Here’s your pro tip: looking at everything who doesn’t patch their site with that known vulnerability for that long period of time?
Poor Chan never had a chance. It was like a revolving door with anybody with a basic sense of skills. This particular group said they were in there for a year. There were groups inside and out of that place up and down for many many years.
We’re talking that place was a revolving door for surveillance anyone with a basic set of skills could’ve gotten in there and observed what’s going on…. they didn’t pass that vulnerability and it was like 12 years old.