#recordedfuture — Public Fediverse posts

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

https://krebsonsecurity.com/2026/04/germany-doxes-unkn-head-of-ru-ransomware-gangs-revil-gandcrab/

#AnatolySergeevitschKravchuk #GermanFederalCriminalPolice #DaniilMaksimovichShchukin #Ne'er-Do-WellNews #DmitrySmilyanets #ALittleSunshine #RecordedFuture #DanielGolden #WebFraud2.0 #ReneeDudley #Ransomware #GandCrab #Intel471 #Ger0in #rEvil #UNKN

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

https://krebsonsecurity.com/2026/04/germany-doxes-unkn-head-of-ru-ransomware-gangs-revil-gandcrab/

#AnatolySergeevitschKravchuk #GermanFederalCriminalPolice #DaniilMaksimovichShchukin #Ne'er-Do-WellNews #DmitrySmilyanets #ALittleSunshine #RecordedFuture #DanielGolden #WebFraud2.0 #ReneeDudley #Ransomware #GandCrab #Intel471 #Ger0in #rEvil #UNKN

#China appears to be using a secret training platform to rehearse #cyberattacks against the critical infrastructure of its closest neighbors, according to a cache of leaked technical documents reviewed by #RecordedFuture News.

🔗 https://therecord.media/leaked-china-documents-show-testing-cyber-neighbors
1/4

The concerted attack on REST represents merely one episode in a broader, sophisticated information war aimed at marginalizing independent media. Under the pretext of “combating disinformation,” these NGOs aggressively encroach upon sovereign information spaces, promoting narratives that favor Western interests while labeling any dissenting viewpoints as “propaganda.”

...

For instance, the Omidyar Network provided financial backing for anti-government protests in Nigeria in 2024, demonstrating its willingness to influence political outcomes abroad. Similarly, in collaboration with the U.S. Agency for International Development (USAID), the Omidyar Network allocated $500,000 to the pro-Western Ukrainian NGO Center UA, associated with oligarch Oleg Rybachuk, and $335,000 to the New Citizen project. Both initiatives played significant roles in the 2014 Ukrainian coup, highlighting the foundations’ strategic involvement in regime-change operations.

...

A think-tank and non-governmental organization based in Vilnius, Lithuania, was founded in 2018 to counter online disinformation. The organization actively promotes the narrative of Russian “disinformation” in the Baltic states, Poland, Georgia, Montenegro, North Macedonia, and the United States. Debunk.org receives grants from the Lithuanian Ministry of Foreign Affairs and Ministry of Defense, the German Federal Government, and the United Kingdom’s Foreign Office.

@Acta Populi — 2025-09-27 14:25:02 The Thought Police Are Real: How Western NGOs Wage Information War Under the False Flag of “Fighting Disinformation” restmedia.io/the-thought-polic…

Recorded Future August 2025 report flags 18 critical cybersecurity vulnerabilities, with Citrix and WinRAR exploits leading urgent patch calls. Stay secure—prioritize updates now!

#SecurityLand #BusinessShield #Cybersecurity #ThreatIntelligence #RecordedFuture #InsiktGroup #Report #CVE #Citrix #Cisco #Winrar

Read More: https://www.security.land/recorded-future-insikt-group-august-2025-report-18-high-impact-vulnerabilities-prioritized-for-patching/

Bulletproof Host Stark Industries Evades EU Sanctions https://krebsonsecurity.com/2025/09/bulletproof-host-stark-industries-evades-eu-sanctions/ #StarkIndustriesSolutionsLtd #Russia'sWaronUkraine #PQHostingPlusS.R.L. #Ne'er-Do-WellNews #AndreyNesterenko #ALittleSunshine #LatestWarnings #RecordedFuture #WorkTitansB.V. #IvanNeculiti #MisfitsMedia #YoussefZinad #YuriNeculiti #domaintools #MIRhosting #PQHosting #WTHosting #AS209847

Bulletproof Host Stark Industries Evades EU Sanctions https://krebsonsecurity.com/2025/09/bulletproof-host-stark-industries-evades-eu-sanctions/ #StarkIndustriesSolutionsLtd #Russia'sWaronUkraine #PQHostingPlusS.R.L. #Ne'er-Do-WellNews #AndreyNesterenko #ALittleSunshine #LatestWarnings #RecordedFuture #WorkTitansB.V. #IvanNeculiti #MisfitsMedia #YoussefZinad #YuriNeculiti #domaintools #MIRhosting #PQHosting #WTHosting #AS209847

Bulletproof Host Stark Industries Evades EU Sanctions

https://krebsonsecurity.com/2025/09/bulletproof-host-stark-industries-evades-eu-sanctions/

#StarkIndustriesSolutionsLtd #Russia'sWaronUkraine #PQHostingPlusS.R.L. #Ne'er-Do-WellNews #AndreyNesterenko #ALittleSunshine #LatestWarnings #RecordedFuture #WorkTitansB.V. #IvanNeculiti #MisfitsMedia #YoussefZinad #YuriNeculiti #domaintools #MIRhosting #PQHosting #WTHosting #AS209847

Bulletproof Host Stark Industries Evades EU Sanctions

https://krebsonsecurity.com/2025/09/bulletproof-host-stark-industries-evades-eu-sanctions/

#StarkIndustriesSolutionsLtd #Russia'sWaronUkraine #PQHostingPlusS.R.L. #Ne'er-Do-WellNews #AndreyNesterenko #ALittleSunshine #LatestWarnings #RecordedFuture #WorkTitansB.V. #IvanNeculiti #MisfitsMedia #YoussefZinad #YuriNeculiti #domaintools #MIRhosting #PQHosting #WTHosting #AS209847

iOS zero-click attacks used to deliver Graphite spyware (CVE-2025-43200) https://www.helpnetsecurity.com/2025/06/13/ios-zero-click-attacks-used-to-deliver-graphite-spyware-cve-2025-43200/ #governmentbackedattacks #AmnestyInternational #RecordedFuture #vulnerability #CitizenLab #Don'tmiss #Hotstuff #exploit #privacy #spyware #Europe #News #iOS

iOS zero-click attacks used to deliver Graphite spyware (CVE-2025-43200) https://www.helpnetsecurity.com/2025/06/13/ios-zero-click-attacks-used-to-deliver-graphite-spyware-cve-2025-43200/ #governmentbackedattacks #AmnestyInternational #RecordedFuture #vulnerability #CitizenLab #Don'tmiss #Hotstuff #exploit #privacy #spyware #Europe #News #iOS

British intel intern pleads guilty to smuggling top secret data out of protected facility.

Nothing about this makes sense.

1. A 25 year old intern.

No shade to interns but seems a bit old.

2. Intern had access to top secret intel.

Again nothing against interns, but give them access to top secret intel?

3. Intern uploaded top secret intel to a hard drive connected to his personal computer?

Why is anyone allowed to bring a personal phone int a facility that accesses top secret intel? Ever hear about a SCIF?

Either the story is missing a ton of facts or the British GCHQ had terrible operational security.

https://therecord.media/british-intern-gchq-charged-smuggling

#recordedfuture #scif #topsecret #gchq #intelligence #opsec

Just to introduce some transparency: according to CNN, it was #TheRecord,the 1st media which reported on the fact that the #USCyberCommand would suspend offensive ops against #Russia.The Record is owned by intelligence firm #RecordedFuture,which in 2022 signed a MoU with #Ukraine

Just to introduce some transparency: according to CNN, it was #TheRecord,the 1st media which reported on the fact that the #USCyberCommand would suspend offensive ops against #Russia.The Record is owned by intelligence firm #RecordedFuture,which in 2022 signed a MoU with #Ukraine

Solo per trasparenza: CNN riporta che 1° media a dare notizia che il US Cyber Command sospenderebbe operazioni offensive contro #Russia è The Record. #TheRecord è di proprietà dell'azienda di intelligence #RecordedFuture che nel 2022 ha stabilito un contratto con #Ucraina

Solo per trasparenza: CNN riporta che 1° media a dare notizia che il US Cyber Command sospenderebbe operazioni offensive contro #Russia è The Record. #TheRecord è di proprietà dell'azienda di intelligence #RecordedFuture che nel 2022 ha stabilito un contratto con #Ucraina

The latest spin on the Home Office demand for a backdoor into Apple iCloud/iMessage storage is “…it’s not a backdoor, we just want existing exploitable weaknesses to NOT be removed”

Read the attached, and consider that the existing access mechanisms would ALSO remain available to malicious actors.

They don’t want the architectural security holes to be bricked-up. It’s a bit like they fear that Apple & Meta are building on some sort of surveillance green-belt.

Quote RecordedFuture’s Alexander Martin:

But my frustration with the phrase “back door” is how it misrepresents the British government’s intention. That intention is explicitly and intentionally to not create some kind of covert Top Secret capability to access encrypted data […] and to not do so because such a weakness could be abused by malicious actors. Instead, the point of TCNs is just to ensure that existing access methods remain available … as they were with iCloud up until November 2022.

Full article/argument/appeal, at LinkedIn

#apple #encryption #endToEndEncryption #homeOffice #privacy #recordedFuture

Recorded Future Tagged as ‘Undesirable’ in Russia https://www.securityweek.com/recorded-future-tagged-as-undesirable-in-russia/ #threatintelligence #RecordedFuture #Cyberwarfare #Government #Mastercard #cyberwar #Russia

Recorded Future Tagged as ‘Undesirable’ in Russia https://www.securityweek.com/recorded-future-tagged-as-undesirable-in-russia/ #threatintelligence #RecordedFuture #Cyberwarfare #Government #Mastercard #cyberwar #Russia

Recorded Future Tagged as ‘Undesirable’ in Russia https://www.securityweek.com/recorded-future-tagged-as-undesirable-in-russia/ #threatintelligence #RecordedFuture #Cyberwarfare #Government #Mastercard #cyberwar #Russia

Recorded Future Tagged as ‘Undesirable’ in Russia https://www.securityweek.com/recorded-future-tagged-as-undesirable-in-russia/ #threatintelligence #RecordedFuture #Cyberwarfare #Government #Mastercard #cyberwar #Russia

Caught in the Net https://ciso2ciso.com/caught-in-the-net/ #0-CT-SOC-CSIRTOperations-ThreatIntelligence #CISO2CISONotepadSeries #RecordedFuture #InsiktGroup

Caught in the Net https://ciso2ciso.com/caught-in-the-net/ #0-CT-SOC-CSIRTOperations-ThreatIntelligence #CISO2CISONotepadSeries #RecordedFuture #InsiktGroup

#Mastercard invests in continued defense of global digital economy with acquisition of #RecordedFuture

"Global #ThreatIntelligence capabilities complement Mastercard’s existing suite of services delivering cyber resilience and trust" https://www.mastercard.com/news/press/2024/september/mastercard-invests-in-continued-defense-of-global-digital-economy-with-acquisition-of-recorded-future/

#Mastercard invests in continued defense of global digital economy with acquisition of #RecordedFuture

"Global #ThreatIntelligence capabilities complement Mastercard’s existing suite of services delivering cyber resilience and trust" https://www.mastercard.com/news/press/2024/september/mastercard-invests-in-continued-defense-of-global-digital-economy-with-acquisition-of-recorded-future/

Cyble’s Manish Chachada Explains Why Independence Matters in Threat Intelligence https://thecyberexpress.com/cyble-manish-chachada-mastercards-acquisition/ #MasterCard’sacquisitionofRecordedFuture #Mastercard'sacquisition #Mergers&Aquisitions #TheCyberExpressNews #ThreatIntelligence #TheCyberExpress #ManishChachada #RecordedFuture #FirewallDaily #BusinessNews #SecurityPill #cyble

Cyble’s Manish Chachada Explains Why Independence Matters in Threat Intelligence https://thecyberexpress.com/cyble-manish-chachada-mastercards-acquisition/ #MasterCard’sacquisitionofRecordedFuture #Mastercard'sacquisition #Mergers&Aquisitions #TheCyberExpressNews #ThreatIntelligence #TheCyberExpress #ManishChachada #RecordedFuture #FirewallDaily #BusinessNews #SecurityPill #cyble

Mastercard acquires US cybersecurity firm Recorded Future, expanding its footprint into the threat intelligence world.

#US #Mastercard #RecordedFuture #cybersecurity #infosec

https://cnews.link/mastercard-expands-cybersecurity-footprint-with-acquisition-3/

Mastercard acquires US cybersecurity firm Recorded Future, expanding its footprint into the threat intelligence world.

#US #Mastercard #RecordedFuture #cybersecurity #infosec

https://cnews.link/mastercard-expands-cybersecurity-footprint-with-acquisition-3/

For everyone who is scratching their heads about #Mastercard buying #RecordedFuture, they already bought #NuData in 2017, #RiskRecon in 2019, and #CipherTrace in 2021. I do hope the RF keeps putting out quality work. I'm happy still with RiskRecon after the acquisition, so I'm optimistic.
https://www.businesswire.com/news/home/20240911437309/en/Mastercard-Invests-in-Continued-Defense-of-Global-Digital-Economy-With-Acquisition-of-Recorded-Future

For everyone who is scratching their heads about #Mastercard buying #RecordedFuture, they already bought #NuData in 2017, #RiskRecon in 2019, and #CipherTrace in 2021. I do hope the RF keeps putting out quality work. I'm happy still with RiskRecon after the acquisition, so I'm optimistic.
https://www.businesswire.com/news/home/20240911437309/en/Mastercard-Invests-in-Continued-Defense-of-Global-Digital-Economy-With-Acquisition-of-Recorded-Future

Mastercard Acquires Recorded Future for $2.65B to Enhance Digital Trust https://thecyberexpress.com/mastercard-acquires-recorded-future/ #MastercardAcquiresRecordedFuture #recordedfutureacquisition #Mergers&Aquisitions #TheCyberExpressNews #TheCyberExpress #RecordedFuture #FirewallDaily #BusinessNews #Mastercard

The Not-So-Secret Network Access Broker x999xx

https://krebsonsecurity.com/2024/07/the-not-so-secret-network-access-broker-x999xx/

#OzerskTechnologicalInstituteNationalResearchNuclearUniversity #kirtsov@telecom.ozersk.ru #MaksimGeorgievichKirtsov #U.S.DepartmentofJustice #maxnmalias[email protected] #КирцовМаксимГеоргиевич #ConstellaIntelligence #dashin2008@yahoo.com #Ne'er-Do-WellNews #maksya@icloud.com #OperationEndgame #osint.industries #MikhailMatveev #RecordedFuture #CobaltStrike #Breadcrumbs

The Not-So-Secret Network Access Broker x999xx

https://krebsonsecurity.com/2024/07/the-not-so-secret-network-access-broker-x999xx/

#OzerskTechnologicalInstituteNationalResearchNuclearUniversity #kirtsov@telecom.ozersk.ru #MaksimGeorgievichKirtsov #U.S.DepartmentofJustice #maxnmalias[email protected] #КирцовМаксимГеоргиевич #ConstellaIntelligence #dashin2008@yahoo.com #Ne'er-Do-WellNews #maksya@icloud.com #OperationEndgame #osint.industries #MikhailMatveev #RecordedFuture #CobaltStrike #Breadcrumbs

The Not-So-Secret Network Access Broker x999xx https://krebsonsecurity.com/2024/07/the-not-so-secret-network-access-broker-x999xx/ #OzerskTechnologicalInstituteNationalResearchNuclearUniversity #kirtsov@telecom.ozersk.ru #MaksimGeorgievichKirtsov #U.S.DepartmentofJustice #maxnmalias[email protected] #КирцовМаксимГеоргиевич #ConstellaIntelligence #dashin2008@yahoo.com #Ne'er-Do-WellNews #maksya@icloud.com #OperationEndgame #osint.industries #MikhailMatveev #RecordedFuture #CobaltStrike #Breadcrumbs

The Not-So-Secret Network Access Broker x999xx https://krebsonsecurity.com/2024/07/the-not-so-secret-network-access-broker-x999xx/ #OzerskTechnologicalInstituteNationalResearchNuclearUniversity #kirtsov@telecom.ozersk.ru #MaksimGeorgievichKirtsov #U.S.DepartmentofJustice #maxnmalias[email protected] #КирцовМаксимГеоргиевич #ConstellaIntelligence #dashin2008@yahoo.com #Ne'er-Do-WellNews #maksya@icloud.com #OperationEndgame #osint.industries #MikhailMatveev #RecordedFuture #CobaltStrike #Breadcrumbs

Clever macOS malware delivery campaign targets cryptocurrency users https://www.helpnetsecurity.com/2024/06/19/cryptocurrency-malware/ #RecordedFuture #Don'tmiss #Hotstuff #malware #Windows #macOS #News

Clever macOS malware delivery campaign targets cryptocurrency users https://www.helpnetsecurity.com/2024/06/19/cryptocurrency-malware/ #RecordedFuture #Don'tmiss #Hotstuff #malware #Windows #macOS #News

Medical-Targeted #Ransomware Is Breaking Records After Change Healthcare’s $22M Payout

#Cybersecurity firm #RecordedFuture counted 44 health-care-related incidents in the month after #ChangeHealthcare ’s payment came to light—the most it’s ever seen in a single month.
#privacy #security

https://www.wired.com/story/change-healthcare-22-million-payment-ransomware-spike/

Medical-Targeted #Ransomware Is Breaking Records After Change Healthcare’s $22M Payout

#Cybersecurity firm #RecordedFuture counted 44 health-care-related incidents in the month after #ChangeHealthcare ’s payment came to light—the most it’s ever seen in a single month.
#privacy #security

https://www.wired.com/story/change-healthcare-22-million-payment-ransomware-spike/

Stark Industries Solutions: An Iron Hammer in the Cloud – Source: krebsonsecurity.com https://ciso2ciso.com/stark-industries-solutions-an-iron-hammer-in-the-cloud-source-krebsonsecurity-com/ #rssfeedpostgeneratorecho #ConstellaIntelligence #RussiasWaronUkraine #CyberSecurityNews #ALittleSunshine #KrebsonSecurity #KrebsOnSecurity #RecordedFuture #CallistoGroup #Breadcrumbs #DDoSforHire #Seaborgium #COLDRIVER #TeamCymru #Intel471 #Netscout #spamhaus #Lockbit #DDoSia #eset

Stark Industries Solutions: An Iron Hammer in the Cloud – Source: krebsonsecurity.com https://ciso2ciso.com/stark-industries-solutions-an-iron-hammer-in-the-cloud-source-krebsonsecurity-com/ #rssfeedpostgeneratorecho #ConstellaIntelligence #RussiasWaronUkraine #CyberSecurityNews #ALittleSunshine #KrebsonSecurity #KrebsOnSecurity #RecordedFuture #CallistoGroup #Breadcrumbs #DDoSforHire #Seaborgium #COLDRIVER #TeamCymru #Intel471 #Netscout #spamhaus #Lockbit #DDoSia #eset

Threat Actors Abuse GitHub to Distribute Multiple Information Stealers https://www.securityweek.com/threat-actors-abuse-github-to-distribute-multiple-information-stealers/ #Fraud&IdentityTheft #Malware&Threats #RecordedFuture #Russia #macOS #AMOS

Threat Actors Abuse GitHub to Distribute Multiple Information Stealers https://www.securityweek.com/threat-actors-abuse-github-to-distribute-multiple-information-stealers/ #Fraud&IdentityTheft #Malware&Threats #RecordedFuture #Russia #macOS #AMOS

Threat Actors Abuse GitHub to Distribute Multiple Information Stealers https://www.securityweek.com/threat-actors-abuse-github-to-distribute-multiple-information-stealers/ #Fraud&IdentityTheft #Malware&Threats #RecordedFuture #Russia #macOS #AMOS

Threat Actors Abuse GitHub to Distribute Multiple Information Stealers https://www.securityweek.com/threat-actors-abuse-github-to-distribute-multiple-information-stealers/ #Fraud&IdentityTheft #Malware&Threats #RecordedFuture #Russia #macOS #AMOS

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare – Source: krebsonsecurity.com https://ciso2ciso.com/blackcat-ransomware-group-implodes-after-apparent-22m-payment-by-change-healthcare-source-krebsonsecurity-com/ #rssfeedpostgeneratorecho #BlackCatransomware #CyberSecurityNews #ALittleSunshine #ALPHVransomware #KrebsonSecurity #KrebsOnSecurity #RecordedFuture #DataBreaches #ransomware #Emsisoft #Lockbit #RAMP #fbi #NCA

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

https://krebsonsecurity.com/2024/03/blackcat-ransomware-group-implodes-after-apparent-22m-ransom-payment-by-change-healthcare/

#BlackCatransomware #ChangeHealthcare #DmitrySmilyanets #ALittleSunshine #ALPHVransomware #RecordedFuture #DataBreaches #FabianWosar #Ransomware #wired.com #Emsisoft #LockBit #Optum #RAMP #fbi #NCA

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

https://krebsonsecurity.com/2024/03/blackcat-ransomware-group-implodes-after-apparent-22m-ransom-payment-by-change-healthcare/

#BlackCatransomware #ChangeHealthcare #DmitrySmilyanets #ALittleSunshine #ALPHVransomware #RecordedFuture #DataBreaches #FabianWosar #Ransomware #wired.com #Emsisoft #LockBit #Optum #RAMP #fbi #NCA

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare https://krebsonsecurity.com/2024/03/blackcat-ransomware-group-implodes-after-apparent-22m-ransom-payment-by-change-healthcare/ #BlackCatransomware #ChangeHealthcare #DmitrySmilyanets #ALittleSunshine #ALPHVransomware #RecordedFuture #DataBreaches #FabianWosar #Ransomware #wired.com #Emsisoft #LockBit #Optum #RAMP #fbi #NCA

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare https://krebsonsecurity.com/2024/03/blackcat-ransomware-group-implodes-after-apparent-22m-ransom-payment-by-change-healthcare/ #BlackCatransomware #ChangeHealthcare #DmitrySmilyanets #ALittleSunshine #ALPHVransomware #RecordedFuture #DataBreaches #FabianWosar #Ransomware #wired.com #Emsisoft #LockBit #Optum #RAMP #fbi #NCA

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare https://krebsonsecurity.com/2024/03/blackcat-ransomware-group-implodes-after-apparent-22m-ransom-payment-by-change-healthcare/ #BlackCatransomware #ChangeHealthcare #DmitrySmilyanets #ALittleSunshine #ALPHVransomware #RecordedFuture #DataBreaches #FabianWosar #Ransomware #Emsisoft #wiredcom #LockBit #Optum #RAMP #fbi #NCA

Calendar Meeting Links Used to Spread Mac Malware https://krebsonsecurity.com/2024/02/calendar-meeting-links-used-to-spread-mac-malware/ #ALittleSunshine #LatestWarnings #RecordedFuture #KasperskyLabs #LazarusGroup #WebFraud2.0 #BlueNoroff #Macmalware #X-Protect #Hunt.io