Dell SecureWorks researcher Joe Stewart describes how he caught one by laboriously collecting information related to a Chinese hacker. He’s calling the incident the “Sin Digoo Affair” after the misspelling of San Diego in Internet domain registrations under the fake name of “Tawnya Grilth” that he saw over and over again. After months of sleuthing, Stewart managed to link the email [email protected] used to register those domains to a multitude of other clues.”]
Source: https://www.csoonline.com/article/2131072/how-to-catch-an-internet-cyber-thief.html