<story><title>Two U.S. men charged in 2022 hacking of DEA portal</title><url>https://krebsonsecurity.com/2023/03/two-us-men-charged-in-2022-hacking-of-dea-portal/</url></story><parent_chain><item><author>dmix</author><text>&amp;gt; because he connected to it from an Internet address that he’d previously used to access a social media account registered in his name.&lt;p&gt;Is the implication here that the US gov has broad access to accounts IDs-&amp;gt;IP address which access social media accounts? Or can the FBI&amp;#x2F;three letter agencies can go to Twitter&amp;#x2F;FB&amp;#x2F;etc (or some NSA db) and ask which accounts logged in via x IP address? Or, less conspiratorial, the investigators had some leads on x group of accounts -&amp;gt; got warrants for account IP addresses -&amp;gt; confirmed hypothesis.</text></item><item><author>curmudgeon22</author><text>&amp;gt;The government alleges the defendants and other members of ViLE use various methods to obtain victims’ personal information, including:&lt;p&gt;-tricking customer service employees;&lt;p&gt;-submitting fraudulent legal process to social media companies to elicit users’ registration information;&lt;p&gt;-co-opting and corrupting corporate insiders;&lt;p&gt;-searching public and private online databases;&lt;p&gt;-accessing a nonpublic United States government database without authorization&lt;p&gt;-unlawfully using official email accounts belonging to other countries.&lt;p&gt;&amp;gt;Prosecutors say they tied Singh to the government portal hack because he connected to it from an Internet address that he’d previously used to access a social media account registered in his name. When they raided Singh’s residence on Sept. 8, 2022 and seized his devices, investigators with Homeland Security found a cellular phone and laptop that allegedly “contained extensive evidence of access to the Portal.”&lt;p&gt;&amp;gt;The complaint alleges that between February 2022 and May 2022, Ceraolo used an official email account belonging to a Bangladeshi police official to pose as a police officer in communication with U.S.-based social media platforms.</text></item></parent_chain><comment><author>CapstanRoller</author><text>The US government requires that all ISPs install wiretapping devices as a precondition for doing business.&lt;p&gt;Failure to install and maintain wiretapping devices incurs a penalty of $130,000 per day, with a maximum of $1,325,000 per violation (unlimited violations).&lt;p&gt;Assume every ISP is compromised and that every government agency can see everything.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Communications_Assistance_for_Law_Enforcement_Act&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Communications_Assistance_for_...&lt;/a&gt;</text></comment>
<story><title>Two U.S. men charged in 2022 hacking of DEA portal</title><url>https://krebsonsecurity.com/2023/03/two-us-men-charged-in-2022-hacking-of-dea-portal/</url></story><parent_chain><item><author>dmix</author><text>&amp;gt; because he connected to it from an Internet address that he’d previously used to access a social media account registered in his name.&lt;p&gt;Is the implication here that the US gov has broad access to accounts IDs-&amp;gt;IP address which access social media accounts? Or can the FBI&amp;#x2F;three letter agencies can go to Twitter&amp;#x2F;FB&amp;#x2F;etc (or some NSA db) and ask which accounts logged in via x IP address? Or, less conspiratorial, the investigators had some leads on x group of accounts -&amp;gt; got warrants for account IP addresses -&amp;gt; confirmed hypothesis.</text></item><item><author>curmudgeon22</author><text>&amp;gt;The government alleges the defendants and other members of ViLE use various methods to obtain victims’ personal information, including:&lt;p&gt;-tricking customer service employees;&lt;p&gt;-submitting fraudulent legal process to social media companies to elicit users’ registration information;&lt;p&gt;-co-opting and corrupting corporate insiders;&lt;p&gt;-searching public and private online databases;&lt;p&gt;-accessing a nonpublic United States government database without authorization&lt;p&gt;-unlawfully using official email accounts belonging to other countries.&lt;p&gt;&amp;gt;Prosecutors say they tied Singh to the government portal hack because he connected to it from an Internet address that he’d previously used to access a social media account registered in his name. When they raided Singh’s residence on Sept. 8, 2022 and seized his devices, investigators with Homeland Security found a cellular phone and laptop that allegedly “contained extensive evidence of access to the Portal.”&lt;p&gt;&amp;gt;The complaint alleges that between February 2022 and May 2022, Ceraolo used an official email account belonging to a Bangladeshi police official to pose as a police officer in communication with U.S.-based social media platforms.</text></item></parent_chain><comment><author>bagels</author><text>Fbi asks twitter, Facebook etc who used this ip address. They will probably tell them. If they don&amp;#x27;t, it gets a subpoena, and then they get the accounts. It&amp;#x27;s regular everyday police work. No secret spy programs required.</text></comment>