@thezedwards
Account based inUnited States!
About this account
- Account based in
- United States
- Connected via
- Web
X says this location may be affected by a proxy or VPN.
Account-level information from X, not a live location or the device used for a specific post.
privacy & data supply chain research / Staff Threat Researcher @Infoblox / Co-Founder @DecryptAds // [email protected]
Joined April 2010
- Tweets19.4K
- Following7K
- Followers7K
- Likes24.8K
Pinned Tweet
We launched DecryptAds.com two weeks ago to help people dumpster dive on the programmatic ad tech ecosystem – the ad tech companies, publishers, apps and accountIDs. We’re building my dream ad tech research tool, but I want to explain why it kicks ass. 🧵
ICYMI the PoisonSeed threat actor continues successful attacks - imo new corporate victims using SendGrid nearly every single day since April 2025 // imo they still are capturing full email lists of victim companies - tons of folks get many of these emails, including ⬇️
Folks, phishers have figured out rage bait.
Got this today from "SendGrid HR". They're adding a trans youth message to my email footer this month.
Don't want it? Just click the button to remove it.
Sender is [email protected]
Rage is the new urgency.
Attackers don't care about your politics. They just want the click.
Beef prices go up and suddenly Mcdonalds is back to testing personalized ads in their drive thru... bloomberg.com/news/articles/…
h/t @adexchanger
that's a lot of revenue for Stake... 👀🌩️⚖️
The Curaçao Gaming Authority (CGA) was recently hacked and over 1,000 online offshore casinos data was leaked
The roughly 2TB dataset holds 84,000+ documents including license applications, regulatory assessments, passports, tax returns and financial records
A document from the leak that appears to be from April 2024, financial projection for Stake (Medium Rare NV) shows about $2.39 billion in revenue for 2023, with an expected revenue of roughly $2.5 billion by 2026
This is a fabulous piece from @mags_h11 & Jon Christian about AI slop websites from BBM.
fun-fact: I was able to literally 1-shot prompt the DecryptAds MCP to build this entire map of their publisher sites through countless pivots into low density accountIDs + other IDs...
🧵
ALT Map of the BBM publisher network -- numerous colored nodes connecting publisher sites together through pieces of metadata
NEW: Brown Brothers Media is the most successful media company you've never heard of. Its success was fueled by AI, fake writers, and fake reporting.
When we started asking questions, BBM started mass-deleting content. What it became next was even worse.
futurism.com/artificial-inte…
smallbusinessbonfire[.]com, solardaily[.]com, space-travel[.]com, spacedaily[.]com, spacemart[.]com, spacewar[.]com, terradaily[.]com, theartfulage[.]com, thevessel[.]io, tweakyourbiz[.]com, vegoutmag[.]com, newsreports[.]com, thelawdictionary[.]org
Researching AI slop networks can be a nightmare with how quickly they are being spun up, and if you aren't using programmatic advertising data for pivots, you literally won't be able to do this work effectively.
Our MCP is @ mcp.decryptads.com/ (would love any feedback!) 🖖
Zach Edwards retweeted
I'm retired from @Infoblox and I own no stock in it (it's a private company), but I am still proud of the work the company is doing using DNS-related data to combat malware in ways few others care to do. Check out the latest report on online casinos, discussed in this thread!
I’m out today with some new casino research I’ve been working on for a few months with the team at @Infoblox.
If you work with malware, or have any purview over blocking malware threats, you need to keep reading and not ignore this report even though it's "about casinos." 🧵
with some thoughts from me! Other folks covering NightmareStresser are missing the connections to Russia ⤵️🌩️⚖️
Authorities seize popular, long-running DDoS-for-hire service domains: Cybercriminals used NightmareStresser to launch hundreds of thousands of DDoS attacks since at least 2022. Threat actors behind the operation claimed links to Russia.
The post… cyberscoop.com/fbi-seizes-ni…
Appreciate the coverage from @TheRegister on this research with their piece "Low-quality casino sites conceal highly dangerous threat actors" @ theregister.com/security/202…
I’m out today with some new casino research I’ve been working on for a few months with the team at @Infoblox.
If you work with malware, or have any purview over blocking malware threats, you need to keep reading and not ignore this report even though it's "about casinos." 🧵
I’m out today with some new casino research I’ve been working on for a few months with the team at @Infoblox.
If you work with malware, or have any purview over blocking malware threats, you need to keep reading and not ignore this report even though it's "about casinos." 🧵
And fun-fact: some of the Chinese-language websites used for facilitating illegal gambling and money laundering are claiming to be endorsed by Steph Curry, featuring images of him on their homepage. Of course there's no indication he's actually endorsing the sites...
ALT Picture of Steph Curry from a low quality Chinese-language website
If you'd like to better understand the threats emanating from "low quality casino websites" check out our new Infoblox research "How Money Laundering, Scams, and Espionage Hide in a Web Full of Casino Garbage" infoblox.com/blog/threat-int…