
treadwater
659 posts

treadwater
@_treadwater
Cybersecurity enthusiast, don't @ me.




> Peter Stokes > Scattered Spider guy > Arrested > Microsoft helps FBI > Read court documents > Page 12 > Microsoft tracks Stokes from GDID > Microsoft Global Device Identifier (GDID) > Stokes used Windows > Page 34 > GDID assigned to each OS install > GDID unique to each device > GDID only change if OS wiped > Stokes GDID 6755467234350028 > GDID reported internet activity to Microsoft > GDID showed Stokes using Ngrok > GDID reported Stokes IP address > GDID showed Stokes web activity > GDID showed timestamps of web activity > GDID mapped with video game activity > GDID showed games played > GDID undocumented > GDID only mentioned in one MSDN document > Azure UCDOStatus > Azure Monitor Logging






Only 9 of 37 offensive snaps in 13 personnel for the Rams so far tonight, yet a 67% success rate when in that grouping. Curious to see if they load back up as an adjustment here this half despite having both Adams and Nacua back and healthy.







🚨 Cyber Alert - PornHub PornHub has been extorted by the ShinyHunters extortion gang following the alleged theft of search and watch history belonging to its Premium members in a recent Mixpanel data breach. Source: bleepingcomputer.com/news/security/…





Show me a better movie than this hacker TV show











A threat actor installed Huntress. ... a hysterical mistake on their part, giving us first-hand insight to their tooling, workflow & routine. Phishing infra, stealer logs, Telegram+dark web sites, AI... Hilarious goldmine of cybercrime deets with a front row seat: huntress.com/blog/rare-look…

So this was a fun one to investigate! We had a threat actor install our agent, and it gave us some insight into what they do for a "living." 👇 huntress.com/blog/rare-look…








