Windows betrays hacker as telemetry leads to arrest
The FBI was able to identify an alleged member of the Scattered Spider hacking group thanks to Microsoft’s Global Device Identifier (GDID), a unique Windows identifier linked to an installation. Despite the use of VPNs, proxies, and rotating IP addresses, the GDID remained visible, allowing investigators to link digital footprints to the same Windows installation.
The case demonstrates how valuable telemetry can be for law enforcement agencies in combating cybercrime. At the same time, the disclosure has sparked strong criticism regarding the extent of Microsoft’s device and user registration and the limited transparency surrounding it.
In your opinion, where is the line between effective cyber investigation and the privacy of millions of Windows users?
Read the Cybernews article for more information.