• Mark with a Z@suppo.fi
    link
    fedilink
    English
    arrow-up
    14
    ·
    edit-2
    9 days ago

    Investigators found that on November 22, while planning his extortion plot, Rhyne used his account on a hidden virtual machine to search the web for information on changing domain user passwords, deleting domain accounts, and clearing Windows logs.

    Company account? Not the best idea.

  • mlfh@lm.mlfh.org
    link
    fedilink
    English
    arrow-up
    3
    ·
    9 days ago

    …he also searched on his laptop for “command line to change local administrator password,” “command line to remotely change local administrator password,” and “how to remotely shutdown a computer usign cmd.”

    shittysysadmin criminal mastermind.