How to investigate a massive phishing campaign
Investigating a large phishing campaign against Irish users – while laying out step by step the methodology and the workflow.
domain
List of darknet markets & vendor shops for investigators #3
Part 3 of my DNMs for investigators research is out – this time with a slight twist…
Hydra darknet market on a server in France?
After an anonymous tip off from a reader I investigated two IP addresses seemingly associated with the Russian darknet market Hydra. What happened next might surprise you…
List of darknet markets for investigators #2
DNMs Part 2 – the continuation of my previous research into darknet markets.
The curious case of the perl.com domain hijack
An OSINT driven research into how the perl.com domain ended up in the hands of cyber criminals who then attempted to auction it off…
OSINT Iran: passive reconnaissance of Iranian IP space, IoT, WiFi networks, social media and more
In this quasi-investigative piece I explore various layers of Iranian digital ecosystems, providing a good deal of resources for starting open source enquiries into Iran.
List of darknet markets for investigators
Investigating darknet markets? Here’s a list of the main DNMs in operation right now. Care to guess which one will be taken down next?
Osint Me Tricky Thursday #4 – Website OSINT
Tricky Thursday is back and today we are looking at website-focused OSINT.