Sign in

Tom

@tom.wicked.design
255 followers 1.2K following 129 posts

CEO & founder of wicked.design ✌️, lecturer at Swiss 🇨🇭 & Ukraine 🇺🇦 universities. Cyber guy turned social scientist & system theorist 📚 🏳️‍🌈 (he/him) - vegan, cuz friends not food 🌱

PostsRepliesMedia
Tom @tom.wicked.design · 15/12/2025
Der Notepad++-Updater konnte umgeleitet werden und lud #Malware. Aus dem Grund kombinieren wir #Cybersecurity mit #IT-Betrieb und #Audit & #Compliance. Unsere Plattform erlaubt es tausende von Softwarepaketen einfach zu durchsuchen. Deswegen ist die Plattform auch offen für unsere Kunden:innen
Screenshot unsere Cybersecurity und IT-Plattform. Screenshot unsere Cybersecurity und IT-Plattform mit einer Suchmaske über die Notepad Softwarepakete gesucht wurden und in einer Liste dargestellt werden.
110
Tom @tom.wicked.design · 20/10/2025
#Scattered #LAPSUS$ #Hunters #SLH website shinyhunte[.]rs disapeared and is displaying a personal warning message. #ScatteredLAPSUS$Hunters #Cybercrime
010
Tom @tom.wicked.design · 15/10/2025
#Cyber ist so lange ein IT Thema bis im Betrieb nichts mehr geht. IMHO einer der wichtigsten Punkte im neuen Bericht des @ncsc.gov.uk - und etwas was in den meisten Organisationen noch immer nicht angekommen ist. #Cybersecurity ist #Business!
Screenshot of pdf report. It is the portrait of Richard Horne — CEO, NCSC

With the quote above his head: 
For too long, cyber security has been
regarded as an issue predominantly
for technical staff. This must change.
All business leaders need to take
responsibility for their organisation’s
cyber resilience.’
130
Tom @tom.wicked.design · 13/08/2025
#StreetParade, #MobileDeviceManagement und #Risiken - warum ein #MDM alleine nicht reicht 📲 >800k Leute feierten an der weltgrössten Techno Parade in Züri. Darunter auch einige Diebe mit Fokus Mobiltelefone. Den Geräten wurde direkt die SIM-Karte entfernt und sie in Alufolie gewickelt.
110
Tom @tom.wicked.design · 28/07/2025
#Aeroflot airline got hacked by two pro-ukranian groups, #SilentCrow and #Cyberpartisans. 🛫🚫 🚩 7`000 servers — physical & virtual — destroyed. 🚩 Compromise of 122 hypervisors, 43 installations of ZVIRT virtualization, ~100 iLO interfaces, & 4 Proxmox clusters. #Ukraine 🇺🇦
120
Tom @tom.wicked.design · 08/05/2025
#LockBit #ransomware got breached and leaked tonight. A hacker called "kho-kho" (allegedly from Prague 🇨🇿) breached their panel & leaked a 30MB SQL dump containing: 💶 ~ 60K BTC addresses 💬 Negotiation chats with their victims 🛠️ Build info (dating back to Dec 2024) 📈 Client lists, etc.
100
Tom @tom.wicked.design · 26/02/2025
After some analysis the campaign appears to use Tycoon2FA Phishing Kit. The website is loading O365 assets from oktacdn[.]com This domain has been attributed to Tycoon before. Any.Run: any.run/cybersecurit... Others like JoeSandbox or Hybrid Analysis currently label it as clean
100
Tom @tom.wicked.design · 26/02/2025
We currently see an uprising in Adobe QR code based phishing for MS O365 creds 🎣 Recipiens are named, TA apparently did some intel: ▶️ Company name ▶️ Employee names (First and Last) #Phishing #Adobe #O365 #Microsoft #Cybersecurity #Awareness
100
Reposted by Tom
netzpolitik.org @netzpolitik.org · 27/01/2025
Mit Überwachungs-Programmen wie mSpy können Privatpersonen einander ausspionieren. Wir erklären, wie man solche Angriffe aufdecken und abwehren kann. netzpolitik.org/2025/mspy-le... Alle Beiträge zum #mSpyLeak: netzpolitik.org/mspy-leak/
netzpolitik.org
mSpy-Leak: So stoppt man Spionage-Apps
Mit Überwachungs-Programmen wie mSpy können Privatpersonen einander ausspionieren. Wir erklären, wie man solche Angriffe aufdecken und abwehren kann.
38130
Reposted by Tom
Eric Geller @ericjgeller.com · 21/01/2025
DHS has terminated the memberships of everyone on its advisory committees. This includes several cyber committees, like CISA's advisory panel and the Cyber Safety Review Board, which was investigating Salt Typhoon. That review is "dead," person familiar says. www.documentcloud.org/documents/25...
501059595
Tom @tom.wicked.design · 22/01/2025
US president pardons drug market founder and operator to “ honor of her [mother] and the Libertarian Movement, which supported me so strongly”. What a singal to law enforcement, law abiding citizens and everyone who works to make our society a safer and healthier place. #SilkRoad
010
Tom @tom.wicked.design · 19/01/2025
Ich war in Bucha🇺🇦, habe mit den Menschen dort gesprochen, gesehen was die Russen verbrochen haben. Menschen haben mir von den Verbrechen erzählt. Und in der sicheren 🇨🇭sitzen Handlanger der Kriegsverbrecher wie Köppel. #SlavaUkraini #Ukraine
Destroyed house in Ukraine. Bombed by Russian aggressors in their war of aggression. Burned out car in Bucha, Ukraine. Bombed by Russian aggressors in their war of aggression. Memorial in Bucha, Ukraine. In remembrance of the victims of the massacres
020
Tom @tom.wicked.design · 18/01/2025
Apparent threat actor: agricamex[.]com 🎣 We observed this domain cloning #MS #Azure #Entra ID websites of our clients. Domain fronted by #Cloudflare, registered by #GoDaddy. Cert transparency logs shows activiy since around 2025-01-12. Inc. #Okta, #ADFS, #SCP, #outlook and #O365
100
Reposted by Tom
Jason Koebler @jasonkoebler.bsky.social · 09/01/2025
We had to evacuate Los Angeles. Most people I know there have also had to leave. We are safe in San Diego and our apartment is unlikely to burn down. We are very lucky. But alongside the visceral horror of the wildfires there is also the mundanity of dystopia www.404media.co/were-fine-lo...
404media.co
‘We’re Fine’: Lying to Ourselves About a Climate Disaster
The dystopia of Los Angeles' fires are horrifying, mundane, and everything in between.
22617140
Tom @tom.wicked.design · 05/01/2025
#VW
010
Reposted by Tom
C3VOC releases @media.ccc.de · 29/12/2024
Wir wissen wo dein Auto steht - Volksdaten von Volkswagen has been released on media.ccc.de media.ccc.de/v/38c3-wir-wissen-wo-d… events.ccc.de/congress/2024/hub/eve…
021
Reposted by Tom
Matthew Green @matthewdgreen.bsky.social · 29/12/2024
I love that Apple is trying to do privacy-related services, but this just appeared at the bottom of my Settings screen over the holiday break when I wasn’t paying attention. It sends data about my private photos to Apple.
39344162
Tom @tom.wicked.design · 29/12/2024
cat.exe stopped working. Resource exhaustion. Chilling after Christmas 🎄 🐈 #cat #catsofbsky #christmas #AdoptDontShop #AnimalRescue #tierschutz
Orange cat cuddling on their bed.
060
Tom @tom.wicked.design · 27/12/2024
Die elektronische Patientenakte - ein jahrelanges Trauerspiel. Wie so oft "Es kann nicht sein was nicht sein darf!" 🙊🙈🙉 Politische Entscheidungen & ihre Auswirkungen auf unser aller (Cyber)Sicherheit. What about 🇨🇭 Elektronisches Patientendossier (EPDG) 🤔 ogy.de/rpag #38C3 #CCC #Gematik #ePA
events.ccc.de
010
Reposted by Tom
UK Defence Journal @ukdefencejournal.org.uk · 20/12/2024
BREAKING - A tragic vehicle-ramming attack occurred this evening at a Christmas market in Magdeburg, Germany, resulting in the deaths of two people and injuries to at least 60 others. ukdefencejournal.org.uk/lethal-car-r...
ukdefencejournal.org.uk
Lethal car ramming attack at German Christmas market
BREAKING - A tragic vehicle-ramming attack occurred this evening at a Christmas market in Magdeburg, Germany, resulting in the deaths of two people and injuries to at least 60 others.
194
Tom @tom.wicked.design · 20/12/2024
It is this time of the year again - happy holidays 🎄, merry Christmas 🎅🏻 and a lovely festive season to all our friends, partners and clients! We don’t print physical cards or send out fancy gifts, we make a donation to an amazing organisation 👉🏻 www.limon-vergessene-seelen.de
Black and white image of cat sitting in front of PC screen - looking at password manager manual.Black and white image of cat laying on desktop, in front of PC screen with LimeRat Ransomware. Screenshot of Logo of LIMON vergessene Seelen e.V. - animal shelter in Turkey taking care of handicapped stray cats.
110
Reposted by Tom
ProPublica @propublica.org · 19/12/2024
NEW: Women experiencing pregnancy loss in states with abortion bans told us they wished they had known what to expect and how to advocate for themselves. We created this guide for anyone who finds themselves in the same position. ⤵️
propub.li
If You’re Pregnant, Here’s What You Should Know About the Medical Procedures That Could Save Your Life
Women experiencing pregnancy loss in states with abortion bans told us they wished they had known what to expect and how to advocate for themselves. We created this guide for anyone who finds…
257105656675
Reposted by Tom
CORRECTIV @correctiv.org · 19/12/2024
Schwindel bei FDP-Institut: CORRECTIV enthüllt, dass die Denkfabrik Prometheus mehrfach Gelder von einem Netzwerk aus den USA annahm. Das Netzwerk unterstützt weltweit Klimaskeptiker. Bisher hatte Prometheus solche Förderungen abgestritten. Hier geht’s zur Recherche:
correctiv.org
Prometheus: Die verheimlichten Spender des FDP-Lobbyvereins
CORRECTIV zeigt, dass das FDP-Prometheus Institut die Öffentlichkeit täuschte. Es verheimlichte Spenden von einem Netzwerk aus den USA.
391299564
Reposted by Tom
Electronic Frontier Foundation @eff.org · 18/12/2024
You should be able to message your family and friends without fear that law enforcement is reading everything you send.
eff.org
“Can the Government Read My Text Messages?”
You should be able to message your family and friends without fear that law enforcement is reading everything you send. Privacy is a human right, and that’s why we break down the ways you can protect ...
111840
Tom @tom.wicked.design · 16/12/2024
#Cellebrite allegedly used to break into phones of journalists and activists in #Serbia for deploying #spyware.
020
Reposted by Tom
Glasnost Gone @glasnostgone.bsky.social · 14/12/2024
Morning #Ukraine. Let's keep up the resistance.
429962
Tom @tom.wicked.design · 14/12/2024
Bei jedem Meeting mit den Kollegen:innen aus der #Ukraine starten wir mit „Leben noch alle?“, „Musste jemand an die Front?“. Hier macht man sich keine Vorstellung was Krieg bedeutet. Die „Werte“ des Westens sind nur noch peinliche Fassade.
120
Reposted by Tom
Neal @nealysart.bsky.social · 12/12/2024
The ethics of using breached or compromised data in OSINT investigations. A recent article from my collaboration with @londoncity325.bsky.social & The Coalition of Cyber Investigators - follow us on LinkedIn for future insights - tinyurl.com/CoalitionCI #OSINT #ethics #investigations #cyber
linkedin.com
Black OSINT vs White OSINT: The Dual-Use Dilemma in Open Source Intelligence
Introduction Open Source Intelligence (OSINT), the collection and analysis of publicly available information, which has emerged as a potent tool with the potential for both good and evil, has seen an ...
031
Reposted by Tom
Annie Waldman @anniewaldman.bsky.social · 13/12/2024
NEW: After reviewing leaked documents, we have found UnitedHealth is strategically limiting access to a treatment for thousands of children with autism across the country in order to cut costs. Advocates say the company’s strategy may be illegal. www.propublica.org/article/unit... 👇
propublica.org
UnitedHealth Is Strategically Limiting Access to Critical Treatment for Kids With Autism
Leaked internal documents show that the insurance giant is culling providers of applied behavior analysis from its network and scrutinizing the medical necessity of therapy. Advocates say the company’...
936226599964
Reposted by Tom
Roman Höfner @romanhoefner.bsky.social · 12/12/2024
We were invited by @washingtonpost.com to work on this project. Incredible work by Shawn Boburg and @chrisd9r.bsky.social - I learned a lot working with Chris, especially when it comes to identifying a "FMLK", a 764 member who found Sam and "set it all up". She has since left the scene.
162
Reposted by Tom
Volker Quaschning @volkerquaschning.bsky.social · 12/12/2024
Elon #Musk besitzt jetzt 400 Mrd.$. Für gerade mal 14 Mrd.$ pro Jahr ließe sich der Hunger in der Welt beenden und damit eine große Fluchtursache beseitigen. Natürlich ist es viel billiger, einfach gegen Migranten zu hetzen. Warum finden das so viele gut? www.berliner-zeitung.de/politik-gese...
berliner-zeitung.de
Was eine Welt ohne Hunger kostet
Neue wissenschaftliche Studien, die das Entwicklungsministerium vorgestellt hat, zeigen: Es ist möglich den Hunger auf der Welt zu besiegen. Doch dazu braucht es politischen Willen - und viel Geld.
23387128
Tom @tom.wicked.design · 12/12/2024
#DontFeedTheTrolls
010
Tom @tom.wicked.design · 11/12/2024
Every time my students ask me why cyber-sec is more then just internal IT and protection of data. #InfoSec #CyberSecurity #Academia #Students #Lecturing
110
Tom @tom.wicked.design · 09/12/2024
Well
000
Tom @tom.wicked.design · 07/12/2024
Eine der realsten Gefahren für Deutschland sind nicht „Klimakleber“ und Fridays for Future. Es sind radikale, gewaltbereite, antisoziale und antidemokratische #Neonazis. Vom Münchner Oktoberfestattentat über #NSU, #Nordkreuz, #Hannibal-Netzwerk bis hin zum Mörder von Walter Lübcke.
000
Reposted by Tom
Evelyn @kandake.africa · 04/12/2024
Dear men at #AWS #ReInvent The networking events are not for speed dating. I am here to meet people in my industry or area of expertise, not answer questions about my marriage status.
3343753
Tom @tom.wicked.design · 06/12/2024
Das wäre auch mal was für #Zürich
000
Tom @tom.wicked.design · 06/12/2024
#OSINT & #ActiveMeasures / #Disinformation. 🔥 Die Planungen für die neuen Dozentenstelle an der UZH laufen. Nächstes Jahre werden wir uns mal das Doppelganger Netzwerk ansehen. Ich freue mich, vor allem da das Thema zwar sehr präsent ist, aber wenig erklärt wird. #Lecturing #Academia #Uni
disinfo.eu
What is the Doppelganger operation? List of resources - EU DisinfoLab
This page is designed to gather a timeline of the Doppelganger operation with a few elements collected from different reports.
100
Reposted by Tom
heiseonline @heise.de · 05/12/2024
Jährlich werden vom Staat Milliarden für proprietäre Programme ausgegeben, etwa für Microsoft. Experten fordern Mut zum Wandel und ein Ende der Abhängigkeiten. #Open Source
heise.de
Open-Source-Software: Deutschland muss raus aus der Abhängigkeit
Jährlich werden vom Staat Milliarden für proprietäre Programme ausgegeben, etwa für Microsoft. Experten fordern Mut zum Wandel und ein Ende der Abhängigkeiten.
16719
Tom @tom.wicked.design · 01/12/2024
Also Swiss government move to MS like there is no tomorrow. Reading the justification by Kanton if Zurich is more like a marketing pitch written by MS execs - if u don’t use MS cloud no one will every work for you again 🤔
010
Tom @tom.wicked.design · 29/11/2024
Full support 💚 😏
010
Tom @tom.wicked.design · 28/11/2024
Best coworker. He just needs to improve his credential management 😼 #Cat #CatsOfBsky #cyber
Image of cat looking at a screen with documentation for a password manager
0131
Reposted by Tom
Raphael Satter @raphae.li · 27/11/2024
This is a story a lot of reporters have been chasing: Starting in 2015, a massive cyberespionage campaign targeted some of America's most prominent environmentalists. Now, we can reveal that the FBI has been probing whether a longtime Exxon lobbyist was involved. www.reuters.com/business/ene...
reuters.com
Exclusive: Exxon lobbyist investigated over hack-and-leak of environmentalist emails, sources say
The FBI has been investigating a longtime Exxon Mobil consultant over the contractor's alleged role in a hack-and-leak operation that targeted hundreds of the oil company’s biggest critics, according to three people familiar with the matter.
311713855
Reposted by Tom
Tim, the childless cat dad 🇺🇸🏳️‍🌈🇮🇪 @dangerousfruit.bsky.social · 19/11/2024
Please vet your blocklist creators before you implement a mute-list or blocklist. MAGA, foreign troll farms and other bad actors are working day and night to silence our voices.
6630812005
Reposted by Tom
TrumpsTaxes @trumpstaxes.com · 23/11/2024
The right does indeed have a big Bluesky problem. X gave the right an opportunity to 'own the libs' and persuade the persuadables to join their side. Bluesky could deprive them of both. Gift article to read and share. www.theatlantic.com/technology/a...
theatlantic.com
The Right Has a Bluesky Problem
The X exodus is weakening a way for conservatives to speak to the masses.
1302177577
Reposted by Tom
Johannes Franzen @johannesfranzen.bsky.social · 23/11/2024
Deshalb ist die Politik "blocken ohne kommentar" die beste. Ich wollte das auch lange nicht wahrhaben und es ist natürlich viel langweiliger, aber deplatforming ist das einzige, was funktioniert. www.garbageday.email/p/right-wing...
I assume proper right-wing users will start showing up on Bluesky soon because X is going to get very boring for them, very quickly. One of the ideas I’ve repeated the most often in Garbage Day over the years is my firm belief that conservative-only social networks don’t work in the long term. The online right, post-2014, is completely powered by cyberbullying and cruelty and without an easily accessible Other to torment, they either devolve into irrelevant spam or start fighting with each other. This is why Gab, Parler, and even Truth Social have never materialized into anything other than unofficial directories for the FBI of would-be domestic terrorists.
341003352
Tom @tom.wicked.design · 22/11/2024
Interesting first talks at @cyberwarcon.bsky.social 😎
010
Tom @tom.wicked.design · 22/11/2024
Der #Onelog incident ist ein gutes Beispiel warum Cyber nicht gleich IT ist! Incident Response: Es geht um gestörte Geschäftsprozesse, Marketing, Kommunikation, Legal, Abstimmung mit Behörden (Thema Datenschutz, Strafverfolgung, etc.), und ja, auch IT. Aber IT ist eine von vielen Stakeholdern...
110
Tom @tom.wicked.design · 21/11/2024
Hey how can I get multiple accounts (for my company) linked to the custom domain handle at @bsky.app ?! The DNS record is user specific, wo what do I do now? 🤷 #Bsky #DomainVerification #Help
221
Tom @tom.wicked.design · 21/11/2024
mSpy - #stalkerware for everyone. From parents to lovers and companies. Truly worrying documentation by Swiss television. The thing is, the bad OpSec of those people exposes their victims to an even greater threat - #InfoStealer #malware. For just $10 I can buy access to peoples #mSpy account.
Screenshot of russian darknet forum selling stolen credentials. Highlighted entry for cart.mspy.comScreenshot of russian darknet forum selling stolen credentials. Highlighted entry for my.mspyonline.omScreenshot of russian darknet forum selling stolen credentials. Highlighted entry for a darkent market.Screenshot of darknet market.
100