The opsec job was so shoddy that I immediately suspected misdirection. I mean, would anyone be so stupid as to use the same username they use for posting _videos_ of themselves for such a purpose? They might as well embed a picture of their ID in the binary.
I know that criminals tend to not be very bright, but this particular field would require at least some basic competence, I would assume.
OK, but the blog also points out that the pattern is typical of cyber criminals in this jurisdiction. It strains credulity that a ten year long trail of red herrings would be created, when it would be just as easy (easier!) to leave no evidence at all.
I know that criminals tend to not be very bright, but this particular field would require at least some basic competence, I would assume.