OsintLondon

Crypto Threat Intel, OSINT and DNMs

[National Crime Agency (NCA) @NCA_UK]

Official announcement in four hours #Cronos

[OsintLondon @OsintLondon]

For goodness sake... 🤦🏻‍♀️
https://t.co/pUHiFNsbtN

[OsintLondon @OsintLondon]

@nnimrodd @SarahNEmerson @alienfrens Which app are you using to search accounts like this?

[vx-underground @vxunderground]

@InfoSecDJ @abuse_ch The vx-underground secret to getting ransomware samples:

[OsintLondon @OsintLondon]

Nobody tell Facebook about sock accounts 😂
https://t.co/pdr101falu

[Treasury Department @USTreasury]

Continuing the Administration’s whole-of-government effort to counter ransomware, today Treasury announced a set of actions focused on disrupting criminal ransomware actors and virtual currency exchanges that launder the proceeds of ransomware.
https://t.co/vfL5WHQAMc

[Europol @Europol]

Five affiliates to #Sodinokibi/#REvil were arrested during operation #GoldDust, which involved 17 countries, Europol, @Eurojust & @INTERPOL_HQ.

The arrested affiliates are suspected of 7 000 infections, asking for over €200 million in ransom.

More ➡️ https://t.co/DMuGJuuq7D

[Brett Callow @BrettCallow]

Conti say thanks to the Daily Mail. "US-UK-EU Neo-liberal plutocracy." LOL! Oh, boy.

[OsintLondon @OsintLondon]

🤦🏻‍♀️🤦🏻‍♀️

[Bloomberg Originals @bbgoriginals]

Sen. Blumenthal: "Will you commit to ending Finsta?"

Facebook safety chief: "We don't actually do Finsta. What Finsta refers to is young people setting up accounts where they want to have more privacy" https://t.co/666QVRuBpw

[kpoulsen @kpoulsen]

In the hours before Nicko Silar was born, a heart monitor recorded warning signs that she was in distress. Because of a ransomware attack, almost nobody saw them.

Inside the attack on an Alabama hospital that may have claimed ransomware's first fatality

https://t.co/iKWJdPxMdX

[Judicial Office @JudiciaryUK]

The Wayne Couzens sentencing remarks given by Lord Justice Fulford can now be found online.
https://t.co/uz1B5HmLK1

[Dr Laura-Jane Foley @laurajanefoley]

This is the impact statement written by Susan Everard, Sarah Everard's mum. Her agony is palpable. Rest in peace beautiful Sarah. #SheWasJustWalkingHome

[OsintLondon @OsintLondon]

@theluckymon @VodafoneUK Congratulations Mon!

[Chris Monteiro @Deku_shrub]

Oh ffs, you work years to disprove something then those crazy Russians come along... https://t.co/n5AEepLTA8

[𝕯𝖒𝖎𝖙𝖗𝖞 𝕾𝖒𝖎𝖑𝖞𝖆𝖓𝖊𝖙𝖘 @ddd1ms]

#REvil Happy Blog is back online

[OsintLondon @OsintLondon]

@theluckymon @niebezpiecznik There is a good article here by @BleepinComputer - https://t.co/hepuOXpZla

[OsintLondon @OsintLondon]

Interestingly this manual includes the recommendation to use business information sites such as ZoomInfo and RocketReach to conduct business #OSINT on victims

[Allan “Ransomware Sommelier🍷” Liska @uuallan]

Disgruntled ransomware affiliate leaks the Conti gang’s technical manuals https://t.co/rSrewY0x1X via @campuscodi

[Group-IB Global @GroupIB]

Check our new blog post to read the comparative analysis of these three #ransomware strains 🔽

https://t.co/tA3cQdHRK2

[Allan “Ransomware Sommelier🍷” Liska @uuallan]

An interview with BlackMatter: A new ransomware group that's learning from the mistakes of DarkSide and REvil via ⁦@ddd1ms⁩ https://t.co/MmEiBMUEY3

[Brett Callow @BrettCallow]

Babuk closed shop, but then reopened. The Babuk team, however, had split which resulted in the creation of Payload.bin, but Payload was then converted to RAMP. RAMP has temporarily closed due to being porn-spammed and now Payload is back.