Independent Journalist specializing in Cybercrime Interviews and News.
Joined March 2012
- Tweets325
- Following775
- Followers59
- Likes26
Rowan Grey retweeted
Mouse in the middle attack lol 😆
Monday humor 🤣. Have a good week everyone.
#itsupportspecialist #desktopsupport #desktopsupporttechnician #desktopengineer #helpdesk #helpdesktechnician #servicedesk
I love the "oh, well a third party had an incident, we took steps out of an abundance of caution, all is good now"
...yeah...
Interested in hearing from anyone who's investigated this further.
🇷🇺 🚨 RUSSIA: BORDER CROSSING DATABASE WITH 1M+ RECORDS ALLEGEDLY OFFERED FOR SALE
A threat actor on a dark web forum is advertising a database of more than 1 million records of border crossings into Russia, allegedly from Russian border control systems.
According to the post:
• The data reportedly covers crossings in 2021 and 2022, for Russian citizens and foreign nationals
• Fields allegedly include full names, document numbers, issue dates and country of issue
• Checkpoint locations, type of operation, transport and flight details are also claimed
• The set is split into three archives and priced in crypto; samples were shared as proof
⚠️ Analyst Note:
Unverified threat-actor claim, NOT confirmation of a breach. The records are from 2021 to 2022, so this may be older data rather than a fresh compromise. If genuine, travel histories tied to passport numbers carry real surveillance, profiling and fraud risk. Russian authorities have not commented.
#DDW #DarkWeb #Russia #DataBreach #BorderSecurity #Government #ThreatIntelligence
Emerging Threat Actor: Syntax
I am documenting the group's publicly presented identifiers for tracking and research purposes.
Lambos: $500,000.
Private jets: millions.
Jewelry: hundreds of thousands.
Enough common sense not to document your crimes for an audience: priceless.
...There are some things money can't buy.
I really appreciate you sharing this given your firsthand experience with the incident. I am eager to learn more about the forensics! ..and I don't want to minimize the disruption or data loss staff experienced.
If you're comfortable sharing more please do!
Thank you for sharing your perspective!
My goal in reaching out to BYOD was to understand their account, not endorse it. If you're comfortable sharing, could you elaborate on the Intune attack vector and what people experienced during recovery? I'd value that context.
I appreciate BYOD taking the time to share its perspective and provide additional context about the incident. Their response offers further insight into their account of what happened, and I hope continued dialogue will help bring greater clarity to the situation.
BYOD argues that a README file left on affected devices supports its claim that the attack was intended to target the university, not hospital operations.
The group says the file repeatedly referenced the university and described the data being locked as informational.
BYOD says it offered decryption keys for healthcare-related files after learning of reported ambulance diversions and patient redirection.
The group also claims it offered eligible patients up to $2,500 in compensation for disruption to their care.