Sign in

Allan “Ransomware Sommelier” Liska

@ransomwaresommelier.com
8.4K followers 1.9K following 2.8K posts

Recorded Future - Ransomware Researcher Owner @greenarcher.io - Yours Truly, Johnny Dollar | The Press Guardian | The Clock | The Green Archer Weird mix of security, comics, photography and wine! www.greenarcher.io

PostsRepliesMedia
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 14h
😮
241
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 29/09/2026
ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns via @jgreig.bsky.social & @therecordmedia.bsky.social
therecord.media
ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns
A vulnerability in a popular line of products from Oracle is being used in a new campaign by the prolific ShinyHunters hacking group, which recently claimed credit for an attack on the FBI’s jobs site...
042
Reposted by Allan “Ransomware Sommelier” Liska
Joe Tidy BBC News @joetidy.bsky.social · 29/09/2026
Data breach and extortionists are SHOCKED that reporters would think that their data breach would lead to an extortion! 🙄 I suggested to the kids (?) that they are simply now regretting hacking the world's biggest police force and they denied getting cold feet.
2166
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 29/09/2026
Huh, who knew the jackasses behind Shiny Hunters ransomware group were not good people. “The 24-year-old Pepijn van der S., who was arrested on suspicion of involvement in the hacker group ShinyHunters on 15 September, is also suspected of an attempted provocation of two murders.”
rtl.nl
ShinyHunters-verdachte Pepijn van der S. ook verdacht van opdracht geven tot moorden
De 24-jarige Pepijn van der S. die 15 september was aangehouden op verdenking van betrokkenheid bij hackersgroep ShinyHunters, wordt ook verdacht van een poging van uitlokking van twee moorden.
22010
Reposted by Allan “Ransomware Sommelier” Liska
CaffeineIsLife @caffeineislife.bsky.social · 28/09/2026
Here is the problem that needs to be fixed: "Hybrid warfare or hybrid attacks are loose terms which tend to describe non-military methods, for example cyberattacks, sabotage or misinformation". The hybrid term needs to be dropped, they ARE actual attacks and need to be treated as such.
0111
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 28/09/2026
Russian hybrid attacks against Europe intensifying, says Macron
bbc.com
Russian hybrid attacks against Europe intensifying, says Macron
The French president says he has tasked the government with protecting critical infrastructure and defence industry sites.
083
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 27/09/2026
I know you are a nearing if you are cool enough to back Cryptid Hacker Force on Kickstarter. And, let me tell you, if you are on BlueSky you are cool enough! Back our campaign today, there are less than 24 hours left!
kickstarter.com
Update 5: Less Than 24 Hours! · Cryptid Hacker Force 1 & 2
Happy Sunday! I am thrilled to say that Cryptid Hacker Force has reached its funding goal and there are still  ̶2̶4̶ 22 hours left to back the campaign.  You don’t want to miss out on s...
121
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 24/09/2026
Did you all know there is a tier where you can be drawn into issue 3 of Cryptid Hacker Force? Have you ever wanted to be a cryptid in a comic book? Of course you have! Back the campaign today, help push us over the top, and become a cryptid!
kickstarter.com
Cryptid Hacker Force 1 & 2
Issue #2 picks up from #1: the Cryptid Hacker Force must battle a pack of angry Wulvers then head to Paris to save the Cryptid Council!
010
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 24/09/2026
Ohhhh…Dulles has E gates now. How…exciting?
130
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 22/09/2026
Only Five days left in this campaign! Back the Cryptid Hacker Force on Kickstarter or you risk me having to make a 100-long post (skeet?) thread about why the campaign failed. And no one wants to read that emo-fueled-nonsense :).
000
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 22/09/2026
This is shockingly stupid. I highly encourage more of this from Shiny though…it will definitely accelerate their demise. via @josephcox.bsky.social & @404media.co
404media.co
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
A sample of 5,000 alleged agents seen by 404 Media includes names, addresses, phone numbers, and details on FBI employees' spouses.
150
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 22/09/2026
Hey Baltimore folks! Come see us this weekend at @baltimorecomiccon.bsky.social!
021
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 22/09/2026
Russia's internet shutdowns disrupt warnings about incoming drone attacks via @darynant.bsky.social & @therecordmedia.bsky.social
therecord.media
Russia’s internet shutdowns disrupt warnings about incoming drone attacks
Russia’s growing restrictions on mobile internet and cellular service are making it harder for people to receive warnings about incoming Ukrainian drone and missile attacks.
051
Reposted by Allan “Ransomware Sommelier” Liska
CaffeineIsLife @caffeineislife.bsky.social · 18/09/2026
It's almost October already and Xmas will be here before you know it. Grab some cool comics now for the nerd in your life and have one less gift to worry about later. 😊
031
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 19/09/2026
Some ransomware drama for your Saturday morning: ShinyHunters hacks Clop leak site, threatens to extort ransomware gang Really nice write up from @bleepingcomputer.com m
bleepingcomputer.com
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service.
11910
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 18/09/2026
I'm not going to lie our campaign is struggling a little bit. So, with 9 days left if you think you'd like to treat yourself to a fun story about Cryptid Hackers and get some truly amazing art a wide range of artists now is the time to jump on this campaign!
kickstarter.com
Cryptid Hacker Force 1 & 2
Issue #2 picks up from #1: the Cryptid Hacker Force must battle a pack of angry Wulvers then head to Paris to save the Cryptid Council!
054
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 17/09/2026
Possibly controversial take: It’s weird to me that a truffle can be both a delicious chocolate and a gross mushroom (I know, I am being redundant).
A picture of the good kinds of truffles.
010
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 16/09/2026
Hackers say they breached Italian state email to target Revolut ‘crypto whales’ via @financialtimes.com
ft.com
Hackers say they breached Italian state email to target Revolut ‘crypto whales’
Group claims to have spent months posing as law enforcement to obtain confidential data on hundreds of customers
050
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 15/09/2026
One thing AI generated banners do: Bottom Left. The AI poster insists on offering unlimited cocktails. The AI generated poster for a local taco place insists on “free tacos.” I guess a tool that was trained that everything it wants is free wants to offer free stuff.
141
Reposted by Allan “Ransomware Sommelier” Liska
Financial Times @financialtimes.com · 15/09/2026
The country’s highest court has rejected Donald Trump’s attempt to restrict mail-in ballots ahead of November’s midterm elections in a blow to the president. ft.trib.al/P5LIJsz
59413
Reposted by Allan “Ransomware Sommelier” Liska
The Record @therecordmedia.bsky.social · 14/09/2026
Hacking Cat has evolved from defacements and data leaks to more sophisticated and destructive attacks on Russian targets, researchers said therecord.media/ukraine-malw...
therecord.media
Pro-Ukraine Hacking Cat group deploying new malware against Russian targets
The pro-Ukraine hacktivist group Hacking Cat has evolved from carrying out website defacements and data leaks to more sophisticated and destructive attacks on Russian targets, researchers said.
032
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 14/09/2026
It's been a minute... But, today's newly registered ransomware-themed domain name is: ransomwaremovie[.]com Not sure how I feel about an arthouse movie about ransomware. I don't know, what do you all think?
youtu.be
Ransomware Pitch Video
YouTube video by scrambledeggluvr
030
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 12/09/2026
We added a new add-on to this campaign just for infosec people here on @bsky.app A hacking Bigfoot! If we hit our goal, we'll also turn this into a sticker. So, if you like hacking (of course you do) and cryptids (who doesn't). Back the campaign! www.kickstarter.com/projects/gre...
The Cryptid Hacker Force Bigfoot wearing a CHF shirt with "Hacking Bigfoot" written under him.
021
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 10/09/2026
Yes! I love CYBERWARCON! Get your talks submitted.
083
Reposted by Allan “Ransomware Sommelier” Liska
Zack Whittaker @zackwhittaker.com · 10/09/2026
New, by me: ID verification giant IDScan confirms data breach of driver's licenses. The company checks IDs used in stores and entertainment venues to verify age/identity. IDScan's statement implies hackers contacted the company with a ransom demand. Ad-block bypass: web.archive.org/web/20260910...
techcrunch.com
ID verification giant IDScan confirms data breach with more than 150 million driver's licenses stolen | TechCrunch
The ID checking company said the data breach included people's full names and driver's licenses and other government-issued identity documents.
14535
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 10/09/2026
I feel like the Home Depot parking lot is the definition of Chaotic Evil.
static.klipy.com
Nick Offerman at Home Depot
ALT: Nick Offerman at Home Depot
030
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 10/09/2026
Can you name the movie from this opening title?
A black screen that reads “Seattle 1988”
580
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 09/09/2026
Massachusetts school district, city hall shutter after cyber incidents via @jgreig.bsky.social & @therecordmedia.bsky.social
therecord.media
Massachusetts school district, city hall shutter after cyber incidents
Cybersecurity incidents over the Labor Day weekend forced the Springfield, Massachusetts, public school system and a Boston suburb's city hall to shut down for at least a day.
010
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 09/09/2026
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days via Security Week
securityweek.com
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
Patch Tuesday September 2026: Microsoft fixed 974 CVEs, including two vulnerabilities exploited as zero-days (CVE-2026-85880 and CVE-2026-81963)
021
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 09/09/2026
Where the backlash against Flock Safety is having the biggest impact via @suzannesmalley.bsky.social & @therecordmedia.bsky.social
therecord.media
Where the backlash against Flock Safety is having the biggest impact
Two populous states and two large cities are among the U.S. jurisdictions where leaders have taken direct action to address criticisms of automated license plate readers (ALPRs).
0107
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 08/09/2026
Did you ever buy something that you know is either going to be shockingly good or terrible.
Totino’s Ramen Noodles 🍜, Buffalo Style Chicken Flavor. 

Apparently this is General Mills first foray into ramen. I was surprised they didn’t own a ramen company, but they know everyone loves these ramen cups (me too). They’re also doing this with Old El Paso, but no.
5112
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 07/09/2026
If you are in cybersecurity you should absolutely treat yourself to this comic, even if you don't normally read comics. I promise you there are inside jokes in here just for you...written by a guy with a little bit of experience in the field (and his brother).
kickstarter.com
Cryptid Hacker Force 1 & 2
A group of cryptid hackers responsible for covering up cryptid sightings come up against their most fearsome threat yet!
011
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 06/09/2026
I feel like this should be more horrifying to people than it is. We're all basically numb to massive data leaks and no one will be held to account for this insane breach of trust. And, as @masnick.com correctly points out, politicians will keep pushing for age verification laws that don't work.
techdirt.com
Hackers Had A Live Feed Of Every ID This Verification Company Scanned. For Over A Year.
From the very beginning of this recent obsession with identifying everyone online (yes, they like to call it "age" verification, but it always ends up as identity verification), we've been pointing out that it was a huge privacy nightmare waiting to happen. Or maybe it wasn't waiting. Maybe it was already happening. This week a...
15829
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 05/09/2026
One of my favorite pages from The Cryptid Hacker Force #2 is the Cryptid Hacker Force having to do incident response. I specifically made it as boring as possible, with the energy drink cans slowly collecting around them as they work. I wanted this to feel the way it felt when I used to do IR...
010
Reposted by Allan “Ransomware Sommelier” Liska
Aaron Sojourner @aaronsojourner.org · 04/09/2026
Happy #JobsDay! At 8:30 am ET, @usbls.bsky.social delivers what’s usually one of the most-important signals abt how economy is changing Forecasts’ center: +33K jobs Unemployment rate (UR) steady at 4.1%
2178
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 03/09/2026
I kissed this last month… What are we even doing here?
thehackernews.com
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself
Anthropic's Claude Mythos 5 spent 34 hours trying to backdoor an open-source project, then used a sockpuppet and rewrote Git history when challenged.
360
Reposted by Allan “Ransomware Sommelier” Liska
andy jabbour @andyjabbour.bsky.social · 02/09/2026
New: 'Symantec has collected and analyzed a ransomware binary that belongs to a likely new double-extortion #ransomware actor... "Fiasco" ...Rust-written' www.broadcom.com/support/secu... #CyberSecurity @gate15.bsky.social @ecrime.ch @ransomwaresommelier.com @campuscodi.risky.biz
broadcom.com
Protection Bulletins
These bulletins share protection updates for threats in the news and those still under the radar, so you know you are covered.
032
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 01/09/2026
I highly encourage all ransomware groups to go after European cities like this because not only will you not get paid, but it absolutely raises your profile with EVERY European intelligence service. via @darynant.bsky.social & @therecordmedia.bsky.social
therecord.media
Berlin says it won’t pay ransom after hackers steal government data
Governing Mayor Kai Wegner said that Berlin had received an extortion demand following the cyberattack, which was discovered in mid-August.
0188
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 30/08/2026
Post your getaway vehicle
static.klipy.com
80s TV Airwolf Helicopter
ALT: 80s TV Airwolf Helicopter
151
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 29/08/2026
I was just thinking that the only way to make my fantasy draft MORE stressful would be to do it from the middle seat on a plane to Kansas City.
This past week alone, we rolled out the largest international expansion in our history (10 NEW cities!), partnered with ESPN on a first-of-its-kind, fantasy. football draft in the sky, and unveiled our newest aircraft, the A321XLR, with a row of Economy Plus® seats with extra elbow room.
000
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 29/08/2026
Except in Pittsburgh, where they’re yinz.
020
Reposted by Allan “Ransomware Sommelier” Liska
CaffeineIsLife @caffeineislife.bsky.social · 28/08/2026
It's not Halloween yet, but here's an early Malware horror story. @ransomwaresommelier.com might want to check this out.
r136a1.dev
SLEEPWALKER: A Passive Backdoor With Its Own Command Language
Losing access to VirusTotal Intelligence at the start of the year was surprisingly productive. Unable to hunt for interesting new malware, I stopped adding to my “TODO” pile and finally worked through...
0101
Reposted by Allan “Ransomware Sommelier” Liska
Green Archer Comics - Where Legends Live! @greenarcher.io · 27/08/2026
1940s comic book ads just straight up trying to get kids killed.
052
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 27/08/2026
Great research from the team at Flare detailing how TeamPCP was unmasked. The hubris of these teen hacking groups will be there downfall, but how much destruction will they leave in their wake?
flare.io
Unmasking TeamPCP: Software Supply Chain Attacks - Flare
Flare's Emerging Threats Team walks through the deanonymization of TeamPCP, a prolific threat actor behind major software supply chain attacks.
032
Reposted by Allan “Ransomware Sommelier” Liska
Cynthia Brumfield @metacurity.com · 27/08/2026
Three major UK airports have been hit by a cyber security incident in which criminal cyber hackers accessed the data of almost nine million people. www.bbc.com/news/article...
bbc.com
Hackers steal data from millions of UK airport customers
About 8.7 million customers had their data accessed, Manchester Airport Group says.
21419
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 27/08/2026
This is huge, TeamPCP has been incredibly disruptive recently. More western teens/young men engaging in destructive hacking activity I do worry that this will be a Scattered Spider situation where arrests of the “leaders” doesn’t slow activity.
itnews.com.au
Two Aussies alleged to be "principal participants" of TeamPCP hacking group
Coordinated action taken by Australian and US authorities.
171
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 26/08/2026
This is good news!
020
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 26/08/2026
Record day for newly registered ransomware-themed domains. One looks REALLY scammy, guess which one? zachrana-dat-ransomware[.]cz instagramcopyrightverificationteamzoneransomwareuser[.]ph agentransomware[.]com obnova-dat-ransomware[.]cz zachrana-dat-ransomware[.]sk obnova-dat-ransomware[.]sk
static.klipy.com
Big Bird Sings 'One Of These Things Is Not Like The Other'
ALT: Big Bird Sings 'One Of These Things Is Not Like The Other'
041
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 25/08/2026
Crushed ☹️
variety.com
140
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 24/08/2026
Name your fave Disney princess. (Wrong answers only.)
190