FBI Traced Scattered Spider Hack to a Single Windows Device ID
A court filing shows prosecutors used a persistent Windows device identifier to link the Scattered Spider intrusion at a luxury jeweler to 19‑year‑old Peter Stokes. The ID survived OS updates, letting investigators tie the ngrok tunneling activity back to Stokes’s accounts across multiple services, highlighting the forensic value of device IDs.