Author Archives: Dancho Danchev

Massive Portfolio of APT (Advanced Persistent Threat) and RAT (Remote Access Tools) Domains Spotted in the Wild – An Analysis

Posted on by

In a world dominated by thousands of currently active APT (Advanced Persistent Threat) campaigns also known as Remote Access Tools (RATs) including trojan horses it’s worth pointing out that novice cybercriminals continue relying and actively utilizing… Continue reading Massive Portfolio of APT (Advanced Persistent Threat) and RAT (Remote Access Tools) Domains Spotted in the Wild – An Analysis→

I’m Back!

Posted on by

Dear blog readers – it’s been a while since I’ve last posted a quality update following my disappearance and possible kidnapping attempt circa 2010 but as many of you have noticed I’ve recently published a variety of research and CYBERINT type of artic… Continue reading I’m Back!→

Dancho Danchev’s Blog – Open Call for Blog Contributors and Guest Bloggers

Posted on by

UPDATE: Do you know which is one of the World’s most popular Security blogs and who’s running it? Guess what – you’ve been reading it all along. Ever since I started this blog in December, 2005 for the purpose of impressing my girlfriend and greatly in… Continue reading Dancho Danchev’s Blog – Open Call for Blog Contributors and Guest Bloggers→

Historical OSINT – Georgian Justice Department and Georgia Ministry of Defense Compromised Serving Malware Courtesy of the Kneber Botnet

Posted on by

It’s 2010 and I’ve recently came across to a compromised Georgian Government Ministry of Defense and Ministry of Justice official Web site spreading potentially participating in a wide-spread phishing and malware-serving campaign enticing users into in… Continue reading Historical OSINT – Georgian Justice Department and Georgia Ministry of Defense Compromised Serving Malware Courtesy of the Kneber Botnet→

Fake NordVPN Web Site Drops Banking Malware Spotted in the Wild

Posted on by

I’ve recently came across to a rogue NordVPN web site distributing malicious software potentially exposing NordVPN users to a multi-tude of malicious software further compromising the confidentiality availability and integrity of the targeted host to a… Continue reading Fake NordVPN Web Site Drops Banking Malware Spotted in the Wild→

Historical OSINT – The Russian Business Network Says “Hi”

Posted on by

You know you’re popular when “they” say “hi”.

It’s 2009 and I’ve received a surprising personal email courtesy of guess who – The Russian Business Network showing off the actual ownership of the hxxp://rbnnetwork.com domain and basically saying “hi”. … Continue reading Historical OSINT – The Russian Business Network Says “Hi”→

g0t Bitcoin?

Posted on by

Dear blog readers, dare to take a moment of your precious time to check a venerable and recently proposed cyber security project investment including the opportunity to enter a Bold New World of Hacking and Information Security? Has the time come to se… Continue reading g0t Bitcoin?→

Assessing the Recently Leaked FSB Contractor Data – A Peek Inside Russia’s Understanding of Social Network Analysis and Tailored Access Operations

Posted on by

I’ve recently managed to obtain a copy of the recently leaked FSB contractor data courtesy of 0v1ru$ and “Digital Revolution” and I’ve decided to take a closer look including an in-depth overview and discussion of the leaked data in the context of toda… Continue reading Assessing the Recently Leaked FSB Contractor Data – A Peek Inside Russia’s Understanding of Social Network Analysis and Tailored Access Operations→

Profiling “Innovative Marketing” – The Flagship Malvertising andf Scareware Distributor – Circa 2008 – An OSINT Analysis

Posted on by

Continuing the “FBI Most Wanted Cybercriminals” series I’ve decided to take a closer look at “Innovative Marketing” the primary malvertising and scareware distributor participating in several high-profile malvertising and scareware-serving campaigns ci… Continue reading Profiling “Innovative Marketing” – The Flagship Malvertising andf Scareware Distributor – Circa 2008 – An OSINT Analysis→

Exposing Evgeniy Mikhaylovich Bogachev and the “Jabber ZeuS” Gang – An OSINT Analysis

Posted on by

Continuing the “FBI Most Wanted Cybercriminals” series I’ve decided to take a closer look at the “Jabber ZeuS” including Evgeniy Mikhaylovich Bogachev for the purpose of providing actionable intelligence on the fraudulent and malicious infrastructure t… Continue reading Exposing Evgeniy Mikhaylovich Bogachev and the “Jabber ZeuS” Gang – An OSINT Analysis→