404 Media published a deep dive on the Snowflake hacker Judische, a cybercriminal wanted for involvement in extorting and stealing data from more than 160 companies, including AT&T, TicketMaster, Neiman Marcus, etc.

https://www.404media.co/the-walls-are-closing-in-on-the-snowflake-hacker/

I wrote about Judische as the prime suspect in last week's story on the overlap between harm groups and "The Com".

https://krebsonsecurity.com/2024/09/the-dark-nexus-between-harm-groups-and-the-com/

404's @josephcox spilled the beans on Judische's accomplice in brokering the extortions and sales of the stolen data, saying it's Vinny Troia, a person who claims to be a security researcher but skates pretty close to the edge of the ice legally (unless he has some get-out-of-jail-free card we don't know about).

I called attention to Vinny's shenanigans in a 2018 story called "When Security Researchers Pose as Cybercrooks, Who Can Tell the Difference?" after I found out he was running some of the cybercrime forum accounts that were offering to sell stolen data.

https://krebsonsecurity.com/2018/10/when-security-researchers-pose-as-cybercrooks-who-can-tell-the-difference/