Sign in

Andrea Draghetti

@andreadraghetti.bsky.social
342 followers 189 following 60 posts

aka Drego. Head of Threat Intelligence at D3Lab! Phishing Army, tosint and meioc is my projectj! My passions are #F1 and #Running! My blog, my CV and my projects ⬇️ andreadraghetti.it

PostsRepliesMedia
Andrea Draghetti @andreadraghetti.bsky.social · 12h
Tosint v1.0.0 is out: an open-source Telegram OSINT tool for bot and chat analysis, message history and media exports. Richer JSONL metadata, optional SHA-256 hashes, and bot/user authentication. github.com/drego85/tosi... #OSINT #DFIR #Telegram #Tosint #CTI
github.com
GitHub - drego85/tosint: Tosint is a Telegram OSINT tool that extracts actionable intelligence from bot tokens and chat IDs for security investigations.
Tosint is a Telegram OSINT tool that extracts actionable intelligence from bot tokens and chat IDs for security investigations. - drego85/tosint
021
Andrea Draghetti @andreadraghetti.bsky.social · 22/09/2026
I analyzed an Italian language phishing campaign that used a hidden iframe to deliver a WebKit exploit chain targeting iOS 13–17.2.1. The article examines the exploit, C2 infrastructure, and IoCs: www.d3lab.net/an-italian-p... #iOS #ThreatIntel #Malware
143
Andrea Draghetti @andreadraghetti.bsky.social · 07/09/2026
Il threat actor PrimeVendor ha recentemente pubblicato in un forum dell'undeground un presunto dataleak ai danni di #Mooneygo. Il threat actor afferma che i dati risalgono a Settembre 2026. Probabilmente si tratta di nuova compromissione!
121
Reposted by Andrea Draghetti
The Shadowserver Foundation @shadowserver.bsky.social · 24/08/2026
Alert! Zimbra compromises associated with CVE-2026-73570 exploitation are spreading. 274 instances seen compromised in our scans for exploitation artifacts on 2026-08-22. Top: US (41 IPs). Detection in collaboration with @CERT_Polska_en Public Dashboard: dashboard.shadowserver.org/statistics/c...
1103
Andrea Draghetti @andreadraghetti.bsky.social · 08/08/2026
Anyone here using #PyLoad? I’d love to hear your feedback; how’s your experience been so far? 🙏
000
Andrea Draghetti @andreadraghetti.bsky.social · 15/07/2026
I was so tired of the constant issues with #iOS26 that, for the first time ever, I installed the public beta of the next release. So far, #iOS 27 looks very promising. Apple is finally focusing on optimization—exactly what users have been asking for. 🤞
000
Andrea Draghetti @andreadraghetti.bsky.social · 09/07/2026
📱 New Android malware campaign abusing an Italian banking brand. Victims are promised a cash reward, redirected to a Telegram bot, and convinced to install a malicious APK outside official app stores. Analysis & IOCs: www.d3lab.net/fake-banking... #AndroidMalware #Albiriox #CTI
021
Andrea Draghetti @andreadraghetti.bsky.social · 06/07/2026
A threat actor is selling an alleged #Vinted database with more than 101M user records. According to the listing, the dataset includes emails, password hashes, phone numbers, shipping addresses. Vinted has not publicly confirmed the incident. #DataLeak #ThreatIntelligence #CTI
011
Reposted by Andrea Draghetti
Feedler - The Smart RSS Reader @feedlerapp.com · 28/06/2026
Meet Feedler — the smart, private RSS reader for iPhone 🪶 Clean article parsing, on-device AI summaries, inline embeds — works with iCloud, Feedbin, Inoreader, NewsBlur, FreshRSS & more. Now in TestFlight beta, testers welcome! 📲 testflight.apple.com/join/6Hs73zXe #RSS #iOS #TestFlight
Feedler — the smart RSS reader for iPhone. Feature list and three app screenshots.
132
Andrea Draghetti @andreadraghetti.bsky.social · 23/06/2026
🔍 New analysis: an Italian phishing campaign abusing Chrome Native Messaging to escape browser sandbox restrictions. Attack chain: obfuscated JS → DLL sideloading → malicious Chrome extension → Native Messaging Host → PowerShell execution. 📌 www.d3lab.net/breaking-out...
001
Andrea Draghetti @andreadraghetti.bsky.social · 20/06/2026
Inizia così #HackInBo con un doveroso ricordo ad una grande amica di tutta la community! Ciao Carola! ❤️ #CarolaFrediani
030
Andrea Draghetti @andreadraghetti.bsky.social · 17/06/2026
📧 New Italian invoice-themed phishing campaign delivering NeptuneRAT via UpCrypter. I’ve published a technical analysis of a malware campaign targeting Italian users through fake invoice emails. 📌 www.d3lab.net/italian-invo... #Malware #NeptuneRAT #UpCrypter #CyberSecurity #CTI #InfoSec
d3lab.net
Italian Invoice-Themed Phishing Campaign Delivers UpCrypter and NeptuneRAT
Italian invoice-themed phishing campaign targeting users since February 2026. The infection chain abuses HTML attachments, fake download pages, JavaScript, PowerShell, and UpCrypter to deploy a final ...
220
Reposted by Andrea Draghetti
Catalin Cimpanu @campuscodi.risky.biz · 03/06/2026
Carola Frediani, an Italian infosec journalist and member of Amnesty and Human Rights Watch, has unexpectedly passed away this week www.ansa.it/canale_tecno...
ansa.it
È morta Carola Frediani, pioniera del giornalismo tecnologico italiano  - Notizie - Ansa.it
Aveva 51 anni, ha fondato il blog Guerre di Rete (ANSA)
1115
Reposted by Andrea Draghetti
Osservatorio Nessuno OdV @osservatorionessuno.org · 23/04/2026
Today we are releasing an analysis of Morpheus, a low-cost, highly sophisticated Android spyware made in Italy. Among its features, the spyware disables the microphone/camera indicator, connects locally to ADB, and eludes WhatsApp fingerprint verification. osservatorionessuno.org/blog/2026/04...
osservatorionessuno.org
Morpheus: A new Spyware linked to IPS Intelligence
Morpheus: A new Spyware linked to IPS Intelligence
033
Reposted by Andrea Draghetti
The Verge @theverge.com · 07/04/2026
Amazon is ending support for older Kindles and Kindle Fires
buff.ly
Amazon is ending support for older Kindles and Kindle Fires
Amazon is finally saying goodbye to older Kindle devices.
5228
Reposted by Andrea Draghetti
Kaylee’s Apps @kaylees.site · 04/04/2026
✨ Wipr 2 will be 40% off* tomorrow**! ✨ It's been a while since the last sale so why not! Enjoy! * Or more, depending on currency! ** Apr 5th! Whatever that means in your timezone!
0225
Andrea Draghetti @andreadraghetti.bsky.social · 27/03/2026
🔎 OSINT analysis of BreachForums data leaks (2022–2026) Correlated historical leak data to reconstruct timelines and identify patterns in data releases. 📌 www.d3lab.net/breachforums... #OSINT #ThreatIntelligence #BreachForums #CyberSecurity
d3lab.net
BreachForums Data Leaks: Technical Analysis and Timeline Attribution (2022–2026)
Technical analysis of BreachForums data leaks from 2022 to 2026, correlating publication dates with actual dataset timelines using the lastactive field to clarify attribution and infrastructure evolut...
000
Andrea Draghetti @andreadraghetti.bsky.social · 22/03/2026
Native iOS & Android App for #qBittorrent! github.com/taylorcox75/...
github.com
GitHub - taylorcox75/qRemote
Contribute to taylorcox75/qRemote development by creating an account on GitHub.
000
Andrea Draghetti @andreadraghetti.bsky.social · 17/03/2026
🚨 Operazione dei Carabinieri contro truffe informatiche legate al clan Mazzarella. 16 misure cautelari per attività di phishing, vishing, caller ID spoofing e siti bancari clone. www.carabinieri.it/in-vostro-ai... #Phishing #Vishing #CyberCrime #CyberSecurity #Italy
carabinieri.it
Truffe: la criminalità organizzata gestiva frodi informatiche, 16 misure cautelari affiliati al clan Mazzarella
Per delega del Procuratore della Repubblica Distrettuale di Napoli, si comunica che, a partire dalle prime ore della nottata del 16 marzo 2026, i Carabinieri dei Nucleo Investigativo di Napoli hanno d...
010
Andrea Draghetti @andreadraghetti.bsky.social · 04/03/2026
🚀 Over Security, un aggregatore di notizie di cybersecurity e cyber threat intelligence. Raccoglie articoli da fonti affidabili, e permette di cercare anche notizie più datate per analizzare incidenti e trend nel tempo. 🔎 oversecurity.net #CyberSecurity #CTI
oversecurity.net
Over Security - Cybersecurity news aggregator
Cybersecurity and cyber threat intelligence news aggregator with selected Italian and international sources.
001
Andrea Draghetti @andreadraghetti.bsky.social · 24/02/2026
🚨 #ShinyHunters recruiting for vishing ops? A Telegram post linked to the group offers $500–$1000 per scripted call targeting helpdesks, suggesting structured social-engineering/initial access activity. The human layer remains a key attack surface. #Vishing #CTI #ThreatIntel
000
Andrea Draghetti @andreadraghetti.bsky.social · 11/02/2026
I’ve just updated #Tosint: an #OSINT tool for analyzing #Telegram bot tokens and chat IDs! 🕵️‍♂️ It helps investigators and security researchers quickly extract actionable metadata from bots, chats, and admins! GitHub: github.com/drego85/tosint Feedback are welcome!
000
Andrea Draghetti @andreadraghetti.bsky.social · 04/02/2026
🚨 Il collettivo NoName ha avviato nuove campagne DDoS contro target italiani in vista delle Olimpiadi Milano-Cortina 2026. Colpiti finora hotel di Cortina e alcune realtà della PA. #DDoS #NoName #CyberSecurity #MilanoCortina2026 #CTI
001
Reposted by Andrea Draghetti
Evariste @evaristegal0is.eurosky.social · 31/10/2025
Perché gli URL hanno path e query così specifici? (e.g. `/es/gay-porno?q=daddy` o `/general-terms-and-conditions` o `/girls?session=gd950e1e02073788173eb03f9b134828b`)
agcom.it
272
Reposted by Andrea Draghetti
Stefano Zanero @raistolo.bsky.social · 13/09/2025
Io non so nemmeno come commentare. La Serie A (quelli di Piracy Shield, ricordate? Quelli disposti a bloccare mezza Internet pur di "fermare la pirateria") ha deciso di... trasmettere su YouTube le partite, gratis, in un certo numero di nazioni: www.reddit.com/r/singapore/...
25620
Andrea Draghetti @andreadraghetti.bsky.social · 07/08/2025
Per evitare frane e alluvioni in Italia servirebbero molti più soldi! Invece il governo ha ridotto i fondi per la manutenzione del territorio previsti per i prossimi dieci anni, e non di poco. www.ilpost.it/2025/08/03/i...
ilpost.it
Per evitare frane e alluvioni in Italia servirebbero molti più soldi - Il Post
Invece il governo ha ridotto i fondi per la manutenzione del territorio previsti per i prossimi dieci anni, e non di poco
000
Andrea Draghetti @andreadraghetti.bsky.social · 16/06/2025
After the meme coin and the Escobar-style smartphone, all we need now is a #Trump branded VPN to complete the collector’s set of absurdity! 😅 #TrumpMobile #TrumpOrganization
020
Andrea Draghetti @andreadraghetti.bsky.social · 07/06/2025
#HackInBo tornano i LAB! 👌
040
Andrea Draghetti @andreadraghetti.bsky.social · 28/05/2025
#KeepImola - Per mantenere Imola nel Calendario di F1! chng.it/LyLRwyxjbH #F1 #ImolaGP #emiliaromagnagp #Ferrari #Formula1 #Petizione
chng.it
Hai già visto questa petizione?
#KeepImola - Per mantenere Imola nel Calendario di F1
020
Andrea Draghetti @andreadraghetti.bsky.social · 06/05/2025
Nuova campagna phishing 🇮🇹 contro utenti #Binance! C2 attivo, exfil via Telegram, fake SOW/AML. ✅ 168 casi (2025 YTD) 🔗 Analisi: www.d3lab.net/cresce-il-ph... #ThreatIntel #Phishing #CryptoThreats #Cybersecurity
d3lab.net
Cresce il Phishing ai danni di Binance: analisi di una campagna ben congegnata
In forte aumento le campagne di phishing contro gli utenti Binance in Italia. I criminali sfruttano email, SMS, telefonate e persino Telegram per sottrarre dati e asset crypto.
000
Andrea Draghetti @andreadraghetti.bsky.social · 05/05/2025
Heads-up to all threat intel and phishing analysts: OpenPhish no longer publishes their usual TXT feed of malicious URLs! Sharing this because I haven’t seen anyone mention it yet! #cti #openphish #phishing
130
Andrea Draghetti @andreadraghetti.bsky.social · 30/04/2025
📕 In offerta oggi a 4,99 € l’eBook di Kevin Mitnick, il leggendario hacker (RIP). 🔒 “L’arte dell’invisibilità” insegna come proteggere la propria privacy nell’era dei big data. 👉 www.amazon.it/gp/product/B... #cybersecurity #privacy #ebook #adv #kevinmitnick
000
Andrea Draghetti @andreadraghetti.bsky.social · 30/04/2025
Testing new RAM for my home lab! 😬😄 #IntelNUC #MemTest #NUC
030
Andrea Draghetti @andreadraghetti.bsky.social · 26/04/2025
🫵 Ultimi Giorni per prendere il biglietto di HackInBo a prezzo scontato! 🤑 Risparmia 10euro! tickets.hackinbo.it/HiB-C-SE-2025/ #HackInBo
tickets.hackinbo.it
HackInBo® Spring Edition 2025
07 Giugno 2025
041
Andrea Draghetti @andreadraghetti.bsky.social · 23/04/2025
📢 Ricevi un SMS dalla banca e ti chiedono di “verificare la carta”? Attento: potrebbe essere SuperCard X. Un’app fraudolenta legge la tua carta via NFC e la usa da remoto. Ecco come funziona 👉 www.d3lab.net/supercard-x-... #TruffeOnline #Android #NFC #Sicurezza #SuperCardX
d3lab.net
SuperCard X: la nuova truffa che colpisce gli utenti italiani
Nuova truffa in Italia: app Android come “Verifica Carta” leggono i dati NFC della carta di credito per emularla e usarla da remoto. L’attacco combina smishing, vishing e tecniche avanzate di emulazio...
033
Andrea Draghetti @andreadraghetti.bsky.social · 15/04/2025
#BreachForum is offline again (Clear & Dark Web). Rumors point to a seizure and the possible arrest of #IntelBroker. Meanwhile, the community is already regrouping via new TLDs. Awaiting official confirmation (FBI)! #cybersecurity #threatintel #darkweb
110
Andrea Draghetti @andreadraghetti.bsky.social · 12/04/2025
⚠️ Un attacco informatico ha colpito l’archivio cloud #WIIT SpA, contenente i dati di aziende clienti di #Mooney Servizi SpA, tra cui quelli degli utenti dell’app ATM, MyCicero, ATV, AMT, ecc Il risultato? Violazione di dati anagrafici dei clienti!
030
Andrea Draghetti @andreadraghetti.bsky.social · 05/04/2025
Will we have realized now that only #MaxVerstappen can drive #RedBull!?! 🤷‍♂️ And it's a real problem for the team! 😅 #F1 #Formula1 #JapaneseGP
030
Andrea Draghetti @andreadraghetti.bsky.social · 02/04/2025
Merita: www.youtube.com/playlist?lis...
youtube.com
CONTRO IL BANCO - YouTube
La docuserie in cui proviamo a battere il banco nei casinò di tutta Europa
111
Andrea Draghetti @andreadraghetti.bsky.social · 31/03/2025
Ma da quando esistono i #barbecue elettrici? offerte.best/product/webe...
offerte.best
Weber Lumin Compact Barbecue Elettrico con Stand, Griglia di Cottura 43 x 32cm, Portatile, Raggiunge 315 °C, Versatile - per Rosolare, Affumicare, Cuocere al Vapore, Scongelare - Nero (91010953)
Offerta Limitata! Rilevata il 31 marzo!
010
Andrea Draghetti @andreadraghetti.bsky.social · 31/03/2025
🇮🇹 Sapete dirmi questo #screenshot da quale sito web proviene? 🙏 🇬🇧 Can you tell me which website this #screenshot is from? 🙏 #databreach #crm #gdpr #osint
110
Reposted by Andrea Draghetti
Francesco Tucci @francesco.iltucci.com · 29/03/2025
Da oggi in poi anche i pacchetti TCP/IP arriveranno tardi o vedremo accanto ai router le notifiche di mancata consegna “il router non ha risposto al campanello”
0154
Andrea Draghetti @andreadraghetti.bsky.social · 19/03/2025
Oggi ci sono figli che non possono augurare ‘Buona Festa del Papà’ e padri che non possono sentirlo dire. Ricordiamolo… ❤️ #festadelpapa
040
Andrea Draghetti @andreadraghetti.bsky.social · 15/03/2025
#Trump vs #Biden vs #Obama
131
Andrea Draghetti @andreadraghetti.bsky.social · 15/03/2025
#YogaPod 📸 saggiamente.com/2025/02/yoga...
saggiamente.com
Yogapod: dall'idea alla realizzazione del treppiede tascabile per fotografi e content creator
Il mese scorso ho avuto la possibilità di provare in anteprima il prototipo di un nuovo e interessante prodotto pensato e realizzato in Italia. Mi contattano
000
Andrea Draghetti @andreadraghetti.bsky.social · 08/03/2025
Se volete automatizzare le vostre ricerche su #Vinted o #Subito due utili progetti #OpenSource! - Vinted: github.com/drego85/Vint... - Subito: github.com/drego85/Subi... 😉
github.com
GitHub - drego85/VintedScanner: Vinted Scanner is a Python script that automates the process of searching for new items on Vinted and sends real-time notifications via email, Slack, or Telegram when n...
Vinted Scanner is a Python script that automates the process of searching for new items on Vinted and sends real-time notifications via email, Slack, or Telegram when new listings matching your sea...
051
Andrea Draghetti @andreadraghetti.bsky.social · 26/02/2025
🚨 #ALIENTXTBASE: a major data breach… or just a mess? 🤔 The 23 billion record leak spreading on Telegram is NOT what it seems! 🔍 Our analysis reveals: - Old Combo Lists recycled. - Fake or randomly generated credentials. - Some real Malware Logs 🔗 www.d3lab.net/alien-txtbas...
d3lab.net
ALIEN TXTBASE Data Leak: A Deep Analysis of the Breach
ALIEN TXTBASE data leak: A cybersecurity deep dive into the Telegram breach, exposing inconsistencies, fake records, and real Stealer Logs. Learn how to protect your credentials.
010
Andrea Draghetti @andreadraghetti.bsky.social · 21/02/2025
💳 Another million credit cards taken by skimmers runs in the deep web for free! 🏡 Not only cards but also the holder's biographical data, street addresses, e-mail and phone numbers! 🔗 www.d3lab.net/b1acks-stash... #DataLeak #CreditCard
d3lab.net
B1ack's Stash Releases 1 Million Credit Cards on a Deep Web Forum
B1ack’s Stash, a notorious deep web marketplace, has leaked over 1 million stolen credit cards, exposing sensitive data of thousands of users. Likely obtained through Web Skimming techniques, the brea...
010
Andrea Draghetti @andreadraghetti.bsky.social · 07/02/2025
🚨 Violazione dati Vorwerk Bimby 🚨 Compromessi dati personali degli utenti di ricettario-bimby.it: nome, indirizzo, telefono, email e altro. Le password NON sono state rubate, ma il vero rischio è furto d’identità! 🔹 Attenzione a possibili truffe nei prossimi giorni! #CyberSecurity #DataBreach
011
Andrea Draghetti @andreadraghetti.bsky.social · 30/01/2025
🚨 Cronos Forum DOWN 🚨 The infamous #Cronos forum, known for data leaks & breaches, is unreachable! This comes just a day after the FBI took down #Nulled & #Cracked forums. Coincidence? 🤔 #CyberSecurity #DarkWeb #Hacking #FBI #DataBreach #CyberCrim
010