3 ms·
> SHARP used a virtual private network service that he subscribed to from a company named Surfshark to mask his Internet Protocol (“IP”) address when he accesse
by TedDoesntTalk 5y ago
> SHARP used a virtual private network service that he subscribed to from a company named Surfshark to mask his Internet Protocol (“IP”) address when he accessed Company-1’s AWS and GitHub infrastructure without authorization.
How did they know it was SurfShark?
- blitzar 5y agoWhich discount code did he use? Use CYBERWEEK19 for 85% your first years subscription.
- egberts1 5y agoPresumably with an IP log by a router/IDS/ENS at the corporate or ISP level.
- vytvy 5y agoFYI, the policy to delete logs, just deletes them from your aws account, but they are still accessable/recoverable from aws side if needed. So this guy, that worked as cloud lead in ubiquiti was stupid enough to think it will hide his traces by deleting logs :DD it might have worked if he deleted them in bare metal server itself,but in aws it just deletes from account/s3, but can be recovered by AWS support. so this is how they got all the logs and found that it was him that logged in with his own aws user, and ip address from surfshark.