A History of Deception
US DoD, also known by his hacker handles “Equation Corp” and “NetSec,” gained notoriety after breaching the consumer data broker National Public Data (NPD) in August 2024. The breach resulted in the leak of Social Security numbers and other personal information for a significant portion of the US population. However, this was not the first time US DoD had made headlines.
A Masterclass in Deception
US DoD applied for InfraGard membership using the identity of a major US financial company CEO, listing the real mobile phone number. The FBI granted his application just weeks later, despite never validating it with the actual CEO. This brazen move allowed US DoD to collect contact information shared by over 80,000 InfraGard members, which he later leaked online.
A Recent Arrest
In August 2024, Techmundo reported that Luan BG, a 33-year-old man from Minas Gerais, Brazil, was the real identity of US DoD. This report was based on a non-public report produced by CrowdStrike, a security firm that had been tracking US DoD’s activities. The arrest was made by Brazilian Federal Police in connection with the theft of data on Brazilian Federal Police officers.
A Complex Web of Lies and Inquiries
In September 2023, US DoD gave an interview to databreaches.net, where he claimed to be a man in his mid-30s born in South America with dual citizenship. However, this statement was later contradicted by KrebsOnSecurity, which reported that US DoD had been in contact with a local attorney to inquire about any open investigations or charges against him. The attorney found no open cases or charges, and US DoD claimed he had no idea he was in imminent danger of being arrested.
The Aftermath
Just days after the arrest, US DoD returned to his online activities, posting custom exploit code on BreachForums. This move has sparked concerns about whether this latest development marks a return to form for the notorious cybercriminal.
Conclusion
US DoD’s rise and fall is a cautionary tale of how quickly cybercrime can spread and the devastating consequences it can have. His arrest highlights the importance of international cooperation in combating cybercrime and serves as a reminder that even the most skilled cybercriminals are not immune to detection and prosecution.