Latest Intelligence

Blog · Sep 15, 2026

NASBleed: Inside a 343k-Host Credential Spill

343,000 plain-text NAS and RDP logins found sitting in an open directory, most of them factory defaults. How the dump feeds access brokers, and what to check now.

Blog · Sep 11, 2026

The Australian Behind Doxbin: Identifying Unindicted Co-Conspirator CC-1 AKA KT

For years, "KT" ruled Doxbin from the shadows, until a Minecraft griefer's forgotten footprints, a breached email, and one arrogant GitHub profile led us straight to his door. This is the story of how we unmasked the man behind the internet's most weaponized doxing archive, and the Australian developer who thought he would never be found.

Blog · Aug 31, 2026

Your Network Was Already On Sale

We analyzed 28,634 ransomware victims and the forum listings that supply their attackers. Access into a $3B company sold for $10,000. A hospital went for $240. The market is public, priced, and in our data controlled by a handful of sellers, and defenders are watching the wrong end of it.

Blog · Aug 21, 2026

Cyberleek: Mapping the Actor Behind the Leak

The Cyberleek attribution has been questioned after an analysis of the evidence surrounding the GnomodelincuenT claim. This report examines the link between the cyberleekario Telegram channel, a Spanish personal account, and the wider Cyberleek operation, comparing that trail against historical forum activity, infrastructure, and on-chain evidence. The findings suggest the Spanish attribution remains weak and that the available evidence does not independently establish control of the primary Cyberleek operation.

Blog · Aug 15, 2026

Flotilla: Anatomy of an Undocumented Cross-Platform Covert-Browser Botnet Delivered Through the GCleaner Channel

An undocumented Turkish-language malware platform running a covert Electron browser botnet on Windows and arm64 agents on macOS, sharing one epoch-synced control plane. Full reverse engineering, live infrastructure verified.

Create an account

Start on the free plan. No card required.

Continue with Google

Already have an account? Sign in