
(Cyber) Intelligence @ S2 Grupo #intelligence #cybint @s2grupo @securityartwork
Joined July 2019
- Tweets2.1K
- Following444
- Followers2K
- Likes1.7K
Pinned Tweet
Check out our new book, now available: Cyber GRU. Russian military intelligence in cyberspace lab52.io/blog/new-book-now-a… #Russia #GRU
👇👇👇&& 🍿🍿🍿
The GRU hacked into Jared Kushner's iPhone. Dutch military intelligence (MIVD) then recruited a GRU spy who gave them access to the hacked phone. What MIVD discovered was that Kushner had access to two bank accounts --one Azerbaijani, the other Israeli --where Saudi Crown Prince Mohammed bin Salman and Emirati ruler Mohammed bin Zayed deposited money. It sounds like a slightly far-fetched episode of "Slow Horses," but it's real. And it proves just how eye-poppingly corrupt this administration was and continues to be as its "special envoy" decides the fate of tens of millions in Europe in the Middle East. Simply incredible reporting by Matthew Cole, drawn from his new book on Kushner. vanityfair.com/story/jared-k…
INC and The Gentlemen Ransomware: Exposed AI Infrastructure
socradar.io/blog/inc-gentlem…
LAB52 retweeted
Leipzig drone attack traced to the Special Tasks Department of the GRU.
Telefonaten, Reisebewegungen, Standortdaten: Wir haben die Spuren der Drohnenattacke am Flughafen zurückverfolgt bis in eine Eliteeinheit - das SSD des russischen Militärgeheimdienstes GRU. @derspiegel spiegel.de/panorama/justiz/l…
Margaret Hamilton, computing pioneer who led software development for the Apollo program, dies at 90 news.mit.edu/2026/margaret-h… 😢😢😢
LAB52 retweeted
Earth Sirrush (AKA UAC-0099, SHADOW-EARTH-065) : A Russia🇷🇺-Aligned Intrusion Set With 4 Years of Evolving Espionage Tooling
(Target Ukrainian🇺🇦 government, defense, border guard, and logistics since at least 2022)
↘️
trendaisecurity.com/en-us/re… | By @trendai_RSRCH
Check out our new post!! Backdoors in the Dungeon – TURN & MQTT Abused by DragonForce lab52.io/blog/backdoors-in-t…
Unraveling the Tangle: Analyzing the Hacking Cat Group's Toolkit securelist.ru/tr/hacking-cat… by @kaspersky (in Russian)
LAB52 retweeted
We're publishing our most detailed threat intelligence report to date.
It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them.
We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies.
These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve.
We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop.
Read the report: anthropic.com/threat-intelli…
LAB52 retweeted
1/ Thought it might be helpful to translate this for crypto folks so you know who is hacking you.
tl;dr the word "Lazarus" doesn't mean anything anymore, it's just a collective name used to describe various North Korean cyber operations. The (relevant) clusters are as follows:
The use of disposable agents by the #GRU, and their curious profiles, is always an interesting topic, particularly since 2022 👇👇👇
The person arrested by British police today for assisting GRU's Volunteer Corps ( bbc.co.uk/news/articles/c7v4…), has a colorful history. In 2013, at age 18, he was convicted for a violent group robbery that left three people unrecognizably disfigured (mugshot below). yorkpress.co.uk/news/1057175…
SENTINEL: A Multi-Pathway Architecture for Detecting Living-Off-the-Land APT Attacks on Windows Command Lines researchgate.net/profile/Aha…
Cyber Lessons From Russia’s War in Ukraine jamestown.org/cyber-lessons-…
Google's Fairwind program (Google's Glasswing)
deepmind.google/fairwind-pro…













