Martijn Grooten

@martijngrooten.bsky.social

Threat researcher, rights supporter, obsessive reader, marathon runner, eternal traveler, serial migrant, music blogger, lapsed mathematician. https://lapsedordinary.net/ Signal: martijngrooten.37

new writeup: the latest DarkSword operator, chinese-speaking, well over a hundred panels found the whole thing off one http body hash. six panels, two totally different codebases, same guy we're at 7-8 unrelated crews running this leaked ios chain now censys.com/blog/darkswo... #darksword

DarkSword's Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator Cluster - Censys

Censys ARC noticed a recent spike in DarkSword hosts and web properties. Here are the IOCs and pivots you need to track the growing threat.

censys.com

Imagine the UK govt made a strong statement condemning the Scattered Spider kids who just got sentenced but also, not quite subtly, hinted at how their amazing skills were a result of the British education system. That's how I read posts from AI companies talking about AI used in cyber attacks.

Over the years I have, even I say so myself, become reasonably skilled at recognizing threat infrastructure from scanning data. I have not yet mastered the skill of recognizing a funny feeling as 'I need to eat'.

I am watching a bit of the final while getting takeaway pizza and I realize I'm still not over Cabo Verde and Egypt. I want Spain to win mostly because I want them to lose the least. (Okay and Lamine Yamal seems kinda cool.)

Look, I’m an open source maintainer, and if you want people to use that FOSS software as an alternative to that proprietary software it’s good to understand why people wanted to use that proprietary software in the first place and why they might be hesitant to switch It’s not because users are dumb