Collaborate Disseminate
The following is a list of personal email address accounts and domain C&C servers from the DNC (Democratic National Committee) cyber attack campaign.Sample personal email address accounts known to have been involved in the campaign include:julienob… Continue reading DNC (Democratic National Committee) Domains C&C Portfolio
The following is a list of C&C domains belonging to the Cytrox commercial spyware.Sample domains involved in the campaign include: hxxp://5m5.iohxxp://actumali.orghxxp://addons.nehxxp://adibjan.nethxxp://adservices.gr.comhxxp://advertsservices… Continue reading Domains Portfolio Operated by Cytrox Spyware
The following is a list of personally identifiable information on EncroChat including a domain portfolio operated by EncroChat.Personal email: galip77@msn.comRelated domains:hxxp://canna4bits.comhxxp://pgpplus.comhxxp://eccomsolutions.comhxxp://hyperco… Continue reading Domains Portfolio Operated by EncroChat
The following is a set of domains known and managed and operated by Sp3cial1st from Darkode.Email address accounts known to have been involved in the campaign include:anewone@criptext.comalexane50@protonmail.comdarkness_su@protonmail.chSample MD5s know… Continue reading Domain Portfolio Operated by Sp3cial1st from Darkode
Correct me if I’m wrong but OSINT is the power of everything.Personal email: anon1984@fastmail.toRelated email address accounts: thoreau@netspace.net.auRelated domains:hxxp://suelette.nethxxp://suelette.orghxxp://underground-book.orghxxp://un… Continue reading Julian Assange’s IoCs
Greatly inspired by two comparative studies on the IoCs (Indicators of Compromise) market segment within the threat intelligence market in specific IoCs obtained using public and not necessarily proprietary sources which believe it or not also include … Continue reading Malicious Infrastructure Discovery
Dear blog readers,I have a new project which aims to be something in the lines of a final project in the context of that if I can manage to get it going and with success it will mean that I will figure out a decent way to secure my pension and that I w… Continue reading Got Tips?
Dear blog readers,I’ve decided to share with everyone a recently made available MP3 audio training compilation on the topic of OSINT cybercrime research and threat intelligence which you can check out here.Stay tuned. Continue reading MP3 Training Audio Compilation
Dear blog readers,I’ve decided to share with everyone a recently recorded video on the topic of “How I Tracked Down the Conti Ransomware Gang?” which is also available here.Enjoy. Continue reading How I Tracked Down the Conti Ransomware Gang? – Video Demonstration
Dear blog readers,I’ve decided to share some OSINT notes on Bulgaria’s Emil Kyulev.Sample network assets reconnaissance:e[.]kyulev[[.]]protonmail[.]comhxxp://magadans[.]net14cbx34hgJYN1iyFvT4PsCxKVsGDuZi5pR0x0837a9df92d68505ceba32fb540475e29fbf29f… Continue reading Exposing Bulgaria’s Emil Kyulev/RansomedVC/Magadans/BorisTulev/BlackForums/ImpotentNaEvropa/Everest Ransomware Group/DADS Agency – An OSINT Analysis