Pinned Tweet
How Threat Actors Abuse Legal Processes 🔥
A deep dive look at fraudulent subpoenas, warrants, EDR and the shinyhunters domain seizure
intelops.st/how-threat-act…
A deep dive look at fraudulent subpoenas, warrants, EDR and the shinyhunters domain seizure
intelops.st/how-threat-act…
5
14
67
15,239
There is a interesting Q&A posted on Rey's telegram. It is not clear who is responding. There are only 54 subscribers to this channel.
⬇️⬇️⬇️I will repost them here below
The questions are posted on the board 9larp and answers posted on TG I will archive them here
⬇️⬇️⬇️I will repost them here below
The questions are posted on the board 9larp and answers posted on TG I will archive them here
1
3
36
4,595
Q20 why do u think the goverment wont post about his arrest? they know he is a prominent figure of the group and carried the hack of the fbi out aswell, they love posting about ppl like that
A20 I think they'll boast on X and such, but a full-on press release seems a bit much for Rey alone. I could entirely be wrong, though.
A20 I think they'll boast on X and such, but a full-on press release seems a bit much for Rey alone. I could entirely be wrong, though.
1
0
0
361
Q21 do u think they wouldve got him eventually? bc of the same way they got peter stokes etc, the GDID shit that is connected to ur windows device upon install
A21 Do you mean if he had made less mistakes with his OpSec?
I assume so. GDID was very specific for Microsoft so I assume they would've used something else that feels less like a backdoor.
A21 Do you mean if he had made less mistakes with his OpSec?
I assume so. GDID was very specific for Microsoft so I assume they would've used something else that feels less like a backdoor.
1
1
0
328
IntelOps retweeted
UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well. @Ledger should initiate an immediate product recall to protect users.
I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered eo linked in the second tweet).
The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries).
My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold.
Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk.
I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it.
If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!
I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered eo linked in the second tweet).
The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries).
My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold.
Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk.
I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it.
If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!
702
1,985
11,462
2,089,626
Match threat actors across forums 👀
A new beta OSINT framework for crawling forums and extracting stylistic, linguistic and behavioral metadata from posts to correlate pseudonyms across different platforms
Credits @FaultyBuck
github.com/TheFault666/MM…
A new beta OSINT framework for crawling forums and extracting stylistic, linguistic and behavioral metadata from posts to correlate pseudonyms across different platforms
Credits @FaultyBuck
github.com/TheFault666/MM…
3
4
50
3,362
