Intelligence X

🎻

Tango down.

"dutchavelli" uses the Spotify account lordkiller2009@gmail.com according to the log. This email lordkiller2009@gmail.com signed up on WeLeakInfo in 2019 according to the WeLeakInfo database, paying 200 USD, using the address Heinekenstrasse 23, 2921 Zurich and the name "Alen Vardi" and Swiss IP 178.196.227.241. The mentioned physical address may not exist, but it appears also in the leaked log. The user offered recently a doxxing service (second screenshot). This information may be useful for law enforcement, i.e. requesting all logs related to that email/IP from Spotify and Stripe.

The log of the user "dutchavelli" (who usesl dutchavellix@gmail.com) mentions the Swiss person "Niklas Matter" with the email niklasmatter@gmail.com, who shall be named in our criminal complaint.

One of the participants of the attacks is the user "dutchavelli". We previously suspected that he is Swiss, and found more evidence (IP, surf history). We will prepare a criminal complaint in 🇨🇭. He got infected and his information was leaked: https://intelx.io/?did=7c058c79-2ba9-480d-acd3-1b2ca507a062 🔒 Conversation log from 15.06.2022 confirms his participation in DDoS attacks (excerpt) are in the last screenshot.

And another actor today tried to signup from IP 94.131.100.86 (VPN) using these hijacked edu email accounts: asadig@ksu.edu.sa moabidin@effatuniversity.edu.sa esofosu@st.knust.edu.gh f09710013@thu.edu.tw

Similar to the channel established with the FBI, we have now established a similar channel with the Turkish Ministry of Interior General Directorate of Security, also known as Turkish National Police. 🇹🇷 We just sent them information about a Turkish hacker targeting the Turkish government. This individual tried to defraud us. This Turkish hacker used his hacker handle and also a fake front company burak@redlineplusltd[.]com. He is a "Registered Carder". The front company may even exist (unclear if separate individual or same), registered as "REDLINE PLUS LTD" (company number 13770528) which is quite a curious name: https://find-and-update.company-information.service.gov.uk/company/13770528/officers

Interesting strategy by some users who are violating our Terms of Service.

Other legal actions are still in the works. We have identified a Canadian individual as one of the main perpetrators; criminal & civil actions will follow. This one will take weeks to prepare as it encompasses everything from hacking, conspiracy to death threats, dangerous threats, extortion, copyright violation, defamation and other crimes. Our legal team is working diligently. We are working with the local court and Canadian embassy as needed to make sure papers will be served. Identified suspect & defendant is apparently waking up every day just to commit crimes. 🤔

We have filed the lawsuit against Cloudflare today. We'll see you in Prague Municipal Court! ⚖️👩🏻‍⚖️ Cloudflare Inc. failed to take action against a customer who conspired in death threats against our CEO. Below some tiny excerpts (translated; original filings are in Czech). We are happy to create a precedent in the EU, as needed.