Independent Journalist specializing in Cybercrime Interviews and News.
Joined March 2012
- Tweets325
- Following775
- Followers59
- Likes26
Rowan Grey retweeted
Mouse in the middle attack lol 😆
Monday humor 🤣. Have a good week everyone.
#itsupportspecialist #desktopsupport #desktopsupporttechnician #desktopengineer #helpdesk #helpdesktechnician #servicedesk
Interested in hearing from anyone who's investigated this further.
🇷🇺 🚨 RUSSIA: BORDER CROSSING DATABASE WITH 1M+ RECORDS ALLEGEDLY OFFERED FOR SALE
A threat actor on a dark web forum is advertising a database of more than 1 million records of border crossings into Russia, allegedly from Russian border control systems.
According to the post:
• The data reportedly covers crossings in 2021 and 2022, for Russian citizens and foreign nationals
• Fields allegedly include full names, document numbers, issue dates and country of issue
• Checkpoint locations, type of operation, transport and flight details are also claimed
• The set is split into three archives and priced in crypto; samples were shared as proof
⚠️ Analyst Note:
Unverified threat-actor claim, NOT confirmation of a breach. The records are from 2021 to 2022, so this may be older data rather than a fresh compromise. If genuine, travel histories tied to passport numbers carry real surveillance, profiling and fraud risk. Russian authorities have not commented.
#DDW #DarkWeb #Russia #DataBreach #BorderSecurity #Government #ThreatIntelligence
Emerging Threat Actor: Syntax
I am documenting the group's publicly presented identifiers for tracking and research purposes.
I reached out directly to BYOD regarding the attack on UNM and received a response.
I've shared in the thread below.
@UNM, I'd welcome your perspective on these claims, particularly regarding the impact on UNM Hospital and the reported disruption to patient care
🧵👇
BYOD argues that a README file left on affected devices supports its claim that the attack was intended to target the university, not hospital operations.
The group says the file repeatedly referenced the university and described the data being locked as informational.
BYOD claims most of the data it accessed consisted of small, compressed files associated with old, inactive accounts labeled scim__users_{numerical_identifier}.
The group says it interpreted these as forgotten university devices and user data. That interpretation is BYOD's.
BYOD also argues that a README file left on affected devices supports its claim that the attack was intended to target the university, not hospital operations.
The group says the file repeatedly referenced the university and described the data being locked as informational.
BYOD claims its original target was the University of New Mexico, not UNM Hospital (UNMH).
The group says both entities shared a network and group policy, which allegedly contributed to hospital-related data being caught up in the attack.
🚨 BREAKING: I reached out directly to BYOD, the threat actor group behind the UNM cyberattack. They responded with several messages disputing aspects of the incident's reporting and explaining why they claim UNM Hospital was affected.
Here’s what they told me. 🧵
