BlackHat USA Briefings 2025/2026 Speaker Signal: @SttyK.88 [email protected]
Joined May 2017
- Tweets24.5K
- Following1.4K
- Followers9.1K
- Likes29.2K
Pinned Tweet
Yay! My talk "Inside the Screen: Deep-Diving into North Korean IT Workers' Live Infrastructure" accepted BlackHat USA Briefings😎 But it's only for on demand.
blackhat.com/us-26/briefings…
棒 retweeted
Who gets to be #ShinyHunters? After Rey's arrest, a new account claimed the name "with the blessings of its former founders." I checked the keys. The admin key leaked, and someone forged a signed statement. Nobody can prove who owns the brand anymore. check out the full report here: arkemcyber.com/research/who-…
棒 retweeted
🚨FBI Warning: North Korean IT Worker Threat Growing🚨
North Korean state‑controlled IT workers are expanding efforts to infiltrate U.S. companies using stolen identities, U.S.-based facilitators, and remote access tools generating revenue that supports weapons programs.
Key tactics include:
🚩 Hiring Americans to appear in interviews, host laptops, or verify fake identities.
🚩Using stolen or rented personal information to obtain jobs.
🚩Subcontracting work to freelancers overseas.
🚩 Threatening violence or releasing stolen data to extort victims.
Protect Yourself & Your Business:
🚩 Be cautious of “gig” offers asking for device hosting or account access.
🚩 Watch for unusual remote access tools, identity inconsistencies, or unexplained third‑party involvement.
Report suspicious activity at ic3.gov or contact your local FBI Field Office.
Learn More Here: ic3.gov/PSA/2026/PSA261013
棒 retweeted
🚨 NEW THREAT INTEL: Troop 61786 Pivots to TOR & High-Port SweepsFollowing our latest infrastructure exposure, #Troop61786 (#APT5) is attempting to regroup—relying on TOR routing and commercial VPNs. Read the complete breakdown👉 threatreviewjournals.blogspo…
棒 retweeted
Thread 🧵
1/ NEW REPORT: Billions of advertising auctions determine in real time which ads we see on websites and in apps every day. Our latest research shows how the same data fueling this advertising ecosystem is being used to profile millions of users and silently infect targets with zero-click mercenary spyware, a novel attack technique we call "Adfection.”
Read the report: citizenlab.ca/research/how-d…
棒 retweeted
反ワクチン「神真都Q会」代表理事ら男3人を逮捕 無認可の寄生虫感染症薬を郵送か - 産経ニュース
sankei.com/article/20261015-…
神真都Q会は米国発の陰謀論集団「Qアノン」から派生した団体とされ、全国で「コロナウイルスは存在しない」などと主張するデモを実施した。
1/8 Today, @JulianVoeg from @RecordedFuture and I are publishing “Break the Silence: Tracking Silent Lynx Through Exposed Infrastructure,” a report on cyber espionage across Central Asia and the wider CIS that we presented today at @virusbtn
blog.talosintelligence.com/b…
棒 retweeted
Great to see my and @ashl3y_shen’s Silent Lynx (TAG-193/UAT-6275) research featured by @razhael at @Reuters!
Cyber espionage isn’t just for the big players. Our findings shed light on Kazakhstan-linked activity targeting Russia and the wider CIS.
reuters.com/legal/litigation…
棒 retweeted
If you use Signal on Android and if you really care about privacy, here are 3 default app settings that you should fix *TODAY*
alecmuffett.com/article/1676…
#android #privacy #security #signal
棒 retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
棒 retweeted
What if the IOC you’re looking for isn’t known yet? 🔎
Using Synapse + @teamcymru's global network telemetry, we turned known DPRK IT Worker behavior into a huntable pattern and uncovered previously unreported infrastructure.
hubs.ly/Q04B2vsM0
🚨An employee of OpenAI has been arrested for and charged with using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications.
🔗: justice.gov/opa/pr/saudi-nat…
棒 retweeted
🚨 Today, the @FBI and @TheJusticeDept announced a series of coordinated actions against the North Korean IT Worker threat – securing charges against 14 individuals, making two arrests, seizing nearly 190 devices, and conducting operations at more than 40 suspected “laptop farms” across Texas.
These actions were taken in response to North Korea’s ongoing deployment of thousands of remote IT workers to infiltrate Western companies, earn revenue for the regime, and gain access to sensitive information. These workers are often supported by domestic enablers and laptop farms.
Disrupting these schemes remains a top priority for the FBI. In 2026 alone, 8 individuals have been sentenced to prison for their roles in this activity.
Coordination between the private sector and federal law enforcement was central to the latest effort. CrowdStrike’s Counter Adversary Operations team provided vital support to the FBI’s effort to identify and disrupt these laptop farms.
justice.gov/opa/pr/justice-d…
ALT North Korea uses stolen identities to deploy remote IT workers infiltrating US firms, FBI and DOJ announce arrests and seizures in coordinated crackdown.
ｷﾀ━━━━(ﾟ∀ﾟ)━━━━!!
justice.gov/usao-ndtx/pr/ope…
