Collaborate Disseminate
The following assessment details all the redirectors, fake codec serving domains, as well as related fake security software domains used in the Digg.com’ comment spam attack.The complete list of the domain redirectors used in the comment spam attack:wo… Continue reading Fake Codec Serving Domains from Digg.com’s Comment Spam Attack
Compared to the previous massive malware embedded attack in Italy that I asessed in June, 2007 which was primarily relying on the fact that a shared hosting provider got hacked into, this one is more interesting to follow because the domains have nothi… Continue reading Another Massive Embedded Malware Attack
I’ve been playing a cat and mouse game with the folks behind several different phishing campaigns using the Rock Phish kit for a while now, in between tracking down the New Media Malware Gang and several other related malware campaigns. The Rock Phishe… Continue reading 209.1 Host Locked
The following incident response assessment will demonstrate how a botnet’s infected hosts can not only be used as stepping stones, but also for the purpose of sending out phishing emails, and hosting the domains used in the scams themselves, thereby fo… Continue reading Inside a Botnet’s Phishing Activities
I’ve recently took the time and effort to obtain access to and data mine the recently leaked Conti ransomware gang internal communication looking for IoCs (Indicators of Compromise) including relevant OSINT artifacts which lead me to custom-tailored fa… Continue reading How to Take Down the Conti Ransomware Gang – A Practical And Relevant Case Study on Taking Down Cybercriminal Infrastructure – A Practical Example
I’ve decide to dig a little bit deeper and find an additional set of known malicious MD5s known to have been used by the Conti Ransomware gang in an attempt to assist fellow researchers and the security industry including U.S Law Enforcement on its way… Continue reading A Compilation of Known Conti Ransomware Themed Malicious and Fraudulent MD5s – An OSINT Analysis
I’ve recently decided to take a deeper peek inside the Conti Ransomware Gang’s known BitCoin transaction IDs using public sources and I’ve decided to come up with a compilation of known Conti Ransomware Gang’s BitCoin transaction IDs for the purpose of… Continue reading A Compilation of Conti Ransomware Gang BitCoin Transaction IDs – An OSINT Analysis
Folks,Who’s on Facebook? Feel free to send me an invitation request and let’s catch up. The following photos are a personal Facebook photos compilation which you can feel free to go through in terms of catching up in terms of what I’ve been up to.Who’s… Continue reading Profiling a Personal Portfolio of Personal Photos and Security Event Conference Photos – A Compilation
I’ve decided to share some personally identifiable information behind a recently leaked high-profile Russian cybercrime-friendly forum community with the idea to assist everyone in their current and future cyber attack or cyber campaign attribution eff… Continue reading Exposing Personally Identifiable Information Behind A Recently Leaked Russian High-Profile Cybercriminal Forum Community – An Analysis
I’ve decided to share some personally identifiable information behind a recently leaked high-profile Russian cybercrime-friendly forum community with the idea to assist everyone in their current and future cyber attack or cyber campaign attribution eff… Continue reading Exposing Personally Identifiable Information Behind A Recently Leaked Russian High-Profile Cybercriminal Forum Community – An Analysis