Thanks to the work of @steemwh1sks, who recovered Monero’s payment IDs. Assuming that the only people who inserted a hexadecimal email in this field after their public message (2017-06-02 11:24) are “customers” of The Shadow Brokers, then we can say the following information:
test@test.com,7465737440746573742e636f6d00000000000000000000000000000000000000,dbfb8734a80c6168ff908d492be209f3d49d7995655e856bc0f2626baa8e2160,1322751
Osaber_tooth@vfemail.net,4f73616265725f746f6f7468407666656d61696c2e6e65742020202020202020,64560b4c3e19d170c0de372b2caf08f1cd1acfb3ddd9f20b2a2c4e347de11a38,1338483
Note: At the time of the transaction, the above email was not registered, however, [*saber\_tooth@vfemail.net*](mailto:saber_tooth@vfemail.net) (without the "O") was registered it, so I think the real email is [*saber\_tooth@vfemail.net*](mailto:saber_tooth@vfemail.net).
Osaber_tooth@vfemail.net,4f73616265725f746f6f7468407666656d61696c2e6e65742020202020202020,b1e4c8dc1a6d8c78cbe8a8853a73f145e96f49dc45a7ee5b1c4ce33120ea8acd,1338509
Note: At the time of the transaction, the above email was not registered, however, [*saber\_tooth@vfemail.net*](mailto:saber_tooth@vfemail.net) (without the "O") was registered it, so I think the real email is [*saber\_tooth@vfemail.net*](mailto:saber_tooth@vfemail.net).
ReadersChoice@protonmail.com,5265616465727343686f6963654070726f746f6e6d61696c2e636f6d00000000,0adbb637d7d8f232671ba063c2d082bf19dfe1c305884f2c816348ee304b4d3b,1338509
Fucksyourmoms@protonmail.com,4675636b73796f75726d6f6d734070726f746f6e6d61696c2e636f6d00000000,782dc6139511ac4f5515a91452b1c5f019594b63a8cc8e015b8cd4b411af0d36,1341942
Thanks to the Steemit #2 post from Fucksyourmoms, we can access to the details of this transaction. Indeed, we need three pieces of information:
With this information, we can then confirm the sending of 500 XMR to The Shadow Brokers address:
yeyu@tutanota.com,7965797540747574616e6f74612e636f6d000000000000000000000000000000,b272b1f2c4d9dd98b3f80630e7dcda7f37b9db7c50d9fb9d1328eebcaaf1060f,1355937
yu@tutanota.comadvisoryDump,797540747574616e6f74612e636f6d00000061647669736f7279000044756d70,26a8ec97cf37174719f68b6aa52f1e086b74d58a363534b0c70d30a4b8b912f8,1356148
yeyu@tutanota.comadvisoryDump,7965797540747574616e6f74612e636f6d0061647669736f7279000044756d70,c84da5be034b059c8c7b4e9c9da935a267aa99c1399e46742f74ac7f0dfbba14,1356165
anonymousboth@tutanota.com,616e6f6e796d6f7573626f746840747574616e6f74612e636f6d000000000000,0cc3723e86a58ad272cce3a230c7adf6edaa34879618c0706d92253c65949e79,1359679
anonymousboth@tutanota.com,616e6f6e796d6f7573626f746840747574616e6f74612e636f6d000000000000,76f190732a746cb94960505aaf232f776f034817de338b69198371afed138c0d,1359699