Probably everyone remembers how more than 50 large Twitter accounts (Musk, Gates, Obama, Apple, etc.) were hacked about 2 weeks ago.
Law enforcement officers have detained three suspects - 17-year-old Graham Clark and 22-year-old Nima Fazeli (" Rolex ") from Florida, as well as 19-year-old Mason Sheppard (" Chaewon ") from the UK.
In this whole story, I was interested in how the real characters behind this attack were calculated. Or rather one character of Mason Sheppard with the nickname " Chaewon ".
Twitter, «Chaewon» «OGUsers» . Twitter-.
, 31.03.2020 . ( 2018 .), ( Telegram-).
Tigran Gambaryan ( ) (PDF).
«Chaewon» . (kpopisepic51@gmail.com) IP- (79.66.149.155 82.132.236.55).
IP «mmm» (f77twitter@gmail.com). «Mason123». «Ghoxl» (20fdisciplina@gmail.com). , «Chaewon» Kik «MasyOGF», , «mmm, .
. «Chaewon» «Mas» (masonhppy@gmail.com) IP- «OGUsers». , «Mas» masonhppy@gmail.com , «mmm» «Ghoxl» (. ) «mas» (poop987@protonmail.com).
«Chaewon» “IT IS MAS I AM MAS NOT BRY I AM MAS MAS MAS!@”, . , “BRY” “BRYSON”, «Bryson» .
, , 15.05.2019 «mas» «Chaewon», 19.06.2019 «mas» «wasdwasd123».
masonhppy@gmail.com «Coinbase» / «mason sheppard».
, masonhppy@gmail.com «OGUsers» ( ), «Coinbase». , ( 30 , ).
masonhppy@gmail.com .
, - . , (, «Coinbase» IP), Mason Sheppard - (, «TalkTalk Communications Limited» “” ) - .
UPD: , , - , masonshppy@gmail.com «OGUsers», 26.12.2018.
, masonshppy@gmail.com, masonhppy@gmail.com. , .
User " Mas ", later renamed " Chaewon " (see above), was originally registered at masonshppy@gmail.com . Thus, the special agent only had to send a request to Coinbase to get the rest of the data for the user with this address.