This shit was amazing. He broke in to a random RDP a forensics guy had been trying to get support on for weeks. Saw the CSAM and deleted it and left a message he was reporting them to the FBI then the FBI has to convince him on ZOOM call they were the FBI, please don't delete anything else.
He had already deleted 500TB of which they recovered 400TB(google cloud support?)
TL;DR random dude RDP scanning 🤣
