<story><title>Guccifer 2.0 Slipped Up and Revealed He Was a Russian Intelligence Officer</title><url>https://www.thedailybeast.com/exclusive-lone-dnc-hacker-guccifer-20-slipped-up-and-revealed-he-was-a-russian-intelligence-officer</url></story><parent_chain><item><author>geowwy</author><text>Relevent paragraphs:&lt;p&gt;&amp;gt; [An intelligence researcher] led an investigation at ThreatConnect that tried to track down Guccifer from the metadata in his emails. But the trail always ended at the same data center in France. Ehmke eventually uncovered that Guccifer was connecting through an anonymizing service called Elite VPN, a virtual private networking service that had an exit point in France but was headquartered in Russia.&lt;p&gt;&amp;gt; But on one occasion, The Daily Beast has learned, Guccifer failed to activate the VPN client before logging on. As a result, he left a real, Moscow-based Internet Protocol address in the server logs of an American social media company, according to a source familiar with the government’s Guccifer investigation. Twitter and WordPress were Guccifer 2.0’s favored outlets. Neither company would comment for this story, and Guccifer did not respond to a direct message on Twitter.&lt;p&gt;&amp;gt; Working off the IP address, U.S. investigators identified Guccifer 2.0 as a particular GRU officer working out of the agency’s headquarters on Grizodubovoy Street in Moscow. (The Daily Beast’s sources did not disclose which particular officer worked as Guccifer.)</text></item></parent_chain><comment><author>bigiain</author><text>Opsec is hard - you only need to fuck up once...</text></comment>
<story><title>Guccifer 2.0 Slipped Up and Revealed He Was a Russian Intelligence Officer</title><url>https://www.thedailybeast.com/exclusive-lone-dnc-hacker-guccifer-20-slipped-up-and-revealed-he-was-a-russian-intelligence-officer</url></story><parent_chain><item><author>geowwy</author><text>Relevent paragraphs:&lt;p&gt;&amp;gt; [An intelligence researcher] led an investigation at ThreatConnect that tried to track down Guccifer from the metadata in his emails. But the trail always ended at the same data center in France. Ehmke eventually uncovered that Guccifer was connecting through an anonymizing service called Elite VPN, a virtual private networking service that had an exit point in France but was headquartered in Russia.&lt;p&gt;&amp;gt; But on one occasion, The Daily Beast has learned, Guccifer failed to activate the VPN client before logging on. As a result, he left a real, Moscow-based Internet Protocol address in the server logs of an American social media company, according to a source familiar with the government’s Guccifer investigation. Twitter and WordPress were Guccifer 2.0’s favored outlets. Neither company would comment for this story, and Guccifer did not respond to a direct message on Twitter.&lt;p&gt;&amp;gt; Working off the IP address, U.S. investigators identified Guccifer 2.0 as a particular GRU officer working out of the agency’s headquarters on Grizodubovoy Street in Moscow. (The Daily Beast’s sources did not disclose which particular officer worked as Guccifer.)</text></item></parent_chain><comment><author>rbanffy</author><text>What I find unlikely is that it was possible for the officer to log into the account from anything but a computer connected to a secured network. The computers that could be connected directly should never have the constructed persona&amp;#x27;s credentials.&lt;p&gt;These are not amateurs. They should know better.</text></comment>