The leader of the Black Basta ransomware group employed a trusted, experienced cybercriminal actor who went by the nickname Tinker. Tinker, who worked for the infamous Conti ransomware group, could quickly drum up phishing content aimed at stealing VPN creds and analyze stolen data to figure out how much an organisation might pay in ransom. Tinker knew how to run criminal call centers to social engineer victims into installing remote access software. More here from Intel 471's Adversary Intelligence team: https://intel471.com/blog/a-look-at-tinker-black-bastas-phishing-fixer-negotiator

This is the first time I've seen privacy used as a marketing argument for eyeglasses. Is Zenni's claim is accurate? Does deflecting infrared light foil facial recognition/AI-based tracking? #infosec

Russian man Andrei Tarasov was indicted on cybercrime charges related to the Angler exploit kit. He was arrested in Germany but slipped away to Russia — despite his anti-Russian views. Research by Intel 471 #infosec https://intel471.com/blog/how-an-alleged-russian-hacker-slipped-away

This didn't take long at all: "A hacker has breached and stolen customer data from TeleMessage, an obscure Israeli company that sells modified versions of Signal and other messaging apps to the U.S. government to archive messages." #infosec via @404mediaco https://www.404media.co/the-signal-clone-the-trump-admin-uses-was-hacked/

The White House has ordered an investigation of CISA and taken away Christopher Krebs' security clearance. It also has suspended security clearances of SentinelOne employees pending a review. A "Fact Sheet" calls Krebs "a significant bad-faith actor who weaponized and abused his government authority" and who "falsely and baselessly denied that the 2020 election was rigged and stolen." #infosec https://www.whitehouse.gov/fact-sheets/2025/04/fact-sheet-president-donald-j-trump-addresses-risks-from-chris-krebs-and-government-censorship/

Since 2024, Russia-based bulletproof hosting service Zservers has been breached, doxxed and sanctioned, but there are signs this cybercrime and ransomware service provider may not be finally done. New research from Intel 471. #infosec https://intel471.com/blog/zservers-bulletproof-hosting-for-crime

Nice chart of paid OSINT tools here plus an accompanying report on them from the UK OSINT Community group. #infosec https://www.osint.uk/state-of-the-market

Went out for a mountain bush walk this morning and child #2 spots this delight -- a blue mushroom! We looked for smurfs but unfortunately didn't find any. #Australia