Brian Krebs continues the trial of LockBitsSup.
MNpot the physical trial mind you, the trial of whether authorities seemed to have identified the man and charged him.
blog post 1, blog post 2, blog post 3 and Brian Krebs article
Brian’s article is making it to the blog for the first time as we had a mail loss issue beyond our control, but I planned on blogging it.
Now, in the continuing saga, Brian goes through the history in which Lockbitssup did what he did, and when.
What was interesting about this article among others similarly written, it talks about email addresses and passwords.
email addresses changed and used as examples only
For example, If Brian said that LockBitSup ‘s address was and the password was 12345, how exactly do we know that this is actually the case?
As Brian writes:
Another domain registered to that phone number was stairwell[.]ru, which at one point advertised the sale of wooden staircases. Constella finds that the email addresses and used the password 225948.
Later in the article, he writes:
Constella finds the same password tied to (225948) was used by the email address , which Intel 471 says was registered to more than a dozen NeroWolfe accounts across just as many Russian cybercrime forums between 2011 and 2015.
So my question is how did they find out what the passwords were, try to hack them? Are our passwords stored somewhere we aren’t aware of?
LockBitSupp’s not going by this name in this paragraph, but he’s up to something. It says:
NeroWolfe’s introductory post to the forum Verified in Oct. 2011 said he was a system administrator and C++ coder.
Remember Green Dot cards? These were cards you can buy to either pay for goods or services or something else you needed. Whoever this guy was, he was involved in that too.
There’s a hell of a lot more, but I urge everyone to follow me as we continue to follow what’s happening.
How Did Authorities Identify the Alleged Lockbit Boss? is the article and it is detailed. Very detailed. Have fun with this one as I only scratched the surface.
If I took this article apart, I’d be here for hours and I do have something I need to do today. See everyone later and happy reading!