GDID is the persistent Windows ID that helped FBI trace a Scattered Spider hacker despite VPNs. Here's how it works and how to limit it.

GDID is the persistent Windows ID that helped FBI trace a Scattered Spider hacker despite VPNs. Here’s how it works and how to limit it.

  • nibbler ( nibbler@discuss.tchncs.de ) English
    12·
    3 months ago

    Microsoft’s records showed that at that exact same minute, a Windows device carrying GDID g:6755467234350028 had visited the ngrok signup page. Three hours later, the same GDID

    To me the problem is not some uuid in some file/registry entry. The issue is, that somehow MS knows what webpages you visit??? why is this transferred? full log of what you do? edge? firefox? system service reporting outgoing IP connections? WTF.