CybIntelligence

OSINT, cybercrime, darknet and a lot of other things not cyberz related

[Tom Hegel @TomHegel]

Excellent vid on running down mystery GPS/GNSS signals over Europe. The collection and pivoting tradecraft here is brilliant. I don't think any of us in the cyber domain will be surprised by the results, but an exciting process nonetheless.

https://t.co/k83hPxPngM

[Christopher Miller @ChristopherJM]

National Police of Ukraine have detained a 17-year-old girl in the murder by poisoning of a 27-year-old serviceman on the orders of Russian intelligence services.
https://t.co/HPmG7QUW1e

Just today, we published a deep dive @FT into how Russia and Iran recruit teens for sabotage and terrorism👇

[Dmytro Putiata @kriegsforscherD]

Together with @RALee85 we wrote and published an unique information — «Rubicon» elite drone unit ORBAT.

I highly recommend to read this article. Open high quality images and learn more about Russian approach in terms of drone warfare.

Link🔽

https://t.co/8ACAxbhe1Q

[Ro at The Tracker @HTracker10]

Does the Rybar image gallery reveal the "new" restmedia[.]st?

Among the images on the Rybar image gallery I discovered earlier this week, the below images are saved. Some of them appear to be used on this X account.

The 'Defenders of Free Speech' account claims to have been created in January 2024, however its first post was in March 2026 when it also became verified and changed username. Despite the location being the United States, it is connected to X via a Korean Android App.

@DFSbase, why are your images in the Rybar image gallery?

[NetAskari @NetAskari]

Looks like a threat actor under the name BlackTigerAlliance" has released personal information on the executives of Integrity Tech, the Chinese cyber security company accused by the US Treasury department of intrusion into US victims IT infrastructure. 1/2

[NetAskari @NetAskari]

Here is PART 2 of our investigation into the "Dynamic Control Platform for Overseas Personnel". A test dashboard design that gives us exclusive insight into the world of Chinese surveillance of foreigners by its police service. This time we will introduce a few more elements, plus what else we found on the server and some thoughts. Let's go! 1/9

[CybIntelligence @Cybintelligence]

@GorillaOSINT this you?

[Rob Lee @RALee85]

"OSINT" has a similar problem. There are many people who specialize on one facet and conduct detailed research, but aggregator accounts will often repost the information, often without attribution, and steal the engagement on social media. It creates perverse incentives and is detrimental to real OSINT research.

[Megha Rajagopalan @meghara]

Come work with me!

A really cool job just opened up on our international investigations team at The New York Times for a reporter specializing in OSINT, with lots of room for different skillsets 
https://t.co/gx8ZamNlMc

[Samir @obretix]

in rare personal news: we would greatly appreciate some revenue sharing from people and orgs earning money from my tweets or any other small or large donation since a close family member is suffering from bone cancer and bills are adding up rapidly.. https://t.co/nL5vDhYs0S

[Nordsint @nordsint]

1/ "We are working with Alabuga, so we have to make it confidential."

With @the_ins_ru, we identified Harxon, a Chinese navigation company, as the primary supplier of anti-jamming antennas powering Russian Geran suicide drones.

Read here:

https://t.co/TOt0UQnCvR

[AEOW/INPACT @aeowinpact]

INPACT turns 5 years this year. We follow leads wherever they take us. We do not stop. Our work has been to uncover Russian clandestine networks of influence and power. They are global. Here they are emerging from all the investigations we have done. It's called "Mapping Russia's covert networks"
https://t.co/GK9ppuzSVU

[Wassim Nasr @SimNasr]

A few thoughts answering in a Q&A @DonRassler & @KristinaKHummel for @CTCWP about the latest events in Mali, the main actors, the reasons, the FLA-JNIM agreement, the Africa Corps & Russia’s stand and the other actor of the Sahel crisis the Islamic State
https://t.co/uyiHUt33oe

[Colin P. Clarke, Ph.D. @ColinPClarke]

JNIM’s tactical evolution over the years has seen it develop from a terrorist group concentrated in rural areas to an insurgent-like force capable of waging complex urban operations while also implementing a strategy of economic warfare. https://t.co/G4KH3Ej3RA

[avi scharf @avischarf]

The investigation, based on @MarineTraffic data, imagery from @planet + additional satimagery, shows how ships turn AIS off and go dark, load in occupied Ukrainian ports, then secretly transfer stolen grain at sea to bulk carriers, which unload in Israel
https://t.co/BlginkiZB0

[Christopher Miller @ChristopherJM]

.@FT Exclusive: Sweden has intelligence indicating that Russia is systematically manipulating data to fool Ukraine’s western allies into believing its economy has withstood the strain of its lavish war spending and western sanctions, Thomas Nilsson, head of Sweden’s Military Intelligence and Security Service, told me and @maxseddon in Stockholm.
https://t.co/OoYcUj006M

[AEOW/INPACT @aeowinpact]

INPACT/AEOW revient sur l'expansion de l'usine d'Alabuga. Devenue une vraie base militaire, elle est un exemple de la menace hybride russe: contournement de sanction, militarisation, axe Iran-CN-DPRK et réseaux de travailleurs étrangers.
Notre rapport: https://t.co/UxMXF43thj

[Reuters Africa @ReutersAfrica]

South African police said they have arrested prominent pan‑African and pro-Russian activist Kemi Seba who is wanted by authorities in Benin for backing an attempted coup there, and have launched extradition proceedings. https://t.co/0zmvtg5SRh

[GeoConfirmed @GeoConfirmed]

GeoConfirmed News!

Our amazing IT team has launched the GeoConfirmed 2.0 website!

The new platform offers many more features for every investigator working with our data.

What’s new?

Find out in our first video below...

and visit https://t.co/B93nqcHgle to try it out yourself.

THANK YOU FOR YOUR ATTENTION TO THIS MATTER 😉

(With special thanks to @UAControlMap and @WarUnitObserver for their very important work()

[TankerTrackers.com, Inc. @TankerTrackers]

We (once again) kindly urge journalists to include IMO numbers of the vessels they write about because Dark Fleet tankers in particular may change names and flags by the time the articles have done their rounds for the week.

Thanks,
/TT

[ChrisO_wiki @ChrisO_wiki]

Shoigu! Gerasimov! Where is the ammunition?