GDID is the persistent Windows ID that helped FBI trace a Scattered Spider hacker despite VPNs. Here's how it works and how to limit it.
  • RainbowBlite@piefed.caEnglish
    4·
    13 天前

    From the article:

    Microsoft’s records showed that at that exact same minute, a Windows device carrying GDID g:6755467234350028 had visited the ngrok signup page.

    Seems pretty clear to me. Microsoft tracked acces to an independent sign up page using the GDID.

    • DacoTaco@lemmy.world
      1·
      11 天前

      Exactly, authentication. They had used the sso with their microsoft account. Thats what linked it together, not windows