On January 14, Azerbaijan Internet Watch reported of a mass phishing attack that lasted for about a week. At the time of the report, it was possibly to identify that the attacks were coing from an IP registered to the Ministry of the Interior. Almost a month later, Qurium media foundation continues its investigation into the identity of the perpetator.
The user @man474019 is active on hacking forums antichat and rdot, as well as on nulled – forum used by cyber criminals to trade and purchase leaked or hacked information.
The last time our man was on antichat was February 17, 2020 likely deleting some of the remaining posts and informaton.
There are only four entries left on antichat that are visible – can you spot the difference between his current profile and what was there before?
Man, must have noticed the reports. And although he may have been busy removing traces, they have already been well documented.
As we were expecting 🧐sandman4812av to delete his github account once the forensic report was released we made a backup copy.
Do not miss his interactions with Technowlogy-Pushpender/technowlogger https://t.co/OR9VTxyreu
— Qurium Media (@Qur1um) February 18, 2020
The search for the man and his likes continues.