the “man” behind the phishing attacks


On January 14, Azerbaijan Internet Watch reported of a mass phishing attack that lasted for about a week. At the time of the report, it was possibly to identify that the attacks were coing from an IP registered to the Ministry of the Interior. Almost a month later, Qurium media foundation continues its investigation into the identity of the perpetator.

The user @man474019 is active on hacking forums antichat and rdot, as well as on nulled – forum used by cyber criminals to trade and purchase leaked or hacked information.

The last time our man was on antichat was February 17, 2020 likely deleting some of the remaining posts and informaton.

There are only four entries left on antichat that are visible – can you spot the difference between his current profile and what was there before?

Our man, has also removed his avatar. In earlier report, the man in the photo was identified as Alibay Mammadov. Unfortunately attempts to reach out to Mammadov for a comment failed.

Man, must have noticed the reports. And although he may have been busy removing traces, they have already been well documented.

The search for the man and his likes continues.

Latest news