(Cyber) Intelligence @ S2 Grupo #intelligence #cybint @s2grupo @securityartwork

Joined July 2019
Check out our new book, now available: Cyber GRU. Russian military intelligence in cyberspace lab52.io/blog/new-book-now-a… #Russia #GRU
5
22
3
54
5,168
👇👇👇&& 🍿🍿🍿
The GRU hacked into Jared Kushner's iPhone. Dutch military intelligence (MIVD) then recruited a GRU spy who gave them access to the hacked phone. What MIVD discovered was that Kushner had access to two bank accounts --one Azerbaijani, the other Israeli --where Saudi Crown Prince Mohammed bin Salman and Emirati ruler Mohammed bin Zayed deposited money. It sounds like a slightly far-fetched episode of "Slow Horses," but it's real. And it proves just how eye-poppingly corrupt this administration was and continues to be as its "special envoy" decides the fate of tens of millions in Europe in the Middle East. Simply incredible reporting by Matthew Cole, drawn from his new book on Kushner. vanityfair.com/story/jared-k…
3
141
An interesting paper about #Russian low-level ("disposable") agents in recent years: Russia’s low-level agents: characteristics, roles and organisational structure of covert operatives in Europe, 2022–2025 tandfonline.com/doi/pdf/10.1…
3
4
369
IN LOGS WE TRUST!!
2
187
Happy National Day of Spain! 🇪🇸
3
177
Leipzig drone attack traced to the Special Tasks Department of the GRU.
8
282
5
818
27,711
Check out our new post!! Cyber Morocco: a quick and dirty experiment about artificial intelligence for cyber intelligence lab52.io/blog/cyber-morocco-… #Morocco
4
1
10
682
Check out our new post!! Backdoors in the Dungeon – TURN & MQTT Abused by DragonForce lab52.io/blog/backdoors-in-t…
4
12
906
So true... 👇👇👇
Esto... que nuestro equipo de #DFIR nos quiere mandar un mensaje!!! /cc @s2grupo @LAB52io
4
434
I asked Claude to summarize the names of APT28 identfied in the Threat Group Cards by @ThaiCERT. I chose #APT28 because it is the group with more names, as stated in securityartwork.es/2020/12/0… The result is INSANE 😂😂😂
8
18
4
74
8,406
ENISA Threat Landscape 2026 enisa.europa.eu/publications…
4
356
Unraveling the Tangle: Analyzing the Hacking Cat Group's Toolkit securelist.ru/tr/hacking-cat… by @kaspersky (in Russian)
1
208
We're publishing our most detailed threat intelligence report to date. It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them. We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies. These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve. We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop. Read the report: anthropic.com/threat-intelli…
3,216
11,678
4,937
50,370
43,859,567
LAB52 retweeted
1/ Thought it might be helpful to translate this for crypto folks so you know who is hacking you. tl;dr the word "Lazarus" doesn't mean anything anymore, it's just a collective name used to describe various North Korean cyber operations. The (relevant) clusters are as follows:
15
54
7
280
28,999
The use of disposable agents by the #GRU, and their curious profiles, is always an interesting topic, particularly since 2022 👇👇👇
The person arrested by British police today for assisting GRU's Volunteer Corps ( bbc.co.uk/news/articles/c7v4…), has a colorful history. In 2013, at age 18, he was convicted for a violent group robbery that left three people unrecognizably disfigured (mugshot below). yorkpress.co.uk/news/1057175…
3
190
SENTINEL: A Multi-Pathway Architecture for Detecting Living-Off-the-Land APT Attacks on Windows Command Lines researchgate.net/profile/Aha…
161