Post

2/ The domain revealscum[.]com was registered in 2023 and became active almost immediately. It followed a playbook we have already described that same year in our report on HKLEAKS. Exposing as much private information as possible, framing it in the most damaging way for the target.

3/ OpenAI identified it as part of a much larger effort to target dissidents (and the Japanese PM), revealing the enormity of its scale in terms of human and technological resources deployed by the actors.

4/ "Reveal Scum", the contents of which I won't show, followed the HKLEAKS playbook almost to the letter. Completely anonymous, with good operational security. A couple of generic Wordpress usernames ("Autumn" and the Chinese equivalent for "admin"). Anonymous hosting on US and Canada-based infra.