Jeremy Kirk
@jkirk
Okta Threat Intelligence. Personal account. Interests: Cyber threat intelligence, OSINT, data breaches, AI. Formerly intel analysis @ Intel 471. jeremykirk.com
I'll admit to pushing the boundaries with Claude frequently but the pushback is getting ridiculous.
This AU$36 DC isolator for solar panels failed and just about burnt our house down today. It was just over two years old. DC isolators are not recommended in #Australia due to fire risks. If you have them, replace them with disconnection points.
Malicious hackers often get caught. But here's the story of a Russian man involved in cybercrime from the Angler exploit kit through today who slipped away. Audio preview of @intel471.bsky.social's Cybercrime Exposed podcast👇. Episode on Spotify and Apple. #infosec www.intel471.com/resources/po...
Anthropic's AI cyberespionage report feels as odd as the last one. Just 13 pages, it has none of the traditional components of a usual threat intel report (IoCs, payload hashes, etc.) and it seems to bury the lead re: technical sophistication. I wonder if a target will come forward. #infosec
Famed Russian spy hunter Christo Grozev claimed on this podcast four months ago that North Korea hacked the Democratic National Committee in 2016 and passed the info to Russia, which in exchange divulged access to Bangladesh Bank. 🤔 #infosec Passage at 13m 31s: www.youtube.com/watch?v=dimh...
Accused ALPHV/BlackCat ransomware affiliate Ryan Goldberg made US$214,000 a year working in incident response for Sygnia but told the FBI he was in debt as the reason for getting involved in ransomware, according to court documents. He initially denied involvement in the attacks. #infosec
Winnie wanted to lay on the keyboard so I guess this is the second-best position. 😀
A new episode of @intel471.bsky.social's Cybercrime Exposed podcast is out! DukeEugene is a Russian Android malware dev who has a big problem, and he puts everything on the line to solve it. Link to pod here: www.intel471.com/resources/po...
@campuscodi.risky.biz Coming off the SharePoint flaw mess, I found this line in the Risky Bulletin hilarious 🤣.
Aldi is selling 50-gram packets of "hand picked" dried mixed forest mushrooms this week if anyone is interested, mmmmm? #Australia
I seem to have escaped the worst from the Qantas breach -- no phone number, email or physical address was leaked, just name, frequent flyer number and tier. #infosec #australia
Kai Logan West (aka Kyle Northern) has been ID'd as IntelBroker, one of the owners of BreachForum and a prolific actor who breached dozens of organizations. Undercover officers bought data from him and tied supplied a BTC address to Ramp and Coinbase accouts in his real name. #infosec
This is the first time I've seen privacy used as a marketing argument for eyeglasses. Is Zenni's claim is accurate? Does deflecting infrared light foil facial recognition/AI-based tracking? #infosec
Call me old school but I think it was Mt. Gox rather than Coinbase that deserves this title. #infosec
The marketing around TeleMessage Signal Archiver (TM SGNL) is misleading as to its security risks, particularly for people who don't understand this area. The screenshotted quote occurs in this video from Smarsh around 1.38s. #infosec www.youtube.com/watch?v=roY2...
The end of the story contains questionable testimonials, one of which includes this screenshot purportedly from an ANZ bank account. Other people claim to get checks, which is bizarre for an Aussie audience. (5/6)
The next step is registering on a web-based form upon which an operator will call the person back. (4/6)
Some of you can probably guess where this is going. Yes, it's a cryptocurrency scheme! Give Wong AU$375, and she can turn it into a million in less than six months using Bitcoin Code, an AI-powered crypto trading program. What could go wrong?🤣 (3/6)
The ad pretends to link to 9News, but instead goes to a fake news story on hosted on cssat[.]xyz. The story, which mimics news.com.au and absurdly says is Wong being sued by the Bank of Australia for revealing her wealth secrets on "The Cheap Seats" TV show. Another badly doctored photo. (2/6)
A Facebook ad recently caught my eye: a photo of Australian Minister of Foreign Affairs Penny Wong that had been doctored to look like she had a black eye. It's accompanied by a headline about "tragic news." A short thread. #Australia #infosec (1/6)
Nice chart of paid OSINT tools here plus an accompanying report on them from the UK OSINT Community group. #infosec www.osint.uk/state-of-the...
Went out for a mountain bush walk this morning and child spots this delight -- a blue mushroom! We looked for smurfs but unfortunately didn't find any. #Australia
Someone sent extortion letters through the U.S. mail pretending to be the BianLian ransomware group. The letters included real compromised passwords as proof and accurate Tor sites. Bizarre! By @lawrenceabrams.bsky.social www.bleepingcomputer.com/news/securit... #infosec
DeepSeek is just the start. China has approved more than 117 LLMs since August 2023 that are all rapidly maturing in capability. Intel 471's Analysis and Cyber Geopolitical Intelligence teams explain here what this means for enterprise risk. #infosec intel471.com/blog/does-de...
@hacks4pancakes.com And in four short years or so you’ll have one of these.