Author Archives: Dancho Danchev

An image is worth a thousand words. And so is a link including my research here. Related links: hxxp://vk.com/id207493137hxxp://vk.com/id221867060hxxp://vk.com/id702871912    Continue reading Profiling Anatoliy Sergeyevich Kovalev from GRU’s Unit 74455 "NotPetya" Malware Gang→

In a series of blog posts I exposed the “The Top Management of the Conti Ransomware Group’s Fashion and Charity Brands” including “Who’s Behind the Conti Ransomware Gang” where I also offered an in-depth peek inside “The Conti Ransomware Gang and the T… Continue reading Who’s Behind the Conti Ransomware Gang? – Part Two→

I’ve recently observed an increase in compromised or exploited to be precise in the context of abusing unfixed web application flaws such as for instance redirection notifications on high-traffic and high-profile Web sites where the ultimate goal would… Continue reading Who’s Pushing All The "Fake Updates" Malicious Software Using Redirectors and Traffic Distribution and Redirection Systems and Tools Domains?→

Dear blog readers,Check out the link here. Continue reading Upcoming Webinar Participation→

Dear blog readers,Who wants to acquire and purchase my laptop 2015-2023 for memorabilia purposes and possibly somehow use it preserve or display it somewhere?Related photo:

Drop me a line at dancho.danchev@hush.com Continue reading Offering my Laptop for Memorabilia Purposes→

Dear blog readers,Are you interested in sponsoring my research on my way to grab a new laptop for the holidays?Drop me a line at dancho.danchev@hush.com to discuss and I’ll do my best to deliver the results that we agree upon. Continue reading Looking for a Research Sponsorship→

Dear blog readers,I did it. Check out the article here.Related photos:

Continue reading The Most Innovative Cyber Security Leader to Watch in 2023→

The following is a set of OSINT artifacts courtesy of the Conti Ransomware gang.hxxp://cc2-btc.cchxxp://dyncheck.comhxxp://luxchecker.pwhxxp://major.mshxxp://securecall.clubhxxp://securecall.tophxxp://checkzilla.ioIncluding the following two XMPP/Jabbe… Continue reading The Conti Ransomware Gang’s OSINT Artifacts→

The following are domains and personally identifiable email address accounts belonging to Iran’s Emennet Pasargad also known as Eeleyanet Gostar and Eeleyanet Gostar.Sample domains:eeleyanet.comeeleyanet.irSample personally identifiable … Continue reading Emennet Pasargad→