Daniel Collyer

Cyber Threat Analyst for @sosintel

[Daniel Collyer @cyberdmc0909]

@SOSIntel Even going as far as to provide guidance to prevent re-infection...

[Daniel Collyer @cyberdmc0909]

At @SOSIntel we've been digging through the leaked #Lockbit chat. Fascinating to see how threat actors are dealing with the victims (or "clients" as per the database). Some little moments though really standout...

[Daniel Collyer @cyberdmc0909]

@SOSIntel Others however, are showing a decent level of customer service and negotiation skills...

[Daniel Collyer @cyberdmc0909]

@SOSIntel It appears not all affiliates are as tech savvy as others, as this chat snippet shows.

Appears as if the victim/client has managed to trick their way into getting all their data decrypted!! #noob

[Daniel Collyer @cyberdmc0909]

The steep drop-off after the top 4–5 names also suggests many affiliates operate at low volume — possibly opportunistically or short-term.

It aligns with the broader picture of ransomware-as-a-service: a few heavy users, many dabblers. #CyberThreatIntel

[Daniel Collyer @cyberdmc0909]

Analysis by @SOSIntel of #LockBit chat logs shows uneven affiliate activity.

“Christopher” handling far more than any other.

“JamesCraig,” “Swan,” and “PiotrBond” follow, but at much lower volumes.

Highlights the disparity in engagement. #CTI #Ransomware

[Daniel Collyer @cyberdmc0909]

This raises questions about LockBit’s affiliate model.

Is “Christopher” a particularly prolific affiliate, a core member using a handle, or someone managing multiple operators behind one identity?

[Daniel Collyer @cyberdmc0909]

📊 From leaked #LockBit data: victim chat activity rose from ~20 in Dec '24 to 40–60/month through Apr '25.

Still far below the victim counts seen on their leak site (per @SOSIntel), suggesting many pay without engaging.

Quiet victims, loud impact. #Ransomware #CTI

[Daniel Collyer @cyberdmc0909]

New blog post from @SOSIntel : Seeing Clearly: Understanding and Addressing Bias in OSINT

Bias can creep into even the most objective research. Learn how to identify, mitigate, and manage bias in your OSINT process.

Read now 👉 https://t.co/FgSSDC0lvf
#OSINT #ThreatIntel

[Daniel Collyer @cyberdmc0909]

📡 OSINT is powerful — but only if it’s evaluated properly.

From misidentifications to misinformation, poor analysis can cause real damage.

🧠 @SOSIntel shows you how to assess sources, apply the Admiralty Code, and use the right tools:
👉 https://t.co/BM1mzMjzdc
#OSINT

[Daniel Collyer @cyberdmc0909]

The latest blog from @SOSIntel explores OPSEC in OSINT—why protecting yourself is just as important as uncovering intelligence.

🛡️ From digital footprints to secure setups, learn how to investigate smart.

👉 https://t.co/Tk3xIZtG0r

#OSINT #CyberSecurity #OPSEC

[Daniel Collyer @cyberdmc0909]

🔐 5 Days, 5 Tips from @SOSIntel! 💻 Keep your software updated to patch vulnerabilities and protect your devices. Turn on auto-updates! #CybersecurityMonth #PatchManagement #NCSCForStartups

[Daniel Collyer @cyberdmc0909]

🔐 5 Days, 5 Tips from @SOSIntel! 🛡️ Be cautious with what you share on social media. Review your privacy settings to stay safe from targeted attacks. #CybersecurityMonth #PrivacyMatters #NCSCForStartups

[Daniel Collyer @cyberdmc0909]

Tip 3: Multi-Factor Authentication (MFA)
🔐 5 Days, 5 Tips from @SOSIntel! 🔑 Enable multi-factor authentication (MFA) to add an extra layer of security. It's simple and effective! #CybersecurityMonth #MFA #NCSCForStartups

[Daniel Collyer @cyberdmc0909]

🔐 5 Days, 5 Tips from @SOSIntel! 🔒 Your password is your first line of defence. Use strong, unique passwords for every account, and consider a password manager. #CybersecurityMonth #PasswordSafety #NCSCForStartups

[Daniel Collyer @cyberdmc0909]

🔐 5 Days, 5 Cybersecurity Tips from @SOSIntel! 🚨 Watch out for phishing emails—always verify the sender before clicking links or downloading attachments. Stay alert! #CybersecurityMonth #PhishingAwareness #NCSCForStartups

[Daniel Collyer @cyberdmc0909]

Ah- Aurora Borealis!? At this time of year, at this time of day, in this part of the country, localized entirely within your kitchen!?

[Daniel Collyer @cyberdmc0909]

🚨 New blog alert! 🚨
Learn to Spot the Scam and defend against phishing & social engineering attacks. Protect your business from evolving threats with our latest post here: https://t.co/o4b6fIyCU3
#NCSCForStartups #Cybersecurity #Phishing #CybersecurityAwarenessMonth
@SOS_Intel

[Daniel Collyer @cyberdmc0909]

🚨 It's Cybersecurity Awareness Month! 🚨

Our latest blog from @SOSIntel covers today's biggest threats & why awareness is key for everyone. 🔒💻

Read here: https://t.co/Kc2qzIW2IX
#CyberSecurityAwarenessMonth #NCSCForStartups #SOSIntelligence #Phishing #Ransomware

[Daniel Collyer @cyberdmc0909]

🔒 Final blog of SME Month from @SOSIntel: "Creating a Cybersecurity Culture in Your SME" is now live!

Discover tips to enhance your SME’s security culture here: https://t.co/33z8msg7ls

#SME #CyberSecurity #CyberCulture #SOSIntelligence #InfoSec #NCSCForStartups