Head of Cyber Threat Intelligence @ Würth IT, GCTI/CPENT/CEH/CND/CSA/ECSA/ECIH/CTIA, owner of SATAYO CTI platform & deepdarkCTI - member of @Curatedintel
Cyberspace (fastfire)
Joined January 2009
- Tweets5.4K
- Following657
- Followers2.5K
- Likes796
fastfire retweeted
Hunting ARTEX, Cairn and PentAGI, the AI harnesses behind recent intrusions? Start here:
ARTEX: title:"ARTEX — 自主渗透测试控制台" ?
Cairn: title:"Cairn" + server: uvicorn ?
PentAGI: http.favicon.hash:-1596753120 ?
Titles miss forks and renames. Full method: rstcloud.com/hunting-ai-harn… #ARTEX #CAIRN #PenAGI
📢Finalmente ci siamo!
📍Domani, mercoledì 4 novembre, si terrà l'evento #SATAYO #Community #Connect!
🕑 L'appuntamento è per le ore 14:00 ad Egna (BZ), presso Würth Italia.
👉🏼 Se non siete ancora arrivati ad iscrivervi, fatelo subito da qui wuerth-it.it/en/satayo-commu…
☢️☢️☢️New #xpl0itrs ransomware gang. 4 victim organizations have been declared so far.
📌📌📌The DLS (Data Leak Site) link has already been tracked on the #deepdarkCTI project (github.com/fastfire/deepdark…).
A new ransomware gang, #SevyWare, has advertised its RaaS services on #T1erOne. The moniker behind the post claims the gang includes former members of #Conti and #SLSH
No victim organizations have been identified so far. The data leak site has already been indexed on #deepdarkCTI
Data leak site available here github.com/fastfire/deepdark…
📢A new interview is available on #deepdarkCTI. This time, we wanted to delve deeper into the #NoName057 threat actor
☢️The pro-Russia hacktivist collective emerged in March 2022 following the Russian invasion of Ukraine
👉 You can read the interview at deepdarkcti.com/interview-11…
🤖 Made with AI
📢 A new interview is available on #deepdarkCTI. This time, we wanted to delve deeper into the #BreachForums, interviewing the forum owner, diencracked
🕵️♂️ The interview, which we publish in full, was conducted in May 2026.
👉 You can read the interview at deepdarkcti.com/interview-10…
📢 A new interview is available on #deepdarkCTI. This time, we wanted to delve deeper into the #MedusaLocker ransomware gang.
🕵️♂️ The interview, which we publish in full, was conducted in May 2026 by Erez.
👉 You can read the interview at deepdarkcti.com/interview-9-…
📢 New #Insomnia ransomware gang.
☢️ Active since October 2025, 17 victims published on their data leak site.
👉🏼 Onion link and TOX ID already available on #deepdarkCTI github.com/fastfire/deepdark…
📌 How is the ransomware gang landscape evolving after the #RAMP forum seizure?
🔴 Another well-known forum seems to be becoming a point of reference in this field.
👉🏼 We discuss it in the article you can read at this link neteye-blog.com/2026/02/from…
With 2025 now behind us, we can make some observations regarding the landscape of double-extortion #ransomware #attacks.
❓ Which ransomware gangs were the most active?
❓ Which sectors and countries were most affected?
👉🏻 Read the full article here neteye-blog.com/2026/01/rans…
📢 Recap of what happened in #deepdarkCTI in 2025:
✅ 586 commits
✅ 35 contributors
✅ 6,400 stars on GitHub
✅ 8 articles on deepdarkcti.com
✅ 129 active users within the Telegram channel
✅ a total of 2,465 sources
🙏 Many thanks to the #deepdarkCTI community!
A new interview is available on the #deepdarkCTI project blog. This time, the interview concerns the #Benzona ransomware gang.
👉 You can read the full interview here deepdarkcti.com/interview-8-…
🔴The problem of properly integrating #Threat #Intelligence into #Security #Operations processes is a recurring one.
📌 I wrote an article in which I described the integration process we have implemented.
👉🏻 Read the article here neteye-blog.com/2025/11/embe…
fastfire retweeted
#Ransomware 📣 NEW FEATURE
La nuova sezione RF Domain Monitor permette il monitoraggio costante dei domini sotto controllo #Ransomfeed e di deepdarkCTI project (@fastfire), alla ricerca di variazioni DNS e law enforcement.
1/2
📢 On October 23rd, I will have the pleasure of participating in the #NetEye #Conference 2025 as a speaker with the talk "From Intelligence to Action: Embedding TI into Your Security Operations".
👉🏼 You can register here wuerth-phoenix.com/neteye-co…
📢 At deepdarkcti.com/details-of-t…, you can find a detailed timeline of the main events related to the alleged seizure of the #XSS forum.
⏰ The timeline is constantly updated, taking into account relevant events that are also occurring in recent days.
#deepdarkCTI
