Evidence — Account Login Log

// digital evidence analysis

0 pts
Locker
// text preview unavailable Open File
Details
INSTAGRAM — SHARED ACCOUNT @UNI_ESPORTS_SOC Thursday, login activity 19:20 Login OK known device (routine post) 23:37 Login ATTEMPT unknown device └ password ACCEPTED └ 2FA code sent by SMS to registered number 23:40 Login OK unknown device └ 2FA code entered correctly, 1st attempt 23:47 Post published: "NordVPN Giveaway" └ links to nord-vpn-promos[.]net/login 23:58 Account password CHANGED from unknown device NOTE: password was correct at 23:37. Only the 2FA code stood between the attacker and the account.
File Type: Log
Mini-Game 15 pts
The log shows the password was accepted at 23:37, before any code was requested. What does this tell you about the attacker?
A They already knew the correct password, and only the 2FA code stood in their way
B They stole a saved browser session
C They exploited a bug in Instagram's login system
D They guessed the password by brute force
Back to Evidence List
NOTEBOOK
DOSSIER // ID: f403ef61