Law10

[Law10 @btccve]

Tfw

[Ara Ghougassian @araghougassian]

your kidney can go for like $300k and you only need one to survive

god gave us all startup capital. you just have to want it bad enough

[Autism Capital 🧩 @AutismCapital]

Autist of the day award. 🏆

This is AWESOME.

[GangExposed RU @GangExposed_RU]

Hunting Conti’s Shadow

How I found what the FBI, the NSA and an army of researchers couldn't

Imagine you’re hunting the most disciplined cybercriminal group in the world — Conti.
These guys wrote the textbooks on OPSEC. Impeccable digital hygiene. In 2022, all their internal work chats (hundreds of thousands of messages) leaked online. Conti just laughed it off, then encrypted an entire country — Costa Rica — changed their signboard and kept working.
Intelligence services, analysts and independent researchers spent years looking for a single lead. Nothing. The FBI, admitting defeat, offered a $10 million reward for the names of the ringleaders. Three years of gold rush, thousands of analysts, endless reports — zero results.

But I decided to take the challenge. This is the story of how I, step by step, uncovered and exposed the connections, flights and identities of key figures in the group using a leak of the FSB border-control database "Granitsa”, fragments of Conti chat data, stylometry and pure OSINT. These anonymous actors had no faces — they only cast shadows. I turned on the spotlight, and their own shadows caught up with them. That’s how the hackers got names.

---

The first trace — Target and his travel companions

They weren’t tourists flying to Dubai

It all began with Alexey Kurashov. His name surfaced after analysing thousands of leads that pointed to Moscow-City. There was no smoking-gun evidence — only analysis of communication style in Conti chats that suggested he was “Target,” a key figure in the group. Only stylometry and instinct. I decided to act directly — I messaged him on Telegram. After a short exchange I realised — yes, it was him. The first key participant found. But irrefutable evidence was still needed.

I collected data on every time Kurashov crossed a border over the last ten years. Dozens of flights, hundreds of travel companions. Gradually a network of his closest contacts emerged — people he flew with again and again. Trips to the UAE since 2021 stood out in particular. These weren’t random vacations: the same faces, flights back and forth like clockwork. As if the hackers were operating to a timetable. But why?
I decided to dig deeper.

---

Timeline: mapping their secrets

To understand how this network operated I built a combined visual timeline of Kurashov’s flights and those of his travel companions. Each flight was a mosaic piece revealing their movements. (On the chart, flights to the UAE are marked yellow; all other countries are green.) At the same time I dove into the Conti chats — and began comparing. All participants observed strict conspiracy and didn’t even trust one another.

But systematic work paid off. In a Rocket chat I found a message from user RED — an account Target used for only a couple of hours:

2021-10-12 15:35:49 — red: "we are sending the guys early in the morning"

Seems innocuous at first glance. But the flight data told more: on 13 October 2021, on SU-520 to Dubai, Marat Nurtdinov and Oleg Fakeev — close friends of Kurashov — departed. A coincidence? Hardly.
This was the first trace leading from the digital world into the real one.

---

The line that led me to Conti’s Dubai office

Another clue surfaced in Jabber. A user called Bloodrush (who I established was Target through style analysis and fact-checking) wrote:

13.10.2021: “I don’t have access to the online wallet until Friday, I only have clean crypto.”

And on 14 October — guess what?
Kurashov flies to Dubai!
On the same SU-520 flight with him — a certain Vladimir Kvitko.
Bloodrush disappears from the network and reappears on 15 October.
Friday. Everything lined up perfectly.

💥 Next I’ll tell you who Vladimir Kvitko is, and how a single small OPSEC mistake erased a decade of his supposedly flawless operational discipline.

[gabriel @gabriel1]

sf has the most autistic billboards

[Law10 @btccve]

Dilly dallying

[Autism Capital 🧩 @AutismCapital]

Comments be like

[The Sopranos Guy™ @uncle_june]

The Sopranos (2025)

[Simone Margaritelli @evilsocket]

5 years from now, hacking will be like in the 90s when you just had to telnet into something and login with admin:admin.

[Law10 @btccve]

@quintana_pt2 And have them claim my work as their IP? No ty

[Law10 @btccve]

Mirror mirror on the corporate wall, shall I climb the ladder or build my own

[Dylan O'Sullivan @DylanoA4]

Nietzsche, what a line

[Law10 @btccve]

@quintana_pt2 Could I use AI? Yeah yeah who wouldn’t

[Law10 @btccve]

No one wants to read anymore, it’s summerise this summerise that Claude this gpt that. Whatever happened to skim reading or speed reading smh Ai taking our books as well

[Law10 @btccve]

@quintana_pt2 Let me tell you something, I have a semester and a half of college. So I understand random forests, I understand Neural networks. In my world it does not go down.

[Ray Dalio @RayDalio]

https://t.co/Xpdl8fYoBg

[H4x0r.DZ @h4x0r_dz]

Breaking Update on the ByBit Hack 🚨🚨🚨🚨

It has been confirmed that the Lazarus Group compromised Safe{Wallet}’s AWS S3 bucket and injected malicious javascript code that resulted in a $1,400,000,000 loss.

If you report this to Safe, you might get a $500 bounty.