The threat actor known as #USDoD aka #NatSec and #EquationCorp has been doxxed as a Brazilian man. A lot of the attribution is based on investigating by #CrowdStrike, as reported by #TecMundo, but USDoD has acknowledged it is as accurate in an exclusive statement he gave to #HackRead.
USDoD is probably best known for his attack on InfraGard and more recently, his attempt to sell 2.9 billion records from National Public Data.
Having looked at pictures posted online and based on my interview with USDoD last year and subsequent chats, yes, that is the threat actor known as USDoD and yes, he lives in Brazil.
As of today, he has not been arrested by Brazilian federal authorities but via his statement to HackRead, he wants them to know he is coming to them and is not a threat to his country, who he claims he can help.
https://hackread.com/usdod-hacker-ssn-leak-reveals-brazilian-citizen/