Hi Teddy! I’m curious what evidence you have that ties these login attempts to the CyberVor (1.2bn) hacked credentials database specifically? Given that (to m

Hi Teddy! I’m curious what evidence you have that ties these login attempts to the CyberVor (1.2bn) hacked credentials database specifically? Given that (to my knowledge) none of the data from this database has yet been leaked publicly, couldn’t the credentials being used for these attacks be coming just as easily from any number of sources, or previously-disclosed databases (Adobe, LinkedIn, Forbes, etc.)? Just trying to distinguish “what we know” from “what we suspect”, here. Thanks!