Harblinger on Nostr: >Peter Stokes >Scattered Spider guy >Arrested >Microsoft helps FBI >Read court ...
>Peter Stokes
>Scattered Spider guy
>Arrested
>Microsoft helps FBI
>Read court documents
>Page 12
>Microsoft tracks Stokes from GDID
>Microsoft Global Device Identifier (GDID)
>Stokes used Windows
>Page 34
>GDID assigned to each OS install
>GDID unique to each device
>GDID only change if OS wiped
>Stokes GDID 6755467234350028
>GDID reported internet activity to Microsoft
>GDID showed Stokes using Ngrok
>GDID reported Stokes IP address
>GDID showed Stokes web activity
>GDID showed timestamps of web activity
>GDID mapped with video game activity
>GDID showed games played
>GDID undocumented
>GDID only mentioned in one MSDN document
>Azure UCDOStatus
>Azure Monitor Logging
(100% stolen from
https://x.com/vxunderground/status/2073427396535963967)
Published at
2026-07-04 23:47:38 UTCEvent JSON
{
"id": "65dc9081e8e939d445915328000de225c6f10b28e9259a77a0be159f27614e3a",
"pubkey": "5f964311bd13aa755897ad46f8e0043b6bb8fcb0178f5131c0468830795a1e12",
"created_at": 1783208858,
"kind": 1,
"tags": [
[
"imeta",
"url https://wizard.casa/media/ee45403008dcc84e0068b317827c7ecb4174f9dcbd1e471a5f868a6eb0d5030a.jpg",
"m image/jpeg"
],
[
"proxy",
"https://wizard.casa/objects/019f2f87-d450-7cc0-a0c0-92538eadceea",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://wizard.casa/objects/019f2f87-d450-7cc0-a0c0-92538eadceea",
"pink.momostr"
],
[
"-"
]
],
"content": "\u003ePeter Stokes\n\u003eScattered Spider guy\n\u003eArrested\n\u003eMicrosoft helps FBI\n\u003eRead court documents\n\u003ePage 12\n\u003eMicrosoft tracks Stokes from GDID\n\u003eMicrosoft Global Device Identifier (GDID)\n\u003eStokes used Windows\n\u003ePage 34\n\u003eGDID assigned to each OS install\n\u003eGDID unique to each device\n\u003eGDID only change if OS wiped\n\u003eStokes GDID 6755467234350028\n\u003eGDID reported internet activity to Microsoft\n\u003eGDID showed Stokes using Ngrok\n\u003eGDID reported Stokes IP address\n\u003eGDID showed Stokes web activity\n\u003eGDID showed timestamps of web activity\n\u003eGDID mapped with video game activity\n\u003eGDID showed games played\n\u003eGDID undocumented\n\u003eGDID only mentioned in one MSDN document\n\u003eAzure UCDOStatus\n\u003eAzure Monitor Logging\n\n(100% stolen from https://x.com/vxunderground/status/2073427396535963967)\nhttps://wizard.casa/media/ee45403008dcc84e0068b317827c7ecb4174f9dcbd1e471a5f868a6eb0d5030a.jpg\n",
"sig": "3cf4b65761306aad7e6814af4b65cd4f8e94df3052eb6b9a824f020bd9a3a7922b31a87300291b5e9563120fc04c81a325c4b01201bb611b27748c14e6ad1175"
}
