Armada (@armadaops) header
Armada (@armadaops) profile picture

Armada is the advanced technical services arm of @risk3sixty

Joined October 2025
Photo by Armada (@armadaops)Photo by Armada (@armadaops)Photo by Armada (@armadaops)Photo by Armada (@armadaops)Photo by Armada (@armadaops)Photo by Armada (@armadaops)Photo by Armada (@armadaops)Photo by Armada (@armadaops)Photo by Armada (@armadaops)
That cheap streaming box is quietly renting out your internet connection. Residential proxy networks turn ordinary homes into operational cover for fraud, credential abuse, and recon. The traffic looks like a person. It points at a house, not the actor behind it. We dug into the market with @4SaferInternet : armada.risk3sixty.com/blog/s…
1
1
66
Tomorrow at 1pm ET Senior Security Consultant Nick Swink goes live and demonstrates the PHP2Shell vulnerabilities and how it all happened. Get notified when the stream starts here: youtube.com/watch?v=iZwYgxII…
1
1
51
Most AI agents live in a chat window. This one makes phone calls. In this video, we walk through the Python harness behind it. It coordinates four services in real time: Twilio handles the call, Deepgram turns speech into text, AWS Bedrock does the thinking, and ElevenLabs talks back. The agent loop isn't the interesting part. If you've used Claude Code or OpenCode, you've seen that pattern. The hard part is streaming audio between Twilio, Deepgram, and ElevenLabs fast enough that the other person never notices they're talking to a machine. That gap is shrinking quickly, and security teams should plan for it now.
1
1
2
106
Tomorrow Nick Swink goes live on YouTube to build an agentic voice phishing bot on the fly. Get notified when the stream starts here -> youtube.com/watch?v=sFQOoA8Q…
1
1
24
This Friday Senior Security Consultant Nick Swink will build an agentic voice phishing agent live ON AIR. Click below to get notified when the stream starts. #cybersecurity #ai #agents youtube.com/watch?v=sFQOoA8Q…
1
1
54
An AI-powered game cheat that beats anti-cheat by never touching memory at all. DestinyML, a commercial "AI aimbot" built for Destiny 2, runs a YOLOv5-family computer vision model against raw screen capture, feeds it through a second PC, and drives a hardware-spoofed mouse to aim. No process injection. No memory reads. To the anti-cheat engine, it just looks like a human holding a mouse. Next Friday, 7/31 at 1pm ET, Steve Guris sits down with Nick Swink on The Operator View to go deep on how it actually works: • How the model identifies targets straight from pixels, with zero game API access • Why dual-PC rigs and hardware-emulated input defeat behavior-based anti-cheat •Which filesystem, process, network, and USB signals still give it away • How Steve used AI-assisted reverse engineering to analyze the tool itself and perform the research in a matter of days rather than weeks It's LIVE, so bring your questions! Steve and Nick are answering them on air, not after the fact. This isn't just a gaming story. Computer vision instead of API abuse, spoofed hardware instead of forged software. That pattern is exactly what's starting to show up against fraud controls and bot detection outside of gaming too. Worth understanding the mechanics regardless of which side of it you sit on. -> Watch live — here on X or over on Youtube youtube.com/watch?v=IkBoMneA… -> Full research — Part 1: armada.risk3sixty.com/blog/r… Part 2: armada.risk3sixty.com/blog/w… -> Get the full technical report: armada.risk3sixty.com/resour…
2
1
2
240
The Operator View June 2026 - Modern Phishing with Device Codes teapaw.org/i/broadcasts/1RJjppvMg…
44
Tomorrow's Operator View is live at 1pm EST, and it's about the phishing technique that skips your password and goes straight for the MFA approval screen.
2
1
1
74
The reason it works: the login screen you're asked to approve is real. It's just requesting access on someone else's behalf.
1
22
We're live tomorrow, on YouTube and here on X. Set a reminder, link in the reply.
16
The Operator View May 2026 - NPM Malware & Electron Apps teapaw.org/i/broadcasts/1nGnRRWnv…
1
1
51
Reminder: We are broadcasting The Operator View live right here on X today at 1:00 PM EST. Nick Swink (@0xC0rnbread) is doing a technical walkthrough all about the NPM malware ecosystem and how malicious code propagates across systems. Join us at 1pm EST to hear about threats in the NPM ecosystem and walk through red teaming tactics that abuse JavaScript. Drop your questions in the replies and we will see you at 1:00 PM. #CyberSecurity #Malware #LiveStream #InfoSec #ThreatIntel #TheOperatorView #Armada #ArmadaOps #Redteam
1
2
3
84
In a meaningful share of orgs we assess, CTEM surfaces internet-facing assets the security team has never inventoried. Not edge cases, but systems that have been live for months with no owner.
1
11
Read the full breakdown. Link in the comments.
1
9