Sloky

Hi, just published an analysis on how Lumma infostealer not only survived the major multi-nation takedown in May but is actively thriving with new infrastructure and marketplace connections. Have a look if you are interested.

https://intelinsights.substack.com/p/lumma-meets-lolzteam

• Discovered direct connections to LolzTeam marketplace and "traffers" operations
• Identified the BASE34 group as a major log distribution network
• Lumma resumed operations within days, with evidence of continued development post-takedown

Feedback is always appreciated! Thanks

Hi, just published an analysis on how Lumma infostealer not only survived the major multi-nation takedown in May but is actively thriving with new infrastructure and marketplace connections. Have a look if you are interested.

• Discovered direct connections to LolzTeam marketplace and "traffers" operations
• Identified the BASE34 group as a major log distribution network
• Lumma resumed operations within days, with evidence of continued development post-takedown

https://intelinsights.substack.com/p/lumma-meets-lolzteam

Feedback is always appreciated! Thanks

Hey guys! I built a telegram bot 🤖 for intel collection that monitors hacktivist group channels and forwards translated messages to a centralized feed. Currently tracking 18 groups, will add more in the coming weeks.

🎯 These groups tend to have short operational lifespans, so I'll continue curating active channels. Feel free to reach out if you notice any broken linksThanks!

Have a look if that interest you

t[.]me/hgtrackerbot

Hey guys! I built a telegram bot 🤖 for intel collection that monitors hacktivist group channels and forwards translated messages to a centralized feed. Currently tracking 18 groups, will add more in the coming weeks.

🎯 These groups tend to have short operational lifespans, so I'll continue curating active channels. Feel free to reach out if you notice any broken linksThanks!

Have a look if that interest you

/hgtrackerbot

I've been tracking the surge in hacktivist activity following India-Pakistan tensions and I just finished my analysis.

https://intelinsights.substack.com/p/profiling-hacktivist-groupsalliances

The majority of groups are rallying around pro-Palestinian/anti-India agendas, with AnonSec serving as a central coordination hub. But here's what caught my attention - follower counts don't always match technical capability.

Most of the groups are running dual operations - cyber attacks alongside psychological warfare. The most concerning aren't necessarily the loudest voices, but those quietly building both technical skil

I've been tracking the surge in hacktivist activity following India-Pakistan tensions and I just finished my analysis.

https://intelinsights.substack.com/p/profiling-hacktivist-groupsalliances

The majority of groups are rallying around pro-Palestinian/anti-India agendas, with AnonSec serving as a central coordination hub. But here's what caught my attention - follower counts don't always match technical capability.

Most of the groups are running dual operations - cyber attacks alongside psychological warfare. The most concerning aren't necessarily the loudest voices, but those quietly building both technical skills and strategic influence.

Hi everyone, just finished my latest investigation. Started from a single malware sample and uncovered an extensive network of Red Delta/Mustang Panda and a potential operational overlap between Red Delta and APT41 groups.

If you are interested have a look at the full IoC list and detailed methodology in the blog 👇 https://intelinsights.substack.com/p/hunting-pandas

Feel free to reach out if you want to expand on the findings.
Thanks and have a nice weekend!

Hi everyone, just finished my latest investigation. Started from a single malware sample and uncovered an extensive network of Red Delta/Mustang Panda and a potential operational overlap between Red Delta and APT41 groups.

If you are interested have a look at the full IoC list and detailed methodology in the blog 👇

https://intelinsights.substack.com/p/hunting-pandas

Hi, just finished my latest investigation. Started from a single malware sample and uncovered an extensive network of Red Delta/Mustang Panda and a potential operational overlap between Red Delta and APT41 groups.

If you are interested have a look at the full IoC list and detailed methodology in the blog 👇 https://intelinsights.substack.com/p/hunting-pandas

Hey guys,
Just finished a week long hunt. Started from bullet-proof hosting networks (Prospero AS200593) and uncovered a pretty extensive malicious crypto exchange operation spanning multiple ASNs. Starting from 2 IP blocks led to 206 unique IoC

https://intelinsights.substack.com/p/host-long-and-prosper

Hey guys,
Just finished a week long hunt. Started from bullet-proof hosting networks (Prospero AS200593) and uncovered a pretty extensive malicious crypto exchange operation spanning multiple ASNs. Starting from 2 IP blocks led to 206 unique IoC

https://intelinsights.substack.com/p/host-long-and-prosper

Just finished a week long hunt. Started from bullet-proof hosting networks (Prospero AS200593) and uncovered a pretty extensive malicious crypto exchange operation spanning multiple ASNs. Starting from 2 IP blocks led to 206 unique IoC

https://intelinsights.substack.com/p/host-long-and-prosper

Hi everyone, just published my latest research where I investigate another Lumma infostealer campaign operating on Prospero's bulletproof hosting (ASN 200593)

https://intelinsights.substack.com/p/prospering-lumma