#Intel471
LightNews LightNews
andyjabbour.bsky.social
Nice work from @intel471.bsky.social 🇷🇺 'Planning for Russia’s escalating hybrid war' www.intel471.com/blog/plannin... @gate15.bsky.social #CyberSecurity #Russia
Planning for Russia’s escalating hybrid war
Russia is escalating hybrid attacks across Europe, using sabotage, drone incursions and cyber operations to disrupt support for Ukraine. Intel 471’s Q3…
www.intel471.com
October 30, 2026 at 1:24 PM
ransomnews.online
⚠️🇮🇹 Vulnerabilities drive 57% of Italian access cases

#Intel471 attributes 57% of Italian initial-access cases to exploits, versus 6.5% globally.
🔗 more: www.intel471.com/lp/... and www.mckinsey.com/mgi...

#ransomNews #cyberthreats #Italy
Initial Access, Ransomware and Vishing: How Threat Actors Are Targeting Italy in 2026
Intel 471 is a leading provider of threat intelligence and security research.
www.intel471.com
November 1, 2026 at 12:37 PM
hendryadrian.bsky.social
Intel471 data show Italy disproportionately represented in initial-access listings and ransomware targeting, with vulnerability exploitation and web infrastructure prominent. Researchers suggest patching, technology reuse and SME prevalence may contribute, but no cause
Intel471 Data Show Italy’s Cyber Threat Patterns Differ Sharply From Global Trends
Intel471 data show Italy disproportionately represented in initial-access listings and ransomware targeting, with vulnerability exploitation and web…
cyber.hendryadrian.com
October 30, 2026 at 6:36 PM
hendryadrian.bsky.social
Intel471 data says Italian organizations account for about 7% of initial-access listings and face unusually high vulnerability-based access; the article explores delayed patching, reusable attacks and Italy’s SME-heavy economy as possible explanations.
Intel471 Data Finds Italy an Outlier in Cybercriminal Access Listings
Intel471 data says Italian organizations account for about 7% of initial-access listings and face unusually high vulnerability-based access; the article…
cyber.hendryadrian.com
October 29, 2026 at 2:12 PM
helpnetsecurity.com
Ransomware negotiation tactics have turned into a business process

🎥 Link to the video: www.helpnetsecurity.com/2026/09/08/r...

#cybersecurity #cybersecuritynews #CISO #ransomware #strategy #threatintel #incidentresponse @intel471.bsky.social
Ransomware negotiation tactics have turned into a business process - Help Net Security
Intel 471's Dave Ross breaks down ransomware negotiation tactics, from victim profiling and test decryptions to multi-extortion pressure.
www.helpnetsecurity.com
September 8, 2026 at 11:12 AM
hendryadrian.bsky.social
Ransomware negotiations now run like a business: attackers study revenue and insurance, use test decryptions to prove keys, and split roles across research, bargaining, and pressure. #Ransomware #Extortion #Intel471
Ransomware Negotiation Tactics Have Turned Into A Business Process
Dave Ross of Intel 471 explains the inner workings of ransomware negotiations, including how attackers research victims, set demands, and use test decryptions to prove they have a working key. He also highlights the criminal service economy, multi-extortion tactics, and the need for clear pre-incident response planning. #Intel471 #DaveRoss
www.hendryadrian.com
September 8, 2026 at 7:15 AM
cecallihelper.bsky.social
"From Skilled to Tactical Threat Hunting: Where to Focus for Maximum Impact Out of the Woods: The Threat Hunting Podcast | Season 2, Episode 4 March 13, 2025 | 12:00 - 1:30 PM EST" intel471.com/resources/po... #cybersec #natsec #coup #law
From Skilled to Tactical Threat Hunting: Where to Focus for Maximum…
Intel 471 empowers cybersecurity teams worldwide to be proactive with its TITAN platform and comprehensive coverage into the criminal underground.
intel471.com
February 13, 2025 at 1:30 PM
sherry1189.bsky.social
解析中國高端網路攻擊技術趨勢

網路能力在中國戰略目標中的關鍵作用
中國持續發展的網路能力在實現其戰略目標方面扮演了關鍵角色，這些目標包括確保合作夥伴與其政策保持一致，並塑造有利於自身的公共敘事。
-
中國在全球網路攻擊中的高端技術發展，尤其是與國家級攻擊組織（如 APT 團隊）相關的活動，近年成為國際社會的關注焦點。

這些技術不僅用於情報竊取，也被用來達成政治和經濟目的。

透過分析此趨勢，讀者能更好地理解中國如何利用網路能力來實現其地緣政治野心，例如維持盟友的政策協調，並操控國際輿論導向。
👇
intel471.com/blog/a-look-...
A Look at Trending Chinese APT Techniques
Cyber capabilities play a key role in achieving China’s strategic goals. Here's a look at significant state-sponsored actors, which are adopting stealthy…
intel471.com
November 24, 2024 at 10:59 AM
cybdetective.bsky.social
OSINT without APIs
Article by twitter.com/Intel471Inc about different #osint automation techniques:
Brute-Forcing
Port Scanning and Banner Grabbing
Web Spidering
Web Scraping
Working with DNS Zone Transfers/TXT records/WHOIS data
and more.
intel471.com/blog/osint-w...
Tip by twitter.com/hakluke
August 14, 2024 at 1:32 AM
campuscodi.risky.biz
NoName057(16) is selective with its "love"

intel471.com/blog/nato-su...

PS: They targeted the Netherlands again yesterday, mainly because of the NATO summit

www.telegraaf.nl/binnenland/p...
June 24, 2025 at 11:03 AM
campuscodi.risky.biz
Intel471 has published a profile on Tinker, a member of the Black Basta group who operated call centers, drafted phishing content, and strong-armed ransomware victims into paying

intel471.com/blog/a-look-...
A look at ‘Tinker,’ Black Basta’s phishing fixer, negotiator
The leader of the Black Basta ransomware group employed a trusted, experienced cybercrime actor nicknamed Tinker who he relied on for phishing content,…
intel471.com
June 19, 2025 at 12:29 PM
campuscodi.risky.biz
The source code of at least eight Android malware strains leaked on hacking forums last year, per Intel471

intel471.com/blog/android...
June 4, 2025 at 11:31 PM
campuscodi.risky.biz
Intel471 looks at how the TgToxic Android banking trojan was updated to use a DGA instead of a dead-drop C2 system

intel471.com/blog/android...
The image depicts the TLDs included in the malware configuration Feb. 14, 2025.
February 25, 2025 at 11:08 AM
campuscodi.risky.biz
Intel471 looks at all the cybercrime services taken down by law enforcement agencies in 2024

intel471.com/blog/law-enf...
Law enforcement hammered cybercrime in 2024. Is it working?
In 2024, authorities took aim at ransomware gangs, malware developers, cybercriminal infrastructure and cryptocurrency thieves. Here's a look at the…
intel471.com
February 5, 2025 at 9:06 PM
bluecyber.bsky.social
intel471.com/blog/threat-...
Threat hunting case study: Cozy Bear
Cozy Bear is a Russian, state-sponsored group that has conducted operations on behalf of Russia’s Foreign Intelligence Service aka SVR. Here's how to use…
intel471.com
December 17, 2024 at 12:45 AM
woozleweasels.bsky.social
It’s designed to steal user credentials, cryptocurrency from digital wallets and funds from banking and finance apps on android phones. I would not recommend having financial info on your phone, there is enough fraud already, I was just a victim last week of bank fraud.
intel471.com/blog/android...
Android trojan TgToxic updates its capabilities
Intel 471 mobile malware researchers recently discovered a campaign leveraging an updated version of TgToxic, an Android banking trojan. Here's an…
intel471.com
February 25, 2025 at 8:38 PM
ecrime.ch
A look at ‘Tinker,’ Black Basta’s phishing fixer, negotiator

One of tramp’s trust lieutenants was a threat actor who went by the moniker tinker. The actor tinker jo

Read more: https://intel471.com/blog/a-look-at-tinker-black-bastas-phishing-fixer-negotiator
June 19, 2025 at 12:39 PM
phrack.org
Thanks for the excellent writeup @intel471.bsky.social

www.intel471.com/blog/the-phr...
The Phrack leak: Examining an APT’s workstation
In August 2025, two anonymous researchers released 9 GB of data from a workstation of a likely advanced persistent threat (APT) group. Here’s an analysis of the data by Intel 471’s Cyber Geopolitical ...
www.intel471.com
September 12, 2025 at 6:20 PM
markkarayan.bsky.social
"I don't think the timing is right to put a ban on [ransomware payments]" says Charles Carmakal on @intel471.bsky.social

Says more needs to be done before we reach that point, like more intel sharing, and more gov action against TAs
www.youtube.com/watch?v=p-fo...
November 29, 2023 at 8:15 PM
happygeek.bsky.social
By me @forbes.com: Leave Britney alone. Oops, sorry, not that toxic. Leave Android alone, I mean it. #kudos @intel471.bsky.social

#infosec

www.forbes.com/sites/daveyw...
New Android Password Stealer Uses 1 Toxic SMS Text To Hack You
Toxic Android password stealer only needs to send a single SMS text message to entrap victims. What you need to know and do.
www.forbes.com
February 26, 2025 at 2:06 PM
rhisac.org
Join us on 12 June for a deep dive with Intel471 into building a threat hunt from an initial hypothesis to a structured, repeatable workflow.

This threat briefing also includes a session from Fastly about How Bots & AI Agents are Impacting Infrastructure.

Register: rhisac.zoom.us/meeting/regi...
June 9, 2026 at 8:07 PM
rhisac.org
Learn about key cyber threats facing the retail sector this holiday season in this report from Intel471:
8813571.fs1.hubspotusercontent-na1.net/hubfs/881357...
December 8, 2025 at 5:00 PM
rhisac.org
Join our briefing, which will provide insight from
@Intel471
on the intrusions of ShinyHunters and Scattered Spider. You will walk away with tools cybersec pros & threat hunters can start using today.

📅 3 Oct | 11 a.m. ET | Open to non-members
Register: rhisac.zoom.us/meeting/regi...
October 1, 2025 at 3:24 PM
rhisac.org
Level up your #ThreatHunting skills! Join our member-only course on 20 March at 11AM ET with @intel471.bsky.social. Learn to operationalize intel (TTPs), pivot data, document findings, & simulate real attack chains (crawling & walking).

+ earn CPE credit! 👉🏼 community.rhisac.org/events/empag...
March 10, 2025 at 1:36 PM
andranglin.bsky.social
Understanding and threat hunting for RMM software misuse
intel471.com/blog/underst...
Understanding and threat hunting for RMM software misuse
Remote monitoring and management software is useful for administrators and threat actors, who often abuse or install it. Here's a briefing on RMM platform…
intel471.com
May 5, 2025 at 5:58 PM