2 ms·
Unless they already did their exfil.
by mdoms 6y ago
Unless they already did their exfil.
- cwkoss 6y agoYep. If they did exfil, it would make sense to do before they tweeted. I expect we'll see solicitations offering to sell a copy of DMs from the affected accounts - even if the hacker didn't exfil, the public doesn't know that and opportunistic scammers may try to pose as the hacker to get BTC. Interestingly, by tweeting a bitcoin address, the hacker could authenticate themselves to 'potential buyers' by accurately describing future transfers of bitcoin from the tweeted address.
- boring_twenties 6y ago> accurately describing future transfers of bitcoin from the tweeted address. No need to do this, just sign a short piece of text with the private key.