cda

@CDA

Researcher on Internet infrastructure, state-sponsored hacking, sanctions, human rights, and authoritarianism; 'Blonde guy, talks about Iran a lot.'(ملا لغتی)

Washington, DC
cda.io
Geregistreerd in januari 2009
168 foto's en video's Foto's en video's

Tweets

Je hebt @CDA geblokkeerd

Weet je zeker dat je deze Tweets wilt bekijken? @CDA wordt niet gedeblokkeerd door Tweets te bekijken.

  1. Vastgemaakte Tweet
    4 jan. 2018

    Now published through – "Iran’s Cyber Threat: Espionage, Sabotage, and Revenge" – the decade long history of Iranian cyber operations against foreign and domestic targets. By me and .

    10 antwoorden 142 retweets 192 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  2. 22 okt. 2020

    6.) Re: 'voter database breach video.' Staged and fake. Attackers obscured details of the sqlmap operation, not to protect PII, but to hide what they are attacking. However, the attackers missed the target IP address in a log file – a VPS currently running SQL server in Moldova.

    1 antwoord 7 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  3. 22 okt. 2020

    5.) Re: this. The breached sites were on shared hosting servers, so naturally this happens. At least one of the emails was posted on VT, as was a COVID 19 scam sent from the same IP, but I think not from the same compromised account. Doesn’t seem related.

    An Internet Protocol (IP) address associated with metadata in at least one email had previously been reported, pointing to its likely use in scam or phishing operations, said Cindy Otis, a former CIA analyst and vice president of analysis for Alethea Group
    Deze collectie tonen
    1 antwoord 1 retweet 8 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  4. 21 okt. 2020

    4.) There has been some suggestion that the Proud Boys' inability to maintain hosting (good) contributed to the campaign, or that it was hacked. Both are incorrect. PB's doesn't seem to have DMARC set up so it was more vulnerable to spoofing. But Iran didn't hack the PBs.

    1 antwoord 13 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  5. 21 okt. 2020

    3.) Pretty clear no voter files were breached. Would seem residents of Florida are particularly susceptible to having their mailing and e-mail addresses posted online, including sites that offer 'don't scrape us, download our full dataset instead.' Weird case matches source.

    2 antwoorden 11 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  6. 21 okt. 2020

    2.) The threats were sent using mailing scripts hosted on those breached domains; childish stuff, but the mailer probably provides a clue. Also the attacker seems to have used a VPN, looks like Private Internet Access. Sure that rings a bell for some threat intel folks.

    2 antwoorden 10 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  7. 21 okt. 2020

    1.) There have been reports that the emails were sent from Estonia and Saudi Arabia. This is imprecise. Those behind the op had breached multiple websites, including Estonian and Saudi sites (using that ccTLD and hosted in, respectively). There are others.

    1 antwoord 10 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  8. 21 okt. 2020

    There has been a frustrating dearth of information about these Proud Boy / Iran emails. So I want to take a moment to clarify a few matters. With all appreciation to those who shared samples, and to avoid trampling those who will produce more compelling/comprehensive write-ups.

    1 antwoord 48 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  9. 21 okt. 2020

    𝐼𝓃𝓉𝑒𝓇𝓃𝒶𝓉𝒾𝑜𝓃𝒶𝓁 𝒞𝓎𝒷𝑒𝓇𝓌𝒶𝓇

    9 vind-ik-leuks
    Ongedaan maken
  10. 2 okt. 2020

    Czesław Miłosz –

    1 retweet 6 vind-ik-leuks
    Ongedaan maken
  11. 25 sep. 2020

    New hobby project — coaware, a tracker for COVID-19 exposure notification apps, for watching and mapping their adoption. Built off the simple and inexpensive hardware.

    4 retweets 14 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  12. 6 jul. 2020

    Heh, "khar pedar." These Iranian hackers just don't give a damn.

    5 antwoorden 11 retweets 90 vind-ik-leuks
    Ongedaan maken
  13. 3 jul. 2020

    Ten thousand retweets and enraged quote tweets in reaction to a "police officer from Texas" calling for civil war – account created May 2020, which only tweets in the dead of night Texas time. We are so easy to game.

    9 antwoorden 78 retweets 200 vind-ik-leuks
    Ongedaan maken
  14. 24 apr. 2020

    If you’re targeted by harassment by and his clique, please email me at cda@cda.io. Rounding up reports.

    6 antwoorden 34 retweets 186 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  15. 3 apr. 2020

    I think another story here is buried. Whoever was behind the Telegram monitoring seems to have scraped Instagram for Iranian users using fake accounts and its recommendation system.

    1 antwoord 5 retweets 13 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  16. 2 apr. 2020

    In the mystery of the leaked Iranian Telegram data, may I suggest BotSaz – the Telegram bot developer who's Gitlab was adjacent to the exposed Elasticsearch (and taken down at the same time) and doesn't care about security enough to leave PMA open.

    4 antwoorden 12 retweets 40 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  17. 28 mrt. 2020

    Sure enough, when was killed, immediately went silent on Twitter and Telegram

    1 antwoord 14 retweets 30 vind-ik-leuks
    Ongedaan maken
  18. 27 mrt. 2020

    Ongedaan maken
  19. 11 jan. 2020

    Apparent cuts to Iran's international internet connections this morning timed with announcement and protests (from ).

    18 retweets 20 vind-ik-leuks
    Ongedaan maken
  20. 5 jan. 2020

    The Clausowitz account has now been removed. I've converted and archived the World War 3 book for researchers. Whoever was trolling the situation decided to make some money from their hate.

    2 retweets 11 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken
  21. 5 jan. 2020

    Well this is novel (heh): a fake account playing off political divisions on Soleimani is promoting a 616 page, pro-Trump/anti-Iran eBook on Amazon. Looks like someone seeded a machine learning text generator with Iran and published the (incomprehensible) result.

    4 antwoorden 8 retweets 30 vind-ik-leuks
    Deze collectie tonen
    Deze collectie tonen
    Ongedaan maken

@CDA heeft nog niet getweet.

Het laden lijkt wat langer te duren.

Twitter is mogelijk overbelast of ondervindt een tijdelijke onderbreking. Probeer het opnieuw of bekijk de Twitter-status voor meer informatie.

    Je bent misschien ook geïnteresseerd in

    ·