How two college students used an IP address grabbing tool to find who hacked one of their Snapchat accounts in a sextortion scheme, putting the attacker in jail
Context & Ripple Effects
This case sits inside a long-running arc of coverage on very young hackers: the teenage SIM swappers of the Community, the three US teenagers behind the Mirai botnet, and most recently 19-year-old Matthew Lane pleading guilty to hacking and extorting US companies. Those stories all end with law enforcement doing the attribution after the fact.
What distinguishes this story is the direction of the investigation: two college students, targeted in a sextortion scheme over a hijacked Snapchat account, identified their attacker themselves with an off-the-shelf IP-grabbing tool — and the tip ended in a jail sentence rather than a platform support ticket.
First-order effects
- The jailed attacker demonstrates how thin the operational security behind many account-takeover schemes is: a single click on an IP-logging link collapsed the anonymity the sextortion depended on.
- The two students handed investigators a pre-identified suspect instead of a complaint, skipping the usual lag between a reported takeover and any serious look at who was behind it.
Second-order effects
- Sextortion operators working through hijacked Snapchat-style accounts now face targets capable of cheap self-attribution, raising the cost of careless contact with victims.
- Repeat takeovers push users toward third-party tracing tools rather than platform recovery flows, putting pressure on Snapchat to make its own compromise reporting and account security visibly effective.
Third-order effects
- If victim-side tracing proves repeatable, part of attribution migrates from agencies to targets, giving prosecutors a stream of pre-named suspects in small-scale extortion cases that rarely justify dedicated investigative resources.
- The pattern across the Community, Mirai, and recent extortion pleas points to a structural reality: adolescent hacking talent keeps feeding federal prosecutions, and deterrence increasingly depends on peers seeing these outcomes.
The trend: A decade of cases from Mirai to the Community to current extortion pleas shows adolescent hacking crews continually surfacing in criminal justice — and now their victims are proving able to unmask them before agencies do.