The man behind this past fall's infamous celebrity nude photos leak reportedly accessed more than 500 iCloud accounts, including those of celebrities and their friends and family.
Law enforcement officials, and particularly one special agent on the case, traced the iCloud attacks back to one Chicago-based IP address, the recently unsealed affidavit stated.
Emilio Herrera allegedly worked out of his presumed family's home to access 572 unique iCloud accounts, and in total, accessed the accounts 3,263 times. He also reportedly attempted to reset 1,987 unique iCloud account passwords, approximately 4,980 times, in addition to the previously mentioned accounts.
FBI Special Agent Josh Sadowsky wrote in the affidavit that he believed Herrera used Elcomsoft Phone Password Breaker to download the contents of each victim's iCloud account. All he needed was the correct username and password.
Sadowsky also wrote that Herrera likely used phishing emails to gain the credentials.
