Andrew Blaich

Athlete, Security Researcher, and Threat Hunter. Views are my own.

[David Agranovich @DavidAgranovich]

1/ We just released our Q4 Adversarial Threat Report focused on our work to investigate and disrupt abusive spyware activity around the world. Our report includes findings on 8 surveillance-for-hire firms from Italy, Spain, and the UAE. We also share detailed recommendations for what a stronger whole-of-society response from governments, private industry should look like to help combat spyware abuses.

[Оlga Belogolova 🌻 @olgs7]

Our team has just put out the latest quarterly adversarial threat report. Read all about all the great work our threat intel investigators do across cyber espionage and coordinated inauthentic behavior: https://t.co/jeOHaIp7H2

[Ben Nimmo @benimmo]

NEW: @Meta’s Quarterly Adversarial Threat Report, featuring malware research, espionage takedowns, and disruptions of covert influence operations from:

China (two networks)
Iran
USA and Venezuela
Georgia
Togo and Burkina Faso

https://t.co/zQBl5NamRl

[David Agranovich @DavidAgranovich]

1/ We just shared three reports based on our threat research into influence ops and cyber-espionage activity this past year

🫡 Lookback at 200+ CIB disruptions
🕵️‍♂️ Surveillance-for-Hire investigations
👨‍⚖️ Policy recs to tackle the surveillance industry

A 🧵 on our findings

[Andrew Blaich @ablaich]

@evacide This is the way.

[Andrew Blaich @ablaich]

@killchain 😂🥃

[David Agranovich @DavidAgranovich]

1/ We just shared new security research by our malware discovery team into 400+ malicious iOS and Android apps. They were designed to steal people's Facebook login info 🧵 https://t.co/m7icdThBE4

[Ben Nimmo @benimmo]

🚨BREAKING🚨
@Meta took down two covert influence ops:
Big one from Russia🇷🇺 targeting Europe with spoofed media websites like the Guardian and Spiegel
First one from China 🇨🇳 to focus on both sides of domestic US 🇺🇸 politics and Czech-China relations.
https://t.co/o1YP0dBcZa

[Andrew Blaich @ablaich]

@mobilesecurity_ Jigglypuff. There’s a name I haven’t seen in a while.

[Andrew Blaich @ablaich]

Security Summer Camp FOMO

[Andrew Blaich @ablaich]

@LannaMichalisko @mmurray I’m so sorry for your loss. We are here for you. Mike was an incredible figure. I was happy to call Mike beyond just my boss but a friend and mentor too. I’m heartbroken over this news.

[Rachel Tobac @RachelTobac]

Just as we hoped would happen, the prosecutor declined to file charges in the absurd F12 hacking case. It’s done. You may now resume use of your keyboard and all its keys.
https://t.co/Pp7IL9gGhO

[Mike Murray @mmurray]

Was talking to a friend yesterday about why the security industry proliferates charlatans (esp in vendors). Apologies for the length but thought I would post my theory:

Security is one of the few markets where information asymmetry rewards vendors who lie to their buyers.
1/n

[Andrew Blaich @ablaich]

@evacide @StancombeJared @Meta @facebookapp Thank you for the flag, Eva.

[Andrew Blaich @ablaich]

@thegrugq @ngleicher Jigglypuff is still one of my favorites that was found within Chrysaor.

[Nathaniel Gleicher @[email protected] @ngleicher]

1/ With the launch of our threat report into the surveillance-for-hire industry yesterday, adding a few things here that people can do to protect themselves from these types of threats online. https://t.co/G4Clr3kxch

[David Agranovich @DavidAgranovich]

1/ Today we released our research into the Surveillance-for-Hire industry. It includes 7 enforcements against surveillance entities from India, Israel, China, and North Macedonia and recommendations for holding this industry accountable. 🧵: https://t.co/qQp6EWA9f1

[J. A. Guerrero-Saade @juanandres_gs]

In the wake of fascinating technical feats that simultaneously enable dubious and necessary practices, I'm confronted with our collective difficulty with moral ambiguity. The difficult truth is that all of the following statements can be (and likely are) true at once–