Guy embezzles millions, gets caught by Microsoft Word metadata

Started by StarGeek, January 04, 2020, 04:23:22 PM

Previous topic - Next topic
Print
Go Down Pages1
User actions

StarGeek

January 04, 2020, 04:23:22 PM
I know TheRegister.co.uk isn't the most trustworthy of sites, but this amused me.  To quote

"To cover his tracks, and avoid scrutiny, the crook omitted to put any serial numbers on the invoices, or reused serial numbers of equipment his employer already owned. However, he wasn't that smart: four of the invoices were written in Microsoft Word, and the file metadata showed they had come from Kabbaj's copy of the software."

https://www.theregister.co.uk/2020/01/04/tech_manager_theft/
"It didn't work" isn't helpful. What was the exact command used and the output.
Read FAQ #3 and use that cmd
Please use the Code button for exiftool output

Please include your OS/Exiftool version/filetype

Phil Harvey

#1
January 04, 2020, 06:08:06 PM
Interesting.

Yes, metadata has been the downfall of more than one person.  Witness the number of times I have been contacted by law enforcement agencies and/or lawyers.

- Phil
...where DIR is the name of a directory/folder containing the images.  On Mac/Linux/PowerShell, use single quotes (') instead of double quotes (") around arguments containing a dollar sign ($).

StarGeek

#2
January 06, 2020, 11:03:48 AM
Quote from: Phil Harvey on January 04, 2020, 06:08:06 PMWitness the number of times I have been contacted by law enforcement agencies and/or lawyers.

Sounds like you have some entertaining stories.
"It didn't work" isn't helpful. What was the exact command used and the output.
Read FAQ #3 and use that cmd
Please use the Code button for exiftool output

Please include your OS/Exiftool version/filetype

Phil Harvey

#3
January 06, 2020, 11:12:06 AM
Possibly... But if I told you, I'd have to kill you. ;)

- Phil
...where DIR is the name of a directory/folder containing the images.  On Mac/Linux/PowerShell, use single quotes (') instead of double quotes (") around arguments containing a dollar sign ($).
Print
Go Up Pages1
User actions