The blog post [0] of the researcher - which this article is based on

[0] https://positive.security/blog/send-my