fastfire

Head of Cyber Threat Intelligence @ Würth Group, GCTI/CPENT/CEH/CND/CSA/ECSA/ECIH/CTIA, owner of SATAYO CTI platform & deepdarkCTI - member of @Curatedintel

[fastfire @fastfire]

📢A new interview is available on #deepdarkCTI. This time, we wanted to delve deeper into the #NoName057 threat actor
☢️The pro-Russia hacktivist collective emerged in March 2022 following the Russian invasion of Ukraine
👉 You can read the interview at https://t.co/q95UQcmWIc

[fastfire @fastfire]

📢 A new interview is available on #deepdarkCTI. This time, we wanted to delve deeper into the #BreachForums, interviewing the forum owner, diencracked
🕵️‍♂️ The interview, which we publish in full, was conducted in May 2026.
👉 You can read the interview at https://t.co/iki5nALWEc

[fastfire @fastfire]

📢 A new interview is available on #deepdarkCTI. This time, we wanted to delve deeper into the #MedusaLocker ransomware gang.
🕵️‍♂️ The interview, which we publish in full, was conducted in May 2026 by Erez.
👉 You can read the interview at https://t.co/xDjTijSbZR

[fastfire @fastfire]

⚔️ The #SATAYO TIP becomes a key element in the continuous #threat #hunting process thanks to seamless integration with long-standing benchmark tools like Elastic Security and #MISP.
👉🏼 Read the full article at the link https://t.co/oNXNpRUj8r

[fastfire @fastfire]

☢️ In recent days, the pro-Iran group #Handala has publicly released information regarding more than 180 profiles associated to the #Israeli #Air #Force and other strategic organizations/sectors.
👉🏼 Full article at https://t.co/6u2r6vKkxK

[fastfire @fastfire]

📢 New #Insomnia ransomware gang.
☢️ Active since October 2025, 17 victims published on their data leak site.
👉🏼 Onion link and TOX ID already available on #deepdarkCTI https://t.co/1DYRpICZjw

[fastfire @fastfire]

📌 How is the ransomware gang landscape evolving after the #RAMP forum seizure?
🔴 Another well-known forum seems to be becoming a point of reference in this field.
👉🏼 We discuss it in the article you can read at this link https://t.co/QULwlNQgXF

[fastfire @fastfire]

@0x6rss Yes, that chat contained a goldmine of information!

=== BAPHCHAT TELEGRAM CHAT ANALYSIS ===

Total records: 575,151
Unique users who wrote at least one message: 11,699

Top 3 most active users:
MissRose_bot: 11,362 posts
brucerivers: 7,534 posts
astounding: 7,442 posts

[fastfire @fastfire]

With 2025 now behind us, we can make some observations regarding the landscape of double-extortion #ransomware #attacks.
❓ Which ransomware gangs were the most active?
❓ Which sectors and countries were most affected?

👉🏻 Read the full article here https://t.co/RJ51GPcx1Z

[fastfire @fastfire]

📢 Recap of what happened in #deepdarkCTI in 2025:

✅ 586 commits
✅ 35 contributors
✅ 6,400 stars on GitHub
✅ 8 articles on https://t.co/MzpgQLnYdt
✅ 129 active users within the Telegram channel
✅ a total of 2,465 sources

🙏 Many thanks to the #deepdarkCTI community!

[fastfire @fastfire]

A new interview is available on the #deepdarkCTI project blog. This time, the interview concerns the #Benzona ransomware gang.
👉 You can read the full interview here https://t.co/UAnbGI8GLN

[fastfire @fastfire]

@MOHAMMADNI24249 Hi, the Telegram group of the project is reserved for contributors to the project itself. If you make a pull request to the project in Github by adding a source or if you want to write me in pvt, then I can send you the invitation link. Thank you!

[fastfire @fastfire]

🔴The problem of properly integrating #Threat #Intelligence into #Security #Operations processes is a recurring one.
📌 I wrote an article in which I described the integration process we have implemented.
👉🏻 Read the article here https://t.co/bcsxAQHRi9

[fastfire @fastfire]

@securityaffairs @sonoclaudio @signorina37H Likely related to the launch of Tor VPN (August 28) given the date of the first spike (September 1)

[fastfire @fastfire]

@gossy_84 Thanks for mentioning the project! I'm really happy it can be useful for those new to CTI or those who have been involved in it for a while. This motivates me every day to dedicate time to growing the deepdarkCTI project.

[ransomfeednews @ransomfeednews]

#Ransomware 📣 NEW FEATURE
La nuova sezione RF Domain Monitor permette il monitoraggio costante dei domini sotto controllo #Ransomfeed e di deepdarkCTI project (@fastfire), alla ricerca di variazioni DNS e law enforcement.
1/2

[fastfire @fastfire]

@AlvieriD Thank you @AlvieriD

[fastfire @fastfire]

📢 On October 23rd, I will have the pleasure of participating in the #NetEye #Conference 2025 as a speaker with the talk "From Intelligence to Action: Embedding TI into Your Security Operations".
👉🏼 You can register here https://t.co/AXOA7pmYct

[fastfire @fastfire]

📢 We interviewed Gabi, a member of the #Cyber ​​#Toufan group. This group, active since October 2024, has carried out several attacks against #Israeli targets.
The full interview is available at the link https://t.co/oRteWq94GQ

[fastfire @fastfire]

📢 At https://t.co/oHjIeXvSdt, you can find a detailed timeline of the main events related to the alleged seizure of the #XSS forum.
⏰ The timeline is constantly updated, taking into account relevant events that are also occurring in recent days.
#deepdarkCTI