Sign in

Andrea Draghetti

@andreadraghetti.bsky.social
342 followers 189 following 60 posts

aka Drego. Head of Threat Intelligence at D3Lab! Phishing Army, tosint and meioc is my projectj! My passions are #F1 and #Running! My blog, my CV and my projects ⬇️ andreadraghetti.it

PostsRepliesMedia
Andrea Draghetti @andreadraghetti.bsky.social · 22/09/2026
I analyzed an Italian language phishing campaign that used a hidden iframe to deliver a WebKit exploit chain targeting iOS 13–17.2.1. The article examines the exploit, C2 infrastructure, and IoCs: www.d3lab.net/an-italian-p... #iOS #ThreatIntel #Malware
143
Andrea Draghetti @andreadraghetti.bsky.social · 07/09/2026
Il threat actor PrimeVendor ha recentemente pubblicato in un forum dell'undeground un presunto dataleak ai danni di #Mooneygo. Il threat actor afferma che i dati risalgono a Settembre 2026. Probabilmente si tratta di nuova compromissione!
121
Andrea Draghetti @andreadraghetti.bsky.social · 09/07/2026
📱 New Android malware campaign abusing an Italian banking brand. Victims are promised a cash reward, redirected to a Telegram bot, and convinced to install a malicious APK outside official app stores. Analysis & IOCs: www.d3lab.net/fake-banking... #AndroidMalware #Albiriox #CTI
021
Andrea Draghetti @andreadraghetti.bsky.social · 06/07/2026
A threat actor is selling an alleged #Vinted database with more than 101M user records. According to the listing, the dataset includes emails, password hashes, phone numbers, shipping addresses. Vinted has not publicly confirmed the incident. #DataLeak #ThreatIntelligence #CTI
011
Andrea Draghetti @andreadraghetti.bsky.social · 23/06/2026
🔍 New analysis: an Italian phishing campaign abusing Chrome Native Messaging to escape browser sandbox restrictions. Attack chain: obfuscated JS → DLL sideloading → malicious Chrome extension → Native Messaging Host → PowerShell execution. 📌 www.d3lab.net/breaking-out...
001
Andrea Draghetti @andreadraghetti.bsky.social · 20/06/2026
Inizia così #HackInBo con un doveroso ricordo ad una grande amica di tutta la community! Ciao Carola! ❤️ #CarolaFrediani
030
Andrea Draghetti @andreadraghetti.bsky.social · 24/02/2026
🚨 #ShinyHunters recruiting for vishing ops? A Telegram post linked to the group offers $500–$1000 per scripted call targeting helpdesks, suggesting structured social-engineering/initial access activity. The human layer remains a key attack surface. #Vishing #CTI #ThreatIntel
000
Andrea Draghetti @andreadraghetti.bsky.social · 11/02/2026
I’ve just updated #Tosint: an #OSINT tool for analyzing #Telegram bot tokens and chat IDs! 🕵️‍♂️ It helps investigators and security researchers quickly extract actionable metadata from bots, chats, and admins! GitHub: github.com/drego85/tosint Feedback are welcome!
000
Andrea Draghetti @andreadraghetti.bsky.social · 04/02/2026
🚨 Il collettivo NoName ha avviato nuove campagne DDoS contro target italiani in vista delle Olimpiadi Milano-Cortina 2026. Colpiti finora hotel di Cortina e alcune realtà della PA. #DDoS #NoName #CyberSecurity #MilanoCortina2026 #CTI
001
Andrea Draghetti @andreadraghetti.bsky.social · 07/06/2025
#HackInBo tornano i LAB! 👌
040
Andrea Draghetti @andreadraghetti.bsky.social · 30/04/2025
📕 In offerta oggi a 4,99 € l’eBook di Kevin Mitnick, il leggendario hacker (RIP). 🔒 “L’arte dell’invisibilità” insegna come proteggere la propria privacy nell’era dei big data. 👉 www.amazon.it/gp/product/B... #cybersecurity #privacy #ebook #adv #kevinmitnick
000
Andrea Draghetti @andreadraghetti.bsky.social · 30/04/2025
Testing new RAM for my home lab! 😬😄 #IntelNUC #MemTest #NUC
030
Andrea Draghetti @andreadraghetti.bsky.social · 31/03/2025
🇮🇹 Sapete dirmi questo #screenshot da quale sito web proviene? 🙏 🇬🇧 Can you tell me which website this #screenshot is from? 🙏 #databreach #crm #gdpr #osint
110
Andrea Draghetti @andreadraghetti.bsky.social · 15/03/2025
#Trump vs #Biden vs #Obama
131
Andrea Draghetti @andreadraghetti.bsky.social · 07/02/2025
🚨 Violazione dati Vorwerk Bimby 🚨 Compromessi dati personali degli utenti di ricettario-bimby.it: nome, indirizzo, telefono, email e altro. Le password NON sono state rubate, ma il vero rischio è furto d’identità! 🔹 Attenzione a possibili truffe nei prossimi giorni! #CyberSecurity #DataBreach
011
Andrea Draghetti @andreadraghetti.bsky.social · 30/01/2025
🚨 Cronos Forum DOWN 🚨 The infamous #Cronos forum, known for data leaks & breaches, is unreachable! This comes just a day after the FBI took down #Nulled & #Cracked forums. Coincidence? 🤔 #CyberSecurity #DarkWeb #Hacking #FBI #DataBreach #CyberCrim
010
Andrea Draghetti @andreadraghetti.bsky.social · 18/12/2024
🚨 A cyber criminal has released a possible #Politico data leak! ℹ️ The sample contains 36 email addresses as well as information from some AWS endpoints! #dataleak #databreach #hibp
020
Andrea Draghetti @andreadraghetti.bsky.social · 11/12/2024
🚨 Possible #DataLeak: Italian Publisher EDT 🚨 A group of cybercriminals has claimed responsibility for a data leak reportedly affecting EDT, the Italian publisher of #LonelyPlanet guides sold via lonelyplanetitalia.it. Included: names, email, passwords (clear/bcrypt), shipping addresses, IPs, etc.
043
Andrea Draghetti @andreadraghetti.bsky.social · 24/11/2024
Help needed! 🎨✨ I’ve collected a pile of old conference lanyards (some in photo). Any creative ideas to repurpose or recycle them? DIY tips, upcycling hacks, or eco-friendly solutions are welcome! Drop your suggestions below! 🌍💡 #Upcycling #DIY #EcoFriendly
032
Andrea Draghetti @andreadraghetti.bsky.social · 16/11/2024
Good Morning from #HackInBo! 👋
051