Author Archives: Dancho Danchev

Dear blog readers,Continuing the second part of my original “When Data Mining Conti Leaks Leads to Actual Binaries and to a Hardcoded C2 With an Encryption Key on Tripod.com – Part Two” post in this second post I’ll proceed and move on with the next Co… Continue reading When Data Mining Conti Leaks Leads to Actual Binaries and to a Hardcoded C2 With an Encryption Key on Tripod.com – Part Two→

Dear blog readers,I just did the impossible but I’ll leave a set of photos and personally identifiable information about RAMP (Russian Anonymous Marketplace) Ransomware Forum to speak for itself.     Sample screenshots from my … Continue reading Dissecting the RAMP (Russian Anonymous Marketplace) Ransomware Forum – An Analysis→

Dear blog readers,This is Dancho.I’ve spent the past week working on a very important personal project where I’m using 100% Google Gemini Python generated code to achieve my objectives with a lot of success.However the time has come to seek a professio… Continue reading Looking for a Python Developer or a Team of Python Developers→

Dear blog readers,Do you remember the Koobface botnet? And did you know that the Koobface botnet master KrotReal used to maintain a legitimate Facebook account back in 2011 at the peak of the Koobface botnet that no one has ever referenced or possibly … Continue reading Where Is Anton Nikolaevich Korotchenko (Антон Николаевич Коротченко) Also Known as Koobface Botnet Master KrotReal? – Part Five→

In this just obtained video in my line of inspiration and work you can basically see everything you ever wanted to see about the Yekaterinburg’s based Plastika Recording Studio and Linkvil (Евгений Самсонов) and basically get a better picture of the in… Continue reading Inside the Yekaterinburg’s Based Plastika Recording Studio – The Primary Producer of Conti Ransomware Gang’s Marketing and Advertising Creative→

Dear blog readers,Today marks our Astalavista.com Second Official Re-Launch. Visit the infamous cybersecurity forum community grab an account and become a subscriber. We’re looking forward to seeing you there. Our official relaunch video:Our official 2… Continue reading Astalavista.com – Second Official Re-Launch→

Dear blog readers,In this post I’ll provide related actionable intelligence based on the recent LockBit compromise in terms of all of their Dark Web Onion URLs based on their publicly accessible and leaked internal communication.Related:Exposing the Bl… Continue reading A Full List of Dark Web Onion URLs from the recent LockBit Compromise→

Dear blog readers,The following is a full list of all the LockBit BitCoin addresses found based on publicly accessible information based on the recent LockBit Compromise.Full list of LockBit BitCoin addresses:bc1q0004tm3jp5hrzhykry9wrte494lh7yshn4t9rkb… Continue reading A Full List of BitCoin Addresses from the Recent Lockbit Compromise→

Based on the recently released Bybit Investigation documents I was able to obtain the malicious javascript in question and I decided to dig a little bit deeper into its inner workings and try to provide actionable intelligence on the topic and who the … Continue reading Dissecting the Bybit Cryptocurrency Exchange Malicious UI Spoofing Javascript→

UPDATED:Exposing the Black Basta Ransomware GroupExposing the Black Basta Ransomware Group – Part TwoExposing the Black Basta Ransomware Group – Part Three Dear blog readers,The following are all of Black Basta’s BitCoin addresses and BitCoin transacti… Continue reading Exposing the Black Basta Ransomware Group – Part Four→