Sign in

Jerri P

@whoisnt.bsky.social
49 followers 54 following 9 posts

Threat Research @ Recorded Future

PostsRepliesMedia
Jerri P @whoisnt.bsky.social · 23/07/2026
1/ We just published new research on TAG-195 (“Golden Chickens” / “Venom Spider”), documenting a major evolution of one of cybercrime’s longest-running Malware-as-a-Service ecosystems. We identified 4 previously undocumented malware families, revealing a shift toward modular, operator-driven tooling
recordedfuture.com
TAG-195 Upgrades MaaS Ecosystem with Modular Tools
Insikt Group identifies four new TAG-195 malware families, revealing an architectural transition toward modular, operator-driven tooling in the MaaS ecosystem
134
Reposted by Jerri P
Julian-Ferdinand Vögele @julianferdinand.bsky.social · 19/03/2026
1/ Today we’re publishing our annual malicious infrastructure report, providing a broad view of global threat infrastructure. This year, we significantly expanded coverage across malware families, threat categories, and deeper infrastructure insights: www.recordedfuture.com/research/202...
recordedfuture.com
2025 Year in Review: Malicious, Infrastructure
Explore Insikt Group’s 2025 Malicious Infrastructure Report. Gain insights into Cobalt Strike, Vidar infostealers, and AI-driven threats to secure your 2026 strategy.
1910
Jerri P @whoisnt.bsky.social · 09/12/2025
CastleLoader in the wild! Four distinct activity clusters, sector-specific targeting of logistics, and high-end tooling like Matanbuchus and CastleRAT.
032
Reposted by Jerri P
Virus Bulletin @virusbtn.bsky.social · 09/12/2025
Recorded Future’s Insikt Group uncovered four GrayBravo activity clusters. TAG-160 impersonates logistics firms, while TAG-161 impersonates Booking.com, employing ClickFix to deliver CastleLoader and Matanbuchus. www.recordedfuture.com/research/gra...
065
Reposted by Jerri P
Binding Hook @bindinghook.bsky.social · 21/10/2025
In his latest for Binding Hook, @lawrencesec.bsky.social looks at how internet service providers work within the system to evade sanctions and enable #cyberattacks and #disinformation campaigns: bindinghook.com/neutral-inte...
bindinghook.com
‘Neutral’ internet governance enables sanctions evasion
Internet service providers and hosting companies enable cybercrime and cyber operations. Why don’t sanctions stop them?
062
Jerri P @whoisnt.bsky.social · 04/09/2025
CastleRAT is here 🐀
071