iiinova — where your digital self keeps evolving

Max Bernhard @mxbernhard.bsky.social · 15/08/2026

Spain has also moved several tanks to the border with Morocco in Ceuta. Meanwhile people are bathing at a beach right next to the crossing, with the tank turrets visible in the background.

23714

Max Bernhard @mxbernhard.bsky.social · 15/08/2026

This morning it’s quiet at the border in Ceuta, aside from patrolling military vehicles and boats that are apparently reinforcing a sea barrier

275

Max Bernhard @mxbernhard.bsky.social · 12/07/2026

This NYT story reminds me of the time Japan expelled the most Russian-spy-looking Russian spy in 2020 www.nytimes.com/2026/07/12/w... web.archive.org/web/20220618...

140

Max Bernhard @mxbernhard.bsky.social · 04/07/2026

www.citizensforethics.org/reports-inve...

052

Max Bernhard @mxbernhard.bsky.social · 14/06/2026

Ted Chiang on AI www.theatlantic.com/philosophy/2...

051

Max Bernhard @mxbernhard.bsky.social · 22/05/2026

Weiß jemand wer diese Veranstaltung heute auf dem Tempelhofer Feld organisiert bzw. genehmigt hat? Da wurde auf der Bühne gerade verkündet, dass es "in anderen Religion kein Licht gibt", nur im Christentum.. @hauptstadtportal.bsky.social

070

Max Bernhard @mxbernhard.bsky.social · 26/03/2026

The Kremlin is aggressively building out infrastructure in the occupied regions of Ukraine to enmesh them with Russia and facilitate military logistics. At the same time, the occupied areas' natural resources are sold off. Story by @saitomri.bsky.social and others www.reuters.com/investigatio...

0126

Max Bernhard @mxbernhard.bsky.social · 24/03/2026

This tool was being advertised on Russian hacker forums for less than 700 USD. We also found evidence that it was used in previous phishing campaigns targeting users in Ukraine and Moldova.

141

Max Bernhard @mxbernhard.bsky.social · 24/03/2026

We identified around 30 domains that were likely part of the phishing campaign, all hosted by Aeza. But on these domains we also found something else -- a login panel for a tool called "Defisher".

140

Max Bernhard @mxbernhard.bsky.social · 24/03/2026

Among the targets were the former vice president of Germany's domestic intelligence service, Arndt Freytag von Loringhoven, and Kremlin critic @billbrowder.bsky.social

Screenshot of a phishing message impersonating Signal's support: "Dear User, this is Signal Security Support ChatBot.
We have noticed suspicious activity on your device, which could have led to data leak.
We have also detected attempts to gain access to your private data in Signal.
To prevent this, you have to pass verification procedure, entering the verification code to Signal Security Support Chatbot.
DON'T TELL ANYONE THE CODE, NOT EVEN SIGNAL EMPLOYEES."

130

Max Bernhard @mxbernhard.bsky.social · 20/03/2026

Leser*innen von „Forbes Austria“ müssen ganz weit nach unten scrollen um zu erfahren, dass das hier ein „Advertorial“ ist und auch da ist der Hinweis relativ unaufällig gehalten

020

Max Bernhard @mxbernhard.bsky.social · 19/02/2026

"42,200 women, children and elderly people died between 7 October 2023, when Hamas launched a surprise attack into Israel that prompted a devastating Israeli offensive into Gaza, and 5 January 2025 ... These deaths comprised 56% of violent deaths in Gaza." www.theguardian.com/world/2026/f...

030

Max Bernhard @mxbernhard.bsky.social · 16/02/2026

When we visited Eremenko's old address - where the business in question was also registered, neighbors told us, he is in Moscow now. One neighbor said he saw Eremenko walking around in uniform and working out in his garden before the Russian full-scale invasion of Ukraine ...

Seit 2017 ist Oleg Eremnko im Verein Desant aktiv, hier zu sehen in Uniform im Jahr 2019. (Quelle: Facebook / Desant e.V.; Screenshot: CORRECTIV)

232

Max Bernhard @mxbernhard.bsky.social · 28/01/2026

New satellite imagery shows the creation of two massive camps for displaced people south of Gaza City with thousands of tents (imagery by Vantor provided by European Space Imaging)

2179

Max Bernhard @mxbernhard.bsky.social · 28/01/2026

A phishing campaign is currently targeting journalists and activists in Germany and Europe via Signal with fake support messages. Here's how it looks netzpolitik.org/2026/phishin...

02227

Max Bernhard @mxbernhard.bsky.social · 28/11/2025

Censys' mobile website is criminal

020

Max Bernhard @mxbernhard.bsky.social · 26/11/2025

www.bloomberg.com/news/article...

130

Max Bernhard @mxbernhard.bsky.social · 24/11/2025

"Europe’s new pro-Kremlin bloc takes shape in the European Parliament" euobserver.com/eu-and-the-w...

0115

Max Bernhard @mxbernhard.bsky.social · 30/10/2025

A bishop of the Russian Orthodox Church seen at the FSB's Lubyanka Square HQ shooting range via @szabolcspanyi.bsky.social on X

181

Max Bernhard @mxbernhard.bsky.social · 12/10/2025

Does anyone have any guesses what is being farmed here (off the coast of Okinawa)

110

Max Bernhard @mxbernhard.bsky.social · 06/10/2025

Seems like Google's Gemini is pretty useless for verifying images potentially created by it

13410

Max Bernhard @mxbernhard.bsky.social · 20/09/2025

The brackets aren’t some big mystery. The screenshot in question is from a CNN graphic, not the actual messages of the shooter: www.cnn.com/2025/09/16/u... Only a transcript was released by officials, no direct screenshots: www.documentcloud.org/documents/26...

020

Max Bernhard @mxbernhard.bsky.social · 20/09/2025

When you’re typing out "I'm not big on conspiracy theories, but …" to your half a million followers, that’s probably a good time to pause and ask yourself if there’s a more straightforward explanation before posting whatever theory you have — because there is👇

153

Max Bernhard @mxbernhard.bsky.social · 16/09/2025

Does anyone have any guesses what the thing on top of this Chinese security robot might be? Is it a weapon, a fire extinguisher or something that shoots a net or the like?

451

Max Bernhard @mxbernhard.bsky.social · 02/09/2025

Germany's domestic intelligence service is warning the public about foreign recruitment efforts on social media: "don't become a disposable agent"

19539

Max Bernhard @mxbernhard.bsky.social · 01/09/2025

"The names on this list not only constitute lost lives, futures and grieving families, but the loss of a generation of journalists killed doing their jobs in the most frightening and devastating of environments and whose bravery and dedication to covering this conflict cannot be replaced."

1145

Max Bernhard @mxbernhard.bsky.social · 11/08/2025

Found an interesting Nokia model at a flea market the other day

170

Max Bernhard @mxbernhard.bsky.social · 06/08/2025

The network includes profiles on Facebook and Instagram, some with almost a million followers and some featuring supposed news programs with AI avatars as presenters.

120

Max Bernhard @mxbernhard.bsky.social · 06/08/2025

I found at least 26 fictitious media outlets where anyone can publish articles in exchange for money.

140

Max Bernhard @mxbernhard.bsky.social · 06/08/2025

New: Fake news reports about Bosnia's Serb entity, Republika Srpska, led me down a rabbit hole that revealed a network of fake news websites operated by two dubious Austrian businessmen. Coincidentally, Republika Srpska's leader, who was featured favorably in those articles, was ousted today.

43914

Max Bernhard @mxbernhard.bsky.social · 09/07/2025

If you google "gaza starvation" the first result you see is a sponsored ad linking to a Israeli government website with a report about Francesca Albanese's "misconduct"

291

Max Bernhard @mxbernhard.bsky.social · 02/07/2025

The US have just sanctioned Russian hosting provider Aeza, citing "its role in supporting cybercriminal activity targeting victims in the United States and around the world"

1136

Max Bernhard @mxbernhard.bsky.social · 13/06/2025

The FSB handler paid the recruited teenager via a cryptocurrency wallet that is tied to a larger wallet which has processed over $600 million worth of crypto 👀

044

Max Bernhard @mxbernhard.bsky.social · 12/06/2025

Great story into how the FSB recruits teenagers in the West for spying and sabotage and how these operations are funded www.reuters.com/investigates...

33119

Max Bernhard @mxbernhard.bsky.social · 16/05/2025

Ein weiterer Teil der Sanktionen richtet sich gegen Firmen und Personen mit Verbindungen zu pro-russischen Einflussoperationen. Mit Alina Lipp und Thomas Röper sollen zwei der reichweitenstärksten deutschsprachigen Propagandisten sanktioniert werden.

130

Max Bernhard @mxbernhard.bsky.social · 15/05/2025

Hundreds of ETFs and other investment funds in Germany - worth at least 150 billion Euros - have to remove words like "green" or "sustainable" from their names under new EU rules aimed at tackling unsubstantiated or exaggerated sustainability claims

48113

Max Bernhard @mxbernhard.bsky.social · 12/05/2025

Interesting that TeleMessage was also offering its services in China (for Whatsapp and WeChat) archive.md/cdYJe

063

Max Bernhard @mxbernhard.bsky.social · 26/03/2025

Germany's CDU wants to get rid of existing FOI laws, a plan its coalition partner SPD is opposing, according to a draft document www.rnd.de/politik/live...

143

Max Bernhard @mxbernhard.bsky.social · 25/02/2025

The New Yorker interviewed the man accused of blowing up the Nord Stream pipelines. He denies it but has some other stories to tell 👀 www.newyorker.com/magazine/202...

010

Max Bernhard @mxbernhard.bsky.social · 28/01/2025

Friedrich Merz could become Germany's next chancellor but his extensive ties to large corporations and lobby groups raise questions about who really stands to profit. Important story by my colleagues @annikajoeres.bsky.social @gabrielakeller.bsky.social correctiv.org/aktuelles/wi...

23413

Max Bernhard @mxbernhard.bsky.social · 05/01/2025

"He heads to lunch at Whataburger."

02311

Max Bernhard @mxbernhard.bsky.social · 18/12/2024

A researcher from Tyumen admitted to the scans, but didn't want to name the client he was working for. According to our reporting, he may have fed a vulnerability database of the state institution FSTEC which is subordinate to the MoD.

120

Max Bernhard @mxbernhard.bsky.social · 18/12/2024

In addition, @esetofficial.bsky.social found a zero-click exploit by Russia aligned hacker group „RomCom“ that used domains impersonating CORRECTIV. „RomCom“ combines cybercrime and espionage against Western targets. The group used Russian hosting provider Aeza, which we've also reported on before.

120

Max Bernhard @mxbernhard.bsky.social · 18/12/2024

While it's difficult to attribute this attack, the Russian propaganda campaign(s) we've been reporting on, „Doppelganger“ & „Matryoshka“, published a story about CORRECTIV at the same time, and also distributed a fake video report by the FT attributing made up quotes to me.

130

Max Bernhard @mxbernhard.bsky.social · 18/12/2024

New: After our latest investigation into a Russian propaganda campaign where we found a connection to Russia's MoD, our website became the target of a fairly large DDoS attack last month. It's one part of several attacks vs @correctiv.org. Some we were able to trace to Russia ⬇️

1208

Max Bernhard @mxbernhard.bsky.social · 21/11/2024

A Russian disinformation campaign is distributing a fake @financialtimes.com report with made up quotes attributed to me on X. They’ve previously done this with other publications/people like @bellingcat.com @eliothiggins.bsky.social or @deutschewellenews.bsky.social for example

26826

Max Bernhard @mxbernhard.bsky.social · 13/11/2024

Buried the lede a bit but what we also found is a digital trail to the Russian Ministry of Defense. Three accounts used by Doppelganger were accessed by an IP that we were able to link to the ministry and an internet provider owned by it

181