Sign in

gab 🇺🇦🇵🇸

@gabagool.ing
3.2K followers 391 following 174 posts

fka @gabbyroncone on twitter. mission tech lead for RU & Eastern European APT ops @Google. views expressed here are mine, not my employer’s. she/her.

PostsRepliesMedia
Reposted by gab 🇺🇦🇵🇸
dell cameron @dell.bsky.social · 25/06/2025
NEW: A WIRED investigation of 911 calls placed from ICE detention sites across the US show a system inundated by life-threatening crises, delayed treatment, and overcrowding. By me & @dmehro.bsky.social. Free to read:
wired.com
'They're Not Breathing': Inside the Chaos of ICE Detention Center 911 Calls
Records of hundreds of emergency calls from ICE detention centers obtained by WIRED—including audio recordings—show a system inundated by life-threatening incidents, delayed treatment, and overcrowdin...
6726241356
gab 🇺🇦🇵🇸 @gabagool.ing · 10/07/2025
some other highlights: - this cluster tried to re-establish relationships after we disabled their accounts by creating new, similarly named accounts. very persistent! - if you thought their device linking phase was over, think again! susp apt29 groups looove this & want to make it seem more legit
0105
Reposted by gab 🇺🇦🇵🇸
Wesley Shields @wxs.bsky.social · 10/07/2025
We (@gabagool.ing - AKA gabbot) and I updated this with some more recent tomfoolery from this group. They continued the ASP campaign with evidence they responded to our initial publication. They were doing some sneaky calendar stuff that lead to adding a device to the target's O365 tenant.
0114
Reposted by gab 🇺🇦🇵🇸
Thomas Böttiger 🏳️‍🌈 @macinthemiddle.bsky.social · 30/06/2025
“So ensuring [privacy] in a world where the authority to know us has been ceded to private actors who may or may not cooperate with one or another regime, who may choose to use that data to manipulate or to harm us or to exclude us from access to resources, is existentially important.”
017543
gab 🇺🇦🇵🇸 @gabagool.ing · 18/06/2025
citizen lab’s blog: citizenlab.ca/2025/06/russ... Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords - The Citizen Lab
citizenlab.ca
Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords - The Citizen Lab
Keir Giles, a prominent expert on Russia, was targeted with a new form of social-engineering attack that leverages App-Specific Passwords. Google links the operation to UNC6293, a Russian state-backed...
011
gab 🇺🇦🇵🇸 @gabagool.ing · 18/06/2025
our blog: cloud.google.com/blog/topics/... What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia | Google Cloud Blog
cloud.google.com
What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia | Google Cloud Blog
A Russia-sponsored threat actor is impersonating the U.S. Department of State, and using phishing to gain access to email accounts.
020
gab 🇺🇦🇵🇸 @gabagool.ing · 18/06/2025
@keirgiles.bsky.social’s original post
020
Reposted by gab 🇺🇦🇵🇸
Reuters @reuters.com · 18/06/2025
Suspected Russian hackers used new tactic against UK researcher reut.rs/44uUqw3
reut.rs
Suspected Russian hackers used new tactic against UK researcher
Suspected Russian hackers have deployed a new tactic to trick even wary targets into compromising their own accounts, a victim of the spy campaign and researchers said on Wednesday.
12120
gab 🇺🇦🇵🇸 @gabagool.ing · 18/06/2025
more from me, @wxs.bsky.social (wxsbot), & @jsrailton.bsky.social about the ASP phishing attempts in this great piece by @timstarks.bsky.social. & kudos to @keirgiles.bsky.social for bringing attention to this, especially since it is targeting individuals vs orgs!
3114
Reposted by gab 🇺🇦🇵🇸
Greg Otto @gregotto.bsky.social · 18/06/2025
NEW: @citizenlab.ca and Google have details on a "sophisticated" and "novel" attempt by APT 29 to target a British expert who focuses on the Russian military by posing at the US State Department. @timstarks.bsky.social has the scoop cyberscoop.com/russian-hack...
cyberscoop.com
Unusually patient suspected Russian hackers pose as State Department in ‘sophisticated’ attacks on researchers
A report out Wednesday from the University of Toronto’s Citizen Lab calls out a “novel method” Russian hackers used to bypass one of the most well-regarded cyber defense tools, multi-factor authentica...
02812
Reposted by gab 🇺🇦🇵🇸
Wesley Shields @wxs.bsky.social · 18/06/2025
So @gabagool.ing (who will henceforth be referred to as "gabbot") and I wrote some stuff on some ASP phishing campaigns: cloud.google.com/blog/topics/... Citizen Lab worked closely with one of the targets and shared their work on it also: citizenlab.ca/2025/06/russ...
cloud.google.com
What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia | Google Cloud Blog
A Russia-sponsored threat actor is impersonating the U.S. Department of State, and using phishing to gain access to email accounts.
0107
Reposted by gab 🇺🇦🇵🇸
Meredith Whittaker @meredithmeredith.bsky.social · 16/06/2025
Use Signal. We promise, no AI clutter, and no surveillance ads, whatever the rest of the industry does. <3
Image of a screenshot of news headline, saying, "WhatsApp is getting ads using personal data from Instagram and Facebook
Forced Consent & Consent Bypass
/
16 June 2025
Meta announced today that it also wants to introduce ads on WhatsApp, which will be based on personal data from Facebook and Instagram. This further integrates WhatsApp into other Meta services - an originally independent app, which initially was available for just $1 per year without ads or data usage. This also means that Meta is consolidating its social networking monopoly. EU law was actually supposed to prevent this."
8061781537
Reposted by gab 🇺🇦🇵🇸
Robert Evans (the Only Robert Evans) @iwriteok.bsky.social · 07/06/2025
folks I've been tear gassed something like 200 times and maced at least fifty or so times. once i was soaked in mace to my underwear. ignore any neat scientific tricks people give you for beating this stuff -Water for tear gas -sudecon wipes for mace -if no sudecon, wash mace with water
5158692507
gab 🇺🇦🇵🇸 @gabagool.ing · 30/05/2025
soooo fair
110
gab 🇺🇦🇵🇸 @gabagool.ing · 30/05/2025
depending on how long ur flight is you could prob crush an ep in the air. just saying
110
gab 🇺🇦🇵🇸 @gabagool.ing · 30/05/2025
yes.
110
gab 🇺🇦🇵🇸 @gabagool.ing · 30/05/2025
did you watch season 2 of the rehearsal?
110
Reposted by gab 🇺🇦🇵🇸
The New York Times @nytimes.com · 19/05/2025
Russian forces have been building military infrastructure near the Finnish border, according to recent satellite imagery, in moves that could reveal their strategy for what happens after the Ukraine war.
nytimes.com
Russia Beefs Up Bases Near Finland’s Border
25403193
Reposted by gab 🇺🇦🇵🇸
Andy Greenberg @agreenberg.bsky.social · 18/05/2025
Like I wrote yesterday, it's never been clearer that US aid for the Israeli military is morally indefensible, and there’s never going to be a better time than right now to stop defending it. That's true today, too.
115638
Reposted by gab 🇺🇦🇵🇸
Reuters @reuters.com · 19/05/2025
Lithuania files case against Belarus at the International Court of Justice reut.rs/4mnzyi8
reut.rs
Lithuania files case against Belarus at the International Court of Justice
Lithuania's foreign ministry said on Monday it has filed a case against Belarus at the International Court of Justice, accusing its neighbour of orchestrating a migrant crisis.
04512
Reposted by gab 🇺🇦🇵🇸
Robert Evans (the Only Robert Evans) @iwriteok.bsky.social · 19/05/2025
welcome to the age of Weird Terrorism
1313881502
gab 🇺🇦🇵🇸 @gabagool.ing · 19/05/2025
some flowers I’ve seen while walking my dog this week
080
gab 🇺🇦🇵🇸 @gabagool.ing · 19/05/2025
thanks to my lil roof garden we will not be getting scurvy anytime soon
090
gab 🇺🇦🇵🇸 @gabagool.ing · 08/05/2025
the chives in question
000
gab 🇺🇦🇵🇸 @gabagool.ing · 08/05/2025
harvested some kale and mustard greens for dinner, cut back some shiso to dry for tea, plucked some chive blossoms to make chive blossom vinegar…chat am I dangerously close to trad-wifery or dangerously close to witchery
120
gab 🇺🇦🇵🇸 @gabagool.ing · 07/05/2025
check out some really interesting analysis from @wxs.bsky.social on a very persistent russian apt targeting mostly personal accounts vs corp/gov 👀
020
gab 🇺🇦🇵🇸 @gabagool.ing · 28/04/2025
what if… no more connecticut. and expand massachusetts
110
gab 🇺🇦🇵🇸 @gabagool.ing · 28/04/2025
shout out to this newly flowering geranium in my garden for single-handedly curing my depression
030
Reposted by gab 🇺🇦🇵🇸
Kevin Rothrock @kevinrothrock.me · 27/04/2025
In an interview with CBS, Russian Foreign Minister Sergey Lavrov says Moscow won't turn over control of the Zaporizhzhia nuclear power plant. Washington apparently hasn't formally suggested it, either. www.cbsnews.com/news/sergey-...
2266
gab 🇺🇦🇵🇸 @gabagool.ing · 27/04/2025
would highly recommend navigating to gabagool.ing
061
gab 🇺🇦🇵🇸 @gabagool.ing · 27/04/2025
big s/o to @unauthorized.computer for the new handle find
172
Reposted by gab 🇺🇦🇵🇸
Robert Evans (the Only Robert Evans) @iwriteok.bsky.social · 26/04/2025
one of the bravest people of this century so far. RIP. hope you find peace somewhere.
413463405
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
ok he just laughed out loud then yelled “yeah!!!!” I think that’s a good sign
020
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
genuinely that sounds like it slaps
120
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
oh so like top gun
120
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
will confirm with him when he emerges from the TV cave
140
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
I haven’t seen it, seemed like too much of a “boy movie” for my taste
120
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
the way I laughed out loud at this
030
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
well that explains the “no girls allowed” sign on the door
030
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
me rn
media.tenor.com
spongebob says i 'm ugly and i 'm proud in front of a flower
ALT: spongebob says i 'm ugly and i 'm proud in front of a flower
010
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
oh. ok
120
gab 🇺🇦🇵🇸 @gabagool.ing · 25/04/2025
my bf is watching the movie “heat” in the other room & the only noises I have heard emanating from the room for the last 30 min are explosions, sounds of gunfire, and random grunts. seems cool
3151
Reposted by gab 🇺🇦🇵🇸
Aric Toler @aric.bsky.social · 23/04/2025
New Planet imagery shows the extent of destruction of Rafah throughout April. These images show March 29 vs. April 21. The first set of images shows the city a bit over a kilometer east of the border. The second set of images shows greenhouses destroyed northeast of the city.
312572
Reposted by gab 🇺🇦🇵🇸
Daniel Radosh @radosh.bsky.social · 23/04/2025
Also: this is the second story TODAY where the administration only admitted that someone had been sent to El Salvador after the media reported that he had been disappeared without a trace www.yahoo.com/news/venezue...
yahoo.com
A Venezuelan delivery driver was ‘disappeared’ after making a wrong turn. The Trump administration claims they know where he is
Lawyers and advocates fear the government’s rushed removals may have ‘disappeared’ others
5391167
gab 🇺🇦🇵🇸 @gabagool.ing · 23/04/2025
do y’all remember when like a decade ago dj khaled got lost on his jet ski in the middle of the night and made a 10+ part snap story about it
050
Reposted by gab 🇺🇦🇵🇸
Kevin Rothrock @kevinrothrock.me · 18/04/2025
You can no longer accuse Russia of violating the moratorium on strikes against Ukraine’s energy infrastructure — because the Kremlin has officially called off the deal. www.interfax.ru/russia/1021576
interfax.ru
Путин не давал войскам новых указаний по истечении моратория с ударами по энергообъектам
Месяц моратория России на удары по энергетической инфраструктуре Украины истек, но пока других указаний президента Владимира Путина не было, заявил его пресс-секретарь Дмитрий Песков."Месяц (моратория...
34614
Reposted by gab 🇺🇦🇵🇸
Saher @saffronsec.bsky.social · 17/04/2025
My first blog with Proofpoint is live! And we love a good crossover. State-sponsored actors try their hand at ClickFix - the hottest thing in cybercrime. Meet the North Koreans, Iranians, and Russians who are upping their social engineering game www.proofpoint.com/us/blog/thre...
proofpoint.com
Around the World in 90 Days: State-Sponsored Actors Try ClickFix | Proofpoint US
Key Findings While primarily a technique affiliated with cybercriminal actors, Proofpoint researchers discovered state-sponsored actors in multiple campaigns using the ClickFix social
14219
gab 🇺🇦🇵🇸 @gabagool.ing · 18/04/2025
media.tenor.com
a man is sitting at a table reading a newspaper and the word buongiorno is on his shirt
ALT: a man is sitting at a table reading a newspaper and the word buongiorno is on his shirt
130