by the feds, and his identity was successfully exposed online several times already (a process known as “doxing” within Anonymous […]

  7. […] quite accurately pointed out that Sabu, a.k.a. Hector Xavier Monsegur, had in fact had some of his personal info published (doxed being the lulzy term) since August 2011 (for people who might say the website is fake, […]


Leave a reply to Sabu, LulzSec, and the FBI’s publicity campaign | tomchop[is].me Cancel reply