iiinova — where your digital self keeps evolving

Cyberknow @cyberknow.bsky.social · 02/03/2026

🚨 Iran-US/Israel war Cybertracker #2 🚨 There are now 60 hacktivist groups engaged in activities. Most neighboring countries to Iran have been targeted. Pro-Russian groups are starting to join the fight in support Iran and more will join in coming days.

053

Cyberknow @cyberknow.bsky.social · 11/10/2025

Scattered Lapsus$ Hunters did dump some of the Salesforce data. Including Qantas, remember though that Qantas has legal actions around viewing the data. #Australia #Qantas

033

Cyberknow @cyberknow.bsky.social · 26/08/2025

Likely that Australia experienceS increased hacktivist activity as a result of this announcement, there are pro-Iran hacktivist groups that could target Australia. Also possible that pro-Palestine groups target Australia if they perceive this to be pandering to Israel. #Australia #Iran

010

Reposted by Cyberknow

Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 21/08/2025

This is a great primer from @samsabin.bsky.social on the North Korean IT Worker Attacks. Also, congrats on THREE (!) amazing years Sam!

axios.com

Axios Future of Cybersecurity

1113

Reposted by Cyberknow

Jake Williams @malwarejake.bsky.social · 19/08/2025

I want to double down on my recommendation that the press openly mocking Altman should be absolutely required when he says garbage like this.

1306

Reposted by Cyberknow

Jeremy Kirk @jkirk.bsky.social · 08/05/2025

This NYT piece is half baked. Hegseth's digital footprint is sloppy, but so is that of 99% of the internet-using population. Why not talk more about MFA, strong authentication, unique passwords, the infostealer problem, etc.? So many unmentioned angles. #infosec www.nytimes.com/2025/05/07/u...

nytimes.com

Hegseth’s Use of Passwords Raises New Security Concerns

232

Cyberknow @cyberknow.bsky.social · 08/05/2025

🚨India-Pakistan Cybertracker #1 🚨 There are 45 hacktivist engaging in cyber activities as a result of kinetic actions between India and Pakistan. Geopolitical flashpoints will now always trigger hacktivist activity. Defacement and DDoS remain the most popular and prominent attack vectors.

010

Reposted by Cyberknow

Dmitri Alperovitch @dmitri.silverado.org · 10/04/2025

Chinese officials acknowledged in a December meeting with Biden officials in Geneva that Beijing was behind the Volt Typhoon intrusions into U.S. critical infrastructure citing increasing U.S. policy support for Taiwan as an excuse www.wsj.com/politics/nat...

wsj.com

Exclusive | In Secret Meeting, China Acknowledged Role in U.S. Infrastructure Hacks

A senior Chinese official linked intrusions to escalating U.S. support for Taiwan.

15716

Cyberknow @cyberknow.bsky.social · 24/02/2025

Latest #cybertracker is up. Edition 30 on the 3rd anniversary of Russia's full invasion of Ukraine. See the substack for more insights and indepth analysis. cyberknow.substack.com/p/russia-ukr... #cybersecurity #infosec

040

Cyberknow @cyberknow.bsky.social · 16/02/2025

Fsociety Ransomware has posted an anonymous Australian University. But going by the layout of the name, it could be the Australian National University. This is a university that has strong links and overlap with government and defence in Australia. #cybersecurity #infosec #Australia #auspol

011

Reposted by Cyberknow

Catalin Cimpanu @campuscodi.risky.biz · 14/02/2025

ClearSky claims it found a Windows UI zero-day exploited in the wild by the MustangPanda APT x.com/ClearskySec/...

ClearSky Cyber Security has discovered a UI vulnerability in Microsoft Windows. This vulnerability is actively exploited by a suspected Chinese APT group - Mustang Panda.

When files are extracted from compressed “RAR” files they are hidden from the user. If the compressed files are extracted into a folder, the folder appears empty in the Windows Explorer GUI.

When using the "dir" command to list all files and folders inside the target folder, the extracted files and folders are "invisible/hidden" to the user.

Threat actors or users can also execute those compressed files from a command line prompt, if they know the exact path.
As a result of executing "attrib -s -h" to system protected files, an unknown file type is created from the type "Unknown" ActiveX component.

More details will be published in our blog.
Microsoft classified it as a low-severity vulnerability.

2173

Reposted by Cyberknow

Catalin Cimpanu @campuscodi.risky.biz · 06/02/2025

Israeli spyware maker NSO Group claims it rejected contracts last year worth over $20 million due to human rights abuse concerns. Source, the company's transparency report. PDF: www.nsogroup.com/wp-content/u...

171

Cyberknow @cyberknow.bsky.social · 04/02/2025

Trump presidency take 2 meme summary.

000

Cyberknow @cyberknow.bsky.social · 22/01/2025

A meme for the cyber pals to gear up for 2025.

010

Cyberknow @cyberknow.bsky.social · 21/01/2025

You might have seen me post throughout the years about financially motivated hacktivists.. This is an example here, Usersec, who has been making plenty of claims lately, is offering a course for a fee to their followers.

010

Cyberknow @cyberknow.bsky.social · 19/01/2025

Anyone got a read on this 'lockbit 4.0' telegram page? Not Vibing right.

000

Cyberknow @cyberknow.bsky.social · 18/01/2025

Standard operating procedure for pro-Russian hacktivists and especially Noname05716. Triggered by geopolitical events to conduct DDoS attacks, this time on the UK. #cybersecurity #UK #russiaukrainewar

000

Cyberknow @cyberknow.bsky.social · 17/01/2025

Is this what is happening to Tik Tok? 🤷‍♂️🤷‍♂️🤷‍♂️

000

Cyberknow @cyberknow.bsky.social · 15/01/2025

The first indication that pro-Russian hacktivist will be active for President Trumps inauguration is starting to appear. Expect hacktivist groups to be active closer to the 19th, conducting mostly DDoS - noname05716 and overflame to likely be the most active. #cybersecurity #usa

000

Reposted by Cyberknow

Catalin Cimpanu @campuscodi.risky.biz · 09/01/2025

British authorities have sentenced 22-year-old Skylar Dalziel to 21 months in prison for hacking and stealing unreleased music from famous artists like Coldplay and Bebe Rexha www.bbc.com/news/article...

bbc.com

Coldplay and Upsahl songs stolen by Luton cyber hacker

Skylar Dalziel made about £42,000 from selling music she had stolen, including Shawn Mendes music.

131

Cyberknow @cyberknow.bsky.social · 08/01/2025

Is it a form of flattery that makes some cyber actors use @briankrebs.bsky.social name and images. It can't be a means of attention since the groups never get a mega boost from it. Seems to happen on occasion on Breach and now a bit on Telegram.

000

Cyberknow @cyberknow.bsky.social · 07/01/2025

Hacktivist activity linked to geopolitical events won't be slowing down in 2025. We can expect more convergence between pro-russian and pro-palestine hacktivists. We will also continue to see new groups emerge, like Moscow Pentest.

052

Cyberknow @cyberknow.bsky.social · 07/01/2025

Pro-palestine hacktivists, RootDos are targeting Migros bank in Europe. The group exclusively targets, European banks and often disrupts websites with their DDoS attacks. #cybersecurity

100

Cyberknow @cyberknow.bsky.social · 07/01/2025

Pro-Russian hacktivists, Zarya announce they have been in the shadows for 2024 but will share what they have been up to in 2025. The group has been linked to Russian state-cyber actors. #RussiaUkraineWar #cybersecurity

010

Cyberknow @cyberknow.bsky.social · 07/01/2025

Apparently there is a Russian tourist site for parts of Ukraine, Hdr0, pro-Ukraine hacktivists have defaced the site in protest. #RussiaUkraineWar #cybersecurity

010

Cyberknow @cyberknow.bsky.social · 07/01/2025

Anonymous Libya have commenced operations and declares interest in targeting NATO and the United States. #cybersecurity #Libya

000

Cyberknow @cyberknow.bsky.social · 07/01/2025

Hacktivist cross-overs with other threats continue. Alliance404 a pro-Palestine, Pro-Islam hacktivist group has now become the cyber-wing of a newly formed 'self-claimed Islamic resistance group' with possible linked to Hezbollah known as 'Al-Islamiya Brigade'.

000

Cyberknow @cyberknow.bsky.social · 15/12/2024

Holy League has re-established itself as the unofficial command and control for many pro-Russian groups. This comes after a leadership change for Cyber Army Russia Reborn, who has been in charge since the civil war of late 2023. #cybersecurity #RussiaUkraineWar

120

Cyberknow @cyberknow.bsky.social · 10/12/2024

Several hacktivists groups were active in support of rebel forces since 1 December. Also been a few groups who are now targeting Russia due to them harbouring Assad. #cybersecurity #Syria #Russia #cybertracker

045

Cyberknow @cyberknow.bsky.social · 27/11/2024

The pro-Russian hacktivist campaign against Australia continues. As expected, two other groups have joined Noname05716, with Z-pentest and fredens of security now active. Remain alert not Alarmed. #RussiaUkraineWar #Australia #UkraineRussiaWar️️

000

Cyberknow @cyberknow.bsky.social · 21/11/2024

For all those sketchy CTI and Threat intel folks.

191

Cyberknow @cyberknow.bsky.social · 19/11/2024

What happened to Mastodon? Wasn't it the go-to X escape in 2023?

000

Cyberknow @cyberknow.bsky.social · 19/11/2024

1000 days of the current #RussiaUkraineWar! That also means I've been tracking, monitoring, and posting about hacktivist groups for 1000 days! I hope it's been a benefit to those who have needed it. For those that remember, this is the original #cybertracker. #CyberSecurity #Ukraine #Russia

030

Cyberknow @cyberknow.bsky.social · 19/11/2024

Hunt3r kill3rs, pro-Russian hacktivist group are preparing a campaign against the United States. This is triggered by the approval by US officials for Ukraine to use long range missiles on Russia. #cybersecurity #infosec #RussianUkrainianWar #UkraineRussiaWar️️ #USA

020

Cyberknow @cyberknow.bsky.social · 19/11/2024

The oddest post relating to potential cyber activity. 'Heightened threat level' what was the cost of an almost 24-hour downtime for Ticketek Australia? Would have to be something significant to warrant shutting down their site for that long.

030

Cyberknow @cyberknow.bsky.social · 18/11/2024

Interesting post by Alixsec. They are currently targeting US with DDoS, and they are outlining what the impact could be from DDoS attacks on organisations. It's possibly an AI prompt result. This would be one of the first pieces of evidence of AI usage by hacktivists. (Outside of image creation)

000

Cyberknow @cyberknow.bsky.social · 18/11/2024

An expected response by hacktivists about the US government announcement of allowing Ukraine greater missile use has started. Expect DDoS attacks in the coming hours to days. additional attacks may also take place but will often be overstated Be alert but not Alarmed. #cybersecurity #infosec #USA

000

Cyberknow @cyberknow.bsky.social · 18/11/2024

Ticketek has been 'undergoing maintenance' for multiple hours now, possibly since early this morning. For those asking, I haven't seen any DDoS claims at the time of this post. It could be actual technical issues. #cybersecurity #infosec #Australia #auspol24

052

Cyberknow @cyberknow.bsky.social · 17/11/2024

Gave this app a go during the last cybersecurity migration from X. I will still continue to be largely active on X, but if many good folk are here, then I will keep an eye on this as well.. Please follow me so I can make sure I follow all the same folks. Bit of a meme offering as well.

120

Cyberknow @cyberknow.bsky.social · 10/10/2023

The open-source cyber situation related to Israel and Palestine. Lots of established hacktivist groups conducting attacks

000

Cyberknow @cyberknow.bsky.social · 20/07/2023

Latest Russia-Ukraine War cybertracker. 24th edition More info in the blog post cyberknow.substack.com/p/update-24-…

010