![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
Amongst your first thoughts might have been along the line of 'Finnish hacker? Who cares!' Oh, just read on! Almost guaranteed laugh to come.
This is a great story. So this dweeb did all the usual horrible stuff: DDoSes, SWATting, breaking into corporate computers and such. His gang had an exploit that let them get into servers running Cold Fusion, and that got them into some places they probably shouldn't have gotten in to because it brought high level attention to his activities.. And then he did a VERY bad thing.
He broke into a Finnish psychotherapy practice and stole patient treatment records. Stuff that is considered utmost sacrosanct - notes between a therapist and their patients.
He threatened to dump them on the dark web if the practice didn't pay a ransom demand. They didn't pay. He actually went and published them. The ransom demand was in six figures. After the practice stopped talking to him, he tried extorting individual patients for 500 Euros. He apparently didn't have any luck with that, and then released the records.
Except he had one very major operational security fail. Somehow he screwed up and included his computer's HOME DIRECTORY IN THE DUMP!
Oops. Major faux pas.
This gave investigators all sorts of information on him concerning not only him personally, but additional crimes that he'd committed and the tools that he had used.
He was arrested Friday morning around 7am when "authorities in Courbevoie responded to a domestic violence report". He'd been out drinking, brought a woman home, they got into a fight, neighbors called the cops. A roommate or someone let the police in and found him sleeping. When they woke him and asked him for ID, he claimed to be Romanian. Police were "Yeah, pull the other one, it's got bells on it" and started pulling up photos of foreign criminals that were wanted, and found out who he was.
He had previously been convicted in court of FIFTY THOUSAND cybercrimes, but as he was 17 at the time, he was given a two year suspended sentence and had to pay 6500 Euros in restitution.
He's been on the run since October of last year after failing to show up for a court appearance and was charged in absentia. For some reason I don't think a two year suspended sentence is in his future, perhaps something a bit more stiff.
https://krebsonsecurity.com/2023/02/finlands-most-wanted-hacker-nabbed-in-france/
This is a great story. So this dweeb did all the usual horrible stuff: DDoSes, SWATting, breaking into corporate computers and such. His gang had an exploit that let them get into servers running Cold Fusion, and that got them into some places they probably shouldn't have gotten in to because it brought high level attention to his activities.. And then he did a VERY bad thing.
He broke into a Finnish psychotherapy practice and stole patient treatment records. Stuff that is considered utmost sacrosanct - notes between a therapist and their patients.
He threatened to dump them on the dark web if the practice didn't pay a ransom demand. They didn't pay. He actually went and published them. The ransom demand was in six figures. After the practice stopped talking to him, he tried extorting individual patients for 500 Euros. He apparently didn't have any luck with that, and then released the records.
Except he had one very major operational security fail. Somehow he screwed up and included his computer's HOME DIRECTORY IN THE DUMP!
Oops. Major faux pas.
This gave investigators all sorts of information on him concerning not only him personally, but additional crimes that he'd committed and the tools that he had used.
He was arrested Friday morning around 7am when "authorities in Courbevoie responded to a domestic violence report". He'd been out drinking, brought a woman home, they got into a fight, neighbors called the cops. A roommate or someone let the police in and found him sleeping. When they woke him and asked him for ID, he claimed to be Romanian. Police were "Yeah, pull the other one, it's got bells on it" and started pulling up photos of foreign criminals that were wanted, and found out who he was.
He had previously been convicted in court of FIFTY THOUSAND cybercrimes, but as he was 17 at the time, he was given a two year suspended sentence and had to pay 6500 Euros in restitution.
He's been on the run since October of last year after failing to show up for a court appearance and was charged in absentia. For some reason I don't think a two year suspended sentence is in his future, perhaps something a bit more stiff.
https://krebsonsecurity.com/2023/02/finlands-most-wanted-hacker-nabbed-in-france/
