Collaborate Disseminate
Dear blog readers,I’ve decided to share with everyone a recently made available MP3 audio training compilation on the topic of OSINT cybercrime research and threat intelligence which you can check out here.Stay tuned. Continue reading MP3 Training Audio Compilation
Dear blog readers,I’ve decided to share with everyone a recently recorded video on the topic of “How I Tracked Down the Conti Ransomware Gang?” which is also available here.Enjoy. Continue reading How I Tracked Down the Conti Ransomware Gang? – Video Demonstration
Dear blog readers,I’ve decided to share some OSINT notes on Bulgaria’s Emil Kyulev.Sample network assets reconnaissance:e[.]kyulev[[.]]protonmail[.]comhxxp://magadans[.]net14cbx34hgJYN1iyFvT4PsCxKVsGDuZi5pR0x0837a9df92d68505ceba32fb540475e29fbf29f… Continue reading Exposing Bulgaria’s Emil Kyulev/RansomedVC/Magadans/BorisTulev/BlackForums/ImpotentNaEvropa/Everest Ransomware Group/DADS Agency – An OSINT Analysis
Dear blog readers,I’ve decided to share some OSINT notes on Bulgaria’s Emil Kyulev.Sample network assets reconnaissance:e[.]kyulev[[.]]protonmail[.]comhxxp://magadans[.]net14cbx34hgJYN1iyFvT4PsCxKVsGDuZi5pR0x0837a9df92d68505ceba32fb540475e29fbf29f… Continue reading Exposing Bulgaria’s Emil Kyulev/RansomedVC/Magadans/BorisTulev/BlackForums/ImpotentNaEvropa/Everest Ransomware Group/DADS Agency – An OSINT Analysis
UPDATE: I just added an additional set of details and information obtained using public sources.Personal email: rujaignatova[.]hotmail.comhxxp://rujaignatova.eu/hxxp://drrujaignatova.comhxxp://www.youtube.com/rujaignatovahxxp://x.com/rujaignatovahxxp:/… Continue reading Exposing Bulgaria’s Ruja Ignatova’s OneCoin Cryptocurrency Internet-Connected Infrastructure – An Analysis
Dear blog readers,In this analysis I’ll provide actionable intelligence on the LabHost phishing as a service cybercrime enterprise.Sample URLs known to have been involved in the campaign include:hxxp://labhost[.]cchxxp://labhost[.]cohxxp://labhost[.]xy… Continue reading Exposing LabHost – Phishing as a Service Franchise – An OSINT Analysis
Dear blog readers,In the following analysis I’ll offer an URL compilation of fake news sites including additional personally identifiable email address accounts known to have been involved in these campaigns.hxxp://addustuor[.]comhxxp://al-jazirah[.]or… Continue reading Exposing a Rogue Domain Portfolio of Fake News Sites – An Analysis
Dear blog readers,In this analysis I’ll take a look at a recently seized malware crypting as a service domain and will offer additional insights into how the service works.From the press release:”AegisTools.pw is a platform known in the undergrou… Continue reading A Peek Inside a Recently Seized Malware Crypting as a Service Domain Portfolio – An Analysis
In this analysis we’ll take a look inside the Redline Stealer’s C&C and IoCs infrastructure obtained using public sources with the idea to enrich the actual domain infrastructure while looking for additional clues for related malicious and fraudule… Continue reading Exposing the C&C and IoC Infrastructure of the Redline Stealer Malicious Software – An Analysis
Dear blog readers,In this analysis I’ll offer and provide an in-depth technical overview of the Internet-connected infrastructure behind the Maze Ransomware Group using public sources including the data leak broker who’s responsible for the Sonatrach D… Continue reading Exposing the Sonatrach Data Leak and the Data Leak Broker Behind it – An OSINT Analysis