Bulletproof hosting doesn't run on its own. It depends on facilitators: IP address brokers, carriers, data centers. Remove the facilitators, and the operation stops working.
In this blog, Threat Investigator Jonas Arnold looks at how we hold those facilitators accountable, and why an approach that's slow and methodical still beats one that's fast and shallow.
A few things the data shows:
👉️ IPv4 address brokers are a critical chokepoint for bulletproof hosters
👉️ Carrier and broker responses to SBL listings reveal a lot about their intentions
👉️ Clustering internet badness at specific facilitators makes them attractive to law enforcement
👉️ Evasion tactics from miscreants signal that the pressure is actually working
In case you missed it, read the full post here ⤵️
spamhaus.org/resource-hub/bu…
#BulletproofHosting #ThreatIntel #Cybercrime #HostingProviders
Dalya Manatova retweeted
Welp, that happened faster than I predicted. Thought it would be end of 2027, then early 2027, but agentic traffic growing so fast that bots have now passed human traffic online for the first time in the Internet's history. radar.cloudflare.com/traffic…
Very cool research! Prompt injection against AI-robots (e.g., drone), aka how to protect yourself from drone strikes.
news.ucsc.edu/2026/01/mislea…
Can’t wait to see some cool findings from netsci researchers
Someone made a Jeffrey Epstein connection database with 500+ different nodes.
The website allows you to search for official documents that connect affiliates and co-conspirators.
epsteinsecrets.com/network?n…
Dalya Manatova retweeted
Understanding the ByBit Hack for Crypto Noobs
Crypto exchanges utilize Hot, Warm, and Cold wallets to keep their funds safe. Hot wallets are wallets the exchange that send and receive transactions every second from the exchanges users. Cold wallets are used to store large amounts of crypto for a longer period of time. Cold wallets are used to top up the balance of the Hot wallets when they get to a determined level.
ByBit was doing a routine transfer of ETH from one of their cold wallets to a warm wallet. They utilize Multi-sig which is where multiple signatures need to be given in order for a transaction to be sent. This is a common security measure used by cold wallets.
ByBit works along side @safe to help manage their multi-sig cold wallets. Safe is a smart contract cold wallet that uses multi-sig. During their routine cold wallet transfers CEO Ben Zhou said in his live stream "I checked the destination address on the Safe UI to make sure it is our warm wallet address and everything checked out". The original transfer was for 30,000 ETH ($80M). He confirmed the transaction with his ledger and the transfer was made.
30 minutes after the first 30,000 ETH transfer CEO of ByBit Ben Zhou gets an emergency call that their cold wallet has been drained for around 400,000 ETH (1.06B).
This is all we know for now, a lot of blockchain analysis people are tracking the hackers wallets so I will update you guys once we know more.
Dalya Manatova retweeted
Russia-linked hackers have been phishing Ukrainian military with Signal QR codes that look like group invites but instead add a linked device that eavesdrops on messages. Update Signal now to get its fix for a tactic that’s likely to spread beyond Ukraine. wired.com/story/russia-signa…
Dalya Manatova retweeted
1. Topological quantum computing is here! This thread explains how Microsoft’s Majorana 1 works and what it will mean for a fault tolerant future. I was invited to Azure Quantum Labs and got to hold this amazing new chip!
Dalya Manatova retweeted
🤓 I took a quick look at the BlackBasta chat log leaks, there are some interesting findings.
Here is my full analysis process using Python and generative AI.
A small thread👇
Dalya Manatova retweeted
Researchers have found that hackers potentially linked to the Kremlin-backed threat actor APT28 have been spying on diplomatic entities in Central Asia to gather economic and political intelligence in the region.
therecord.media/hackers-krem…
Interesting read before bed
My latest blog about Bulletproof hosting services!
#Cybersecurity #Cybercrime #BulletproofHosting #BPH #TechBlog #CyberThreats #Infosec #ThreatIntelligence #CyberThreatIntelligence #CTI #InformationSecurity #Investigation #underground
#forums
cybercrimediaries.com/post/5…
Should’ve posted this earlier 🙈
Join our seminar tomorrow!
Dalya Manatova is pursuing her Ph.D. in Security Informatics at Indiana University. In this seminar, she'll discuss a work-in-progress study investigating the organizational and social dynamics within a ransomware group.
Join: bit.ly/4blPGtZ
Dalya Manatova retweeted
The IODA team is excited to share with you all our new Internet Freedom User Guide and Internet Shutdown Rapid Response Protocol. Check out the blog post here: ioda.inetintel.cc.gatech.edu… and download the user guide on our help page: ioda.inetintel.cc.gatech.edu…
Dalya Manatova retweeted
This week's net.wars, "Core values", goes to this year's Workshop on the Economics of Information Security and finds realigned incentives: netwars.pelicancrossing.net/…
A legendary cryptographer and an amazing researcher passed away today. Ross Anderson is an inspiration of science for good.🖤
Dalya Manatova retweeted
2022:
- oh nooo!!! you can't run language models on cpu! you need an expensive nvidia GPU and special CUDA kernels and–
- *one bulgarian alpha chad sits down and writes some c++ code to run LLMs on cpu*
- code works fine (don't need a GPU), becomes llama.cpp
2023:
- oh noo!! you can't train language models without a special reward model and RLHF! you need to be applying policy gradient and tuning hyperparameters–
- *a couple of stanford phd students sit down and work out the math*
- math works fine (don't need RL), becomes DPO
2024:
???

























