7 ms·

So the seller shows a screenshot with browser tabs, a date and a time. One of the tabs is really very specific, looking at a particular disqus profile. I'm no

So the seller shows a screenshot with browser tabs, a date and a time. One of the tabs is really very specific, looking at a particular disqus profile. I'm not familiar with Windows; is there anything in the screenshot to suggest its torbrowser or anything like that? Presumably the miscreant's ISP and e.g. the Russian government can guess real easy whom generated that screenshot...? Of course what they'd do with that info is anyone's guess. It could well not be an offence to sell collections of passwords, if in deed its even an offence to hack those passwords in the first place.

tqy 8y ago
That looks like a regular version of Chrome running on Windows 7. But it could be running on a proxy or a VPN.
deleted 8y ago
[deleted]
baseballMan 8y ago
The screenshot has a tab open on this article: https://www.troyhunt.com/the-773-million-record-collection-1-data-reach/ https://www.troyhunt.com/the-773-million-record-collection-1... I don't think it's from the seller - looks like it was taken by the author of this article.
- close04 8y ago
  In the screenshot [0] there is also a tab viewing someone's Disqus profile, and you can also see the time and date. I think the suggestion was there may be ways to track down who the hacker is based on this. Of course he could very well be using a VPN (highly likely). Or at the very least a public/free WiFi, although in Russia you have to register with a phone number to access them. [0] https://krebsonsecurity.com/wp-content/uploads/2019/01/sanixer.jpg https://krebsonsecurity.com/wp-content/uploads/2019/01/sanix...
- invalidusernam3 8y ago
  It addresses that in the article: "...notice the open Web browser tab behind his purloined password trove (which is apparently stored at Mega.nz): Troy Hunt’s published research on this 773 million Collection #1"
  - excalibur 8y ago
    Sooo this is either a screenshot of Sanixer's machine or of someone who has access to his entire trove. Clearly not the author's. I see the mega.nz handle "Louren KINGUR" with avatar, and the same person's Google account avatar with no username. I did an image search on this latter one and came up empty handed, but maybe someone with more finesse could find him this way.

tqy 8y ago

That looks like a regular version of Chrome running on Windows 7. But it could be running on a proxy or a VPN.

deleted 8y ago

[deleted]

baseballMan 8y ago

The screenshot has a tab open on this article: https://www.troyhunt.com/the-773-million-record-collection-1-data-reach/ https://www.troyhunt.com/the-773-million-record-collection-1... I don't think it's from the seller - looks like it was taken by the author of this article.

close04 8y ago
In the screenshot [0] there is also a tab viewing someone's Disqus profile, and you can also see the time and date. I think the suggestion was there may be ways to track down who the hacker is based on this. Of course he could very well be using a VPN (highly likely). Or at the very least a public/free WiFi, although in Russia you have to register with a phone number to access them. [0] https://krebsonsecurity.com/wp-content/uploads/2019/01/sanixer.jpg https://krebsonsecurity.com/wp-content/uploads/2019/01/sanix...
invalidusernam3 8y ago
It addresses that in the article: "...notice the open Web browser tab behind his purloined password trove (which is apparently stored at Mega.nz): Troy Hunt’s published research on this 773 million Collection #1"
- excalibur 8y ago
  Sooo this is either a screenshot of Sanixer's machine or of someone who has access to his entire trove. Clearly not the author's. I see the mega.nz handle "Louren KINGUR" with avatar, and the same person's Google account avatar with no username. I did an image search on this latter one and came up empty handed, but maybe someone with more finesse could find him this way.