I'm going to be at Infosecurity Europe next week. It's obviously far from my first time there, but it'll be my first time with a media pass as a freelancer.

I'm still trying to find solutions to the 'where I will actually write things for' thing (hint: you can commission me!) but I'm looking forward to going and catching up with people and seeing interesting talks. :)

This is a great source of #threatintel on tracking #C2 infrastructure

From: @SarlackLab
https://ioc.exchange/@SarlackLab/111880325261319385

New, from me:

Authorities in Australia, the United Kingdom and the United States this week levied financial sanctions against a Russian man accused of stealing data on nearly 10 million customers of the Australian health insurance giant Medibank. 33-year-old Aleksandr Ermakov allegedly stole and leaked the Medibank data while working with one of Russia's most destructive ransomware groups, but little more is shared about the accused. Here's a closer look at the activities of Mr. Ermakov's alleged hacker handles.

https://krebsonsecurity.com/2024/01/who-is-alleged-medibank-hacker-aleksandr-ermakov/

tl;dr: Ermakov appears to have been a top member of the rapacious REvil ransomware group. He also runs an IT consulting business w/ a guy I identified in Dec. 2023 as Rescator, the hacker handle that sold tens of millions of payment cards stolen from Target and Home Depot in 2013 and 2014.