:thisisfine

[dcoderlt@ohai.social]

:thisisfine:

#Google

https://files.ohai.social/media_attachments/files/113/383/890/929/858/224/original/0652ce78db65d6bb.jpeg

[ryanc@infosec.exchange]

@dcoderlt I got some people v& by MitMing Google Analytics. (they were doing crimes)

[dcoderlt@ohai.social]

@ryanc
Amazing

[dcoderlt@ohai.social]

@ryanc
“Is you running analytics on a criminal fucking conspiracy?”

[ryanc@infosec.exchange]

@dcoderlt they had a jira for their criminal conspiracy, in fact

[dcoderlt@ohai.social]

@ryanc
I’d enjoy hearing more of this story

[ryanc@infosec.exchange]

@dcoderlt https://www.justice.gov/usao-edny/pr/russian-cybercriminal-sentenced-10-years-prison-digital-advertising-fraud-scheme

I deliberately infected a laptop with the malware proxy they were using, then injected a bespoke piece of code that got the bots' IP addresses via flash using RTSP.

Sent that to the feds and they worked with interpol to get a warrant.

[0ddj0bb@infosec.exchange]

@ryanc @dcoderlt oooo fun idea i like. Just install malware abd report back the traffic for interpol