What were the signs ?

Like the hack they were doing to de-anonymize users?

https://arstechnica.com/security/2025/06/meta-and-yandex-are...