Saturday, November 29, 2014

Anatomy of a spai (vivisection)

A long time ago an applicant to corporation lost a mission ship to a pirate in Naguton during the recruitment process. At the time i was concerned not about the lost ship as much as the location. Something about the location sparked an intuitive suspicion this recruitee applying to corp was a troll (hoping to get the new CEO's blood pressure to explode) and for almost a year i've been patiently watching Devatio and Ni Kao (along with any alts connecting the two via employment records, including alliance at the same time, or dodgy killmails)

 The links have been very tenuous for a direct link to spy alts with Devatio (who gained entry to my corp) but have been growing more solid over the months to Ni Kao. Below is my notes on Ni Kao
devatio's killer in naguton

Sent: 2014.07.19 00:07
I've found your sleazebag.
He is at Sukirah IX - Moon 7 - Kaalakiota Corporation Research Center station in the Sukirah system, Mobit constellation of Domain region.

right when shoryn decides to finally start ice mining - after i begin going on hiatus for shogun 2 in a serious way
matt mccullough paradiso alt?
Alex Olenard ... Madeleine Stoneheart alts?
------
Les Routiers alt? (oh...helloo...possible grade now. 9 min spread)...upgraded to probable!
aphex window ... Bakuhz alts?
Morgan Davaham alt? upgraded to possible*
eneman81 alt?
Sara Schwade alt? upgraded to possible*
Dutch Marsden alt? upgraded to possible*
=============
Gulsen Y alt??
Oct20th'14
[06:29:19] MajorFreak  Gulsen Y on
[06:29:52] SeneschaI  Les Routiers & Ni Kao were on recently
[06:30:25] SeneschaI  Alex Olenard OFF
[06:30:50] MinorFreak  Madeleine Stoneheart on
[06:31:56] MinorFreak > quicklog
[06:35:20] paroboat > heretic martyr off
[06:36:55] MajorFreak  Jericho Wolf OFF
[06:37:40] MajorFreak  Mika Javonovich OFF
[06:38:20] SeneschaI  Les Routiers OFF
[06:41:43] SeneschaI  Salia Foxwell on
[06:41:51] Fiat Sophia  Ivan En'Vec OFF
[06:43:08] SeneschaI  Hanako Okanata on
[06:44:00] MajorFreak  Lord Soth3 SothEnterpri on
[06:45:39] SeneschaI  Khaleesi Kurvora on
[06:46:48] SeneschaI  Ni Kao quicklog possibly
[06:47:52] SeneschaI  eneman81 OFF (oh, boy, gotcha)
[06:48:26] SeneschaI  Hanako Okanata OFF
[06:49:02] MinorFreak  Shadowglyph on
[06:49:30] paroboat  Zkin Ursa on
[06:50:55] Fiat Sophia  Snorbett OFF
[06:53:06] Fiat Sophia  michael Rinah OFF
[06:55:32] SeneschaI  Ni Kao back on
 ====
Nov7th'14
[17:41:37] SeneschaI  Flandre Scarlette on
[17:43:02] SeneschaI  Les Routiers on
[17:44:20] SeneschaI  Paul Caruso Saken on
[17:45:32] SeneschaI  Choa Mein chaotic fandance
[17:46:42] SeneschaI  Farsight Kavees on
[17:48:47] SeneschaI  Zen Dad on
[17:49:38] SeneschaI  Macellarius Blood on
[17:50:14] SeneschaI  Slava Netik OFF
[17:51:50] SeneschaI  Zen Dad quicklog
[18:05:36] SeneschaI  Farsight Kavees quicklog
[18:05:52] SeneschaI  Macellarius Blood quicklog
[18:07:29] SeneschaI  Slava Netik fandance
[18:08:59] SeneschaI  Ni Kao on
====
Gegalfo Orti ... Daryl Shana alts? (possible for former)
Aniem Chulong alt?
Scooter Lee / Macellarius Blood alt?
Orpheliae alt?
Jujo Frasa alt?
====
Nov16th'14
[17:31:44] SeneschaI  Ni Kao on
[17:33:16] SeneschaI  Isedarken OFF
[17:34:23] SeneschaI  Aplysia Vejun on
[17:36:32] SeneschaI  Ni Kao OFF
[17:37:41] SeneschaI  Kerberos Overdog on
***
[22:48:00] SeneschaI Jujo Frasa OFF
[22:52:00] SeneschaI Ni Kao OFF
[22:53:00] SeneschaI Kerberos Overdog on
*kerby upgraded to possible*
===
Nov19th'14
[17:07:04] Kellen Shimaya on
[17:09:04] Ziosventra OFF
[17:10:04] Ni Kao OFF
[17:10:04] Atraxy OFF
====
Sergeji Harloff alt?
shazaaz Estidal alt?
Flandre Scarletto alt?
Jinx Sotken alt?
So today i wake up and spot an alliance evemail about some corp wanting entry into our alliance and i reply with a *fixed* version that has devatio's name in it as a confirmed spy (just because my intuition has linked ni kao, dave covey and devatio together) and then i go AFTER and check my corporate memberlist login tables and look who's logged in briefly after not being online for a goodly amount of time:

So i gave him a decoration i made years ago for corp spies and will boot him and his alt within 24 hours. No fuss; no muss...not even going to fratricide his characters since that can be used as troll bait in the next corp he targets.