Sign in

Allan “Ransomware Sommelier” Liska

@ransomwaresommelier.com
8.4K followers 1.9K following 2.8K posts

Recorded Future - Ransomware Researcher Owner @greenarcher.io - Yours Truly, Johnny Dollar | The Press Guardian | The Clock | The Green Archer Weird mix of security, comics, photography and wine! www.greenarcher.io

PostsRepliesMedia
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 07/10/2026
One amazing care package from the equally amazing @caffeineislife.bsky.social ! Thank you 🙏
270
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 06/10/2026
I LOVED the McD.L.T. Even if it was an illusion it made you feel like your burger was an elevated experience.
221
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 24/09/2026
Ohhhh…Dulles has E gates now. How…exciting?
130
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 17/09/2026
Possibly controversial take: It’s weird to me that a truffle can be both a delicious chocolate and a gross mushroom (I know, I am being redundant).
A picture of the good kinds of truffles.
010
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 15/09/2026
One thing AI generated banners do: Bottom Left. The AI poster insists on offering unlimited cocktails. The AI generated poster for a local taco place insists on “free tacos.” I guess a tool that was trained that everything it wants is free wants to offer free stuff.
141
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 12/09/2026
We added a new add-on to this campaign just for infosec people here on @bsky.app A hacking Bigfoot! If we hit our goal, we'll also turn this into a sticker. So, if you like hacking (of course you do) and cryptids (who doesn't). Back the campaign! www.kickstarter.com/projects/gre...
The Cryptid Hacker Force Bigfoot wearing a CHF shirt with "Hacking Bigfoot" written under him.
021
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 10/09/2026
Can you name the movie from this opening title?
A black screen that reads “Seattle 1988”
580
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 09/09/2026
Quick update…not horrible, but probably wouldn’t buy again.
130
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 08/09/2026
Did you ever buy something that you know is either going to be shockingly good or terrible.
Totino’s Ramen Noodles 🍜, Buffalo Style Chicken Flavor. 

Apparently this is General Mills first foray into ramen. I was surprised they didn’t own a ramen company, but they know everyone loves these ramen cups (me too). They’re also doing this with Old El Paso, but no.
5112
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 05/09/2026
One of my favorite pages from The Cryptid Hacker Force #2 is the Cryptid Hacker Force having to do incident response. I specifically made it as boring as possible, with the energy drink cans slowly collecting around them as they work. I wanted this to feel the way it felt when I used to do IR...
010
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 29/08/2026
I was just thinking that the only way to make my fantasy draft MORE stressful would be to do it from the middle seat on a plane to Kansas City.
This past week alone, we rolled out the largest international expansion in our history (10 NEW cities!), partnered with ESPN on a first-of-its-kind, fantasy. football draft in the sky, and unveiled our newest aircraft, the A321XLR, with a row of Economy Plus® seats with extra elbow room.
000
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 24/08/2026
Name your fave Disney princess. (Wrong answers only.)
190
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 20/08/2026
I don't think I've ever seen this from ransomware before: GOLDEN WOOLF is using an automated Telegram bot to collect ransom payment in TON (Telegram's blockchain coin). 20 TON is only about $28, so they aren't making that much, but if its automated... h/t PCrisk www.pcrisk.com/removal-guid...
140
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 19/08/2026
to stand out and Clop seems to be the odd man out, in that no one covers their campaigns or cares about them. Look at the Google Trends report for previous Clop campaigns. There is usually a noticable spike in searches during a campaign, but we aren't really seeing it with this campaign.
270
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 15/08/2026
scattered spider and their copycats ramp up activity I’ve been re-reading @joetidy.bsky.social’s excellent book Ctrl+ Alt+ Chaos and I forgot how angry it made me.
1166
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 09/08/2026
I know I am not flying as much this year as in years past…but when did IAD go all concrete in their C Gates?
230
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 08/08/2026
I think I am going to upload to Wikifeet to see how I’m rated 😂😂😂
040
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 01/08/2026
Jack Kirby *LOVED* em dashes and if it was good enough for him it’s good enough for our little comic company. We even had these stickers made to hand out at cons.
020
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 28/07/2026
Okay, North Carolina frenz, is Raleigh known for its corn dogs?
110
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 28/07/2026
If you are in Melbourne today, I guess watch out for your sheep…
A weather alert for Melbourne, Australia with a “Sheep Grazier Warning”
151
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 20/07/2026
Today’s interesting newly registered ransomware-themed domain name is. hospitalransomware[.]com Which someone is trying to sell for $50k. That’s right, for about the 1/2 the cost of the average ransom paid by a healthcare provider you can own this domain!
073
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 12/07/2026
And the Nats will be trading James Wood away in 3…2… It’s hard to root for a team that the ownership clearly doesn’t want to win.
010
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 06/07/2026
What kind of sociopath has EVER looked at a PDF document and said to themselves, "This could be a podcast?"
A screenshot from Adobe Acrobat showing the toolbar which includes the following options:
Edit a PDF
Generated Podcast [New]
Create PDF Space
Export a PDF
Create a PDF
2255599967
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 06/07/2026
Well, the good news is the article is excepted from @katherinedunn.bsky.social’s book, Little Blue Dot: How GPS Shaped the Modern World, which you can order or possibly check out from the library. www.bloomsbury.com/us/little-bl...
120
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 02/07/2026
Ummm…no thank you LinkedIn. Also, is it really thought leadership (🤮) if I have to buy an ad to sell it?
An email from LinkedIn asking me to buy a “thought leader” ad that reads:

Your recent post looks great! Now take it one step further
Promote existing content as a Thought Leader Ad to build brand equity, influence buying decisions, attract quality talent, and much more on LinkedIn.
010
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 02/07/2026
I gotta say, @jwarminsky.bsky.social, my favorite part of the indictment is STOKES going all Karen with Dragon Force ransomware because he didn't want to pay the $500. EVERY retail employee knows the "do you know much I spend here" customer. Also, keep "Hackers" out your mouth you little punk.
screen shot from the indictment that reads:
Subject Server 1 contained chats in a window titled
“DragonForce,” a known form of ransomware that operates as a ransomware-as-a-
17
service (Raas) model. In the chats, one user asks “Brother are you going to charge us
500$E [ ] to make a new login after we made you over 1 million? seriously”. Based on
my role in the investigation, training, and experience, I believe that this message
indicates a user of Subject Server 1 complaining about being required to purchase
new credentials in order to log into ransomware infrastructure even after a successful
ransomware attack.The accused, STOKES, wearing a diamond encrusted chain that says "Hack the Planet" a quote from the movie Hackers which he is obviously way way too stupid to understand the true meaning of because he is a punk-assed bitch.
274
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 28/06/2026
Because I subscribe to 2600, I am ALWAYS on the lookout when I travel. Here are some I’ve found in the last couple of years Charleston, WV New York, NY Saint Lucia Arlington, VA
021
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 27/06/2026
This sign feels like a trap for readers of @2600.com
250
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 21/06/2026
Ohhhh…this is fun. But, I’m concerned that I might think a little *too* much like Hank Green since I scored so well on the first one.
000
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 17/06/2026
Dr Fasel’s book arrived today. Can’t wait to dive in. allan
181
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 03/06/2026
Oh hey…it me! I should probably make some slides or something.
190
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 20/05/2026
My hotel room has a Murphy Bed, now I wish I had a friend who could come use it!
020
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 15/05/2026
I joked with someone that sometimes when I talk to the press my inner Johnny Dollar comes out. www.greenarcher.io/category/you...
130
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 14/05/2026
KnowBe4 out there teaching kids how to spell fish incorrectly.
130
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 13/05/2026
What do you say, Andy? Road Trip?
220
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 05/05/2026
What would a META advanced personal assistant be like? 1. A calendar filled with other people’s meetings. 2. Spends the day alerting you about things you don’t care about. 3. Will remind you of some dude you knew in the 3rd grade’s birthday. 4. Soooo many ads. 5. Lots of Nazi stuff. What else?
583
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 01/05/2026
Damned hacker squirrels breaking into my bird feeders. Fortunately my HEY!-DR keeps them at bay 🤣
121
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 26/04/2026
The screen on my plane has a little tracker…I can now post second-by-second updates on my trip 😂
120
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 24/04/2026
I love Denver. You never know when an old house you walk up to is going to turn out to be a cool museum.
010
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 25/03/2026
The #RSAC bookstore is about 1/2 sold out of our @greenarcher.io graphic novels. So, if you are looking honking about picking one up do it today. Then come find me and I’ll sign it for you!
Yours Truly, Johnny Dollar; The Green Archer and The Press Guardian graphic novels at the RSAC bookstore
083
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 24/03/2026
Brilliant and insightful talk by @joemenn.bsky.social at the @runzero.com lounge. Looking forward to get his book signed.
040
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 24/03/2026
If Tower Records were still a thing there would be all sorts of lawsuits over this booth 🤣
141
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 24/03/2026
This is a ridiculous and unserious rule that does nothing to address the very real problem of security vulnerabilities in hone routers. docs.fcc.gov/public/attac...
NEWS FROM THE FEDERAL COMMUNICATIONS COMMISSION
FACT SHEET: FCC Updates Covered List to Include Foreign-Made
Consumer Routers, Prohibiting Approval of New Models
Update Follows Determination by Executive Branch Agencies that Consumer-Grade
Routers Produced in Foreign Countries Threaten National Security
WASHINGTON, March 23, 2026—Today, the Federal Communications Commission updated its Covered List to include all consumer-grade routers produced in foreign countries. Routers are the boxes in every home that connect computers, phones, and smart devices to the internet. This followed a determination by a White House-convened Executive Branch interagency body with appropriate national security expertise that such routers "pose unacceptable risks to the national security of the United States or the safety and security of United States persons."
The Executive Branch determination noted that foreign-produced routers (1) introduce "a supply chain vulnerability that could disrupt the U.S. economy, critical infrastructure, and national defense" and (2) pose "a severe cybersecurity risk that could be leveraged to immediately and severely disrupt U.S. critical infrastructure and directly harm U.S. persons."
President Trump's 2025 National Security Strategy stated: "the United States must never be dependent on any outside power for core components—
from raw materials to parts to finished
products-
-necessary to the nation's defense or economy. We must re-secure our own independent and reliable access to the goods we need to defend ourselves and preserve our way of life."
Malicious actors have exploited security gaps in foreign-made routers to attack American households, disrupt networks, enable espionage, and facilitate intellectual property theft. Foreign-made routers were also involved in the Volt, Flax, and Salt Typhoon cyberattacks targeting vital
U.S. infrastructure.
The determination included an exemption for routers that the Department of War (DoW) or the Department of Ho…
084
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 23/03/2026
runZero has some great book signings set up this year, which is exactly the kind of thing I love to do at #RSAC. Also, hit me up @runzero.com if you want me to do some comic book signings next year.
031
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 23/03/2026
Yesterday, I went from TPA -> IAD -> SFO to get to RSAC And I feel that’s enough acronyms to last me for the week.
020
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 22/03/2026
I do love the Flamingo in TPA.
1181
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 20/03/2026
It took a minute for my local bookshop to get this book from @unlawfulentries.bsky.social in but, totally worth it. Absolutely fascinated by Migration and the Origins of American Citizenship.
0215
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 19/03/2026
Just in time! I just added my @sleuthcon.bsky.social badge to my backpack! Get your talk submitted to @sleuthcon.bsky.social today! It is, by far, my favorite cybercrime con and I’d love to see you there!
271
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 11/03/2026
I did an NFL meme...look at me, I'm cool now. Also, I'd rather go up against Trey Hendrickson twice a year than Maxx Crosby, so good good job Baltimore.
010
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 07/03/2026
The squirrels in our yard no longer fear us.
050