An analysis of IntelBroker’s posts on a cybercrime forum — the forum has not been named in the indictment but it’s likely the notorious BreachForums — showed that of the roughly 150 threads offering stolen data for sale or for free, at least 41 pertained to companies based in the United States.
Investigators linked the IntelBroker moniker to the British national after he sold some of the stolen data to undercover law enforcement officers.
The indictment reveals that while IntelBroker seemed highly confident in his ability to evade law enforcement — at times suggesting that he was from Russia or Eastern Europe — he made some significant OPSEC mistakes.
Investigators managed to link the cryptocurrency addresses to which undercover officers made payments to online accounts registered by West, including accounts registered under Kyle Northern and his personal email accounts.
Investigators also tied West to IntelBroker based on the same IPs being used on multiple occasions by both West and IntelBroker. In addition, YouTube videos known to have been watched by West (based on his IP) were shortly after posted by IntelBroker on BreachForums.
Source - https://www.securityweek.com/british-man...d-charged/
Investigators linked the IntelBroker moniker to the British national after he sold some of the stolen data to undercover law enforcement officers.
The indictment reveals that while IntelBroker seemed highly confident in his ability to evade law enforcement — at times suggesting that he was from Russia or Eastern Europe — he made some significant OPSEC mistakes.
Investigators managed to link the cryptocurrency addresses to which undercover officers made payments to online accounts registered by West, including accounts registered under Kyle Northern and his personal email accounts.
Investigators also tied West to IntelBroker based on the same IPs being used on multiple occasions by both West and IntelBroker. In addition, YouTube videos known to have been watched by West (based on his IP) were shortly after posted by IntelBroker on BreachForums.
Source - https://www.securityweek.com/british-man...d-charged/