• x00z@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    13 hours ago

    I think the ngrok tunnel server they setup to exfiltrate data actually sent the GDID to the ngrok servers. This GDID was then linked to non-VPN IP logs by Microsoft.