Brian Levine

So this is where it started getting exciting.

Because Danette was here and we got that additional information from the Jabberchat log, we were able to go to grand jury, get this indictment, do an extradition package to Romania.

And then I think both of you went over there, correct?

As part of the arrest and takedown.

What we realized with these directional antennas, which made for great trial exhibits, was that they were never using their home internet when they were involved in criminality.

They would hack into another account in Bucharest.

And Bucharest is a very big city.

It'd be like doing it in Manhattan.

And so every time they would just hack into a different person's home Wi-Fi.

And that would be the start of their proxy chain.

They would start there.

Then, at least towards the end, as Danette explained it to us, they would go to Tor.

Then from Tor, they would go through their proxy chain, which was typically one to three infected computers.

And then from there, they would go to America Online where Owen was seeing them.

And then from there, that's when they would use commercial ISPs like Google, Facebook, eBay, et cetera.

So the extradition was seamless with Romania because of all this background work we had done.

So this was amazing.

We got them into the US in a couple of months.

He logged on faithfully to the criminal account multiple times a day, every day, except for the exact periods of times when he went on vacation.

And there was something like 30 vacations.