Log inSign up
Image
user avatar
Will
@BushidoToken
Senior Threat Intel Advisor @TeamCymru Co-founder @CuratedIntel Co-author @SANSForensics FOR589 Co-founder @BSidesBournemth #126: REvil @darknetdiaries
🇬🇧
BushidoToken.net
Joined March 2013
3,390
Following
38.4K
Followers
RepliesMedia
  • Pinned
    user avatar
    Will
    @BushidoToken
    Jul 25
    🔮 New CTI Resource Announcement! 🔮 Project ORBITAL (Operational Relay Box Intelligence, Tracking, & Analysis Lexicon) is the latest open source intelligence (OSINT) collection I’ve created to help educate the industry about ORB Networks. 🔗 blog.bushidotoken.net/2026/07/projec…
    Image
  • user avatar
    Will
    @BushidoToken
    Aug 9
    New Blog! 🇬🇧 UK Cybercrime Journal: Qilin Ransomware Rampage in H1 2026 - In H1 2026, Qilin averaged 8 UK victims per month, 37 in total - Most victims are Small/Medium Enterprises (SMEs) - Salford City College appeared on Qilin & DragonForce’s DLSs 🔗 blog.bushidotoken.net/2026/07/uk-cyb…
  • user avatar
    Will
    @BushidoToken
    Aug 9
    Can’t stop, won’t stop tracking CSAI 👇
    user avatar
    Team Cymru Research
    @teamcymru_S2
    Aug 7
    INTEL DROP CyberStrikeAI C2 panels in the Total Insights Feed jumped significantly mid-July. Most of that growth is two freshly stood-up blocks, one in Hong Kong and one in the US, each lit up across eight sequential /24s. 156.250.196.0/24 +28 observed 156.250.157.0/24 +26
    Image
  • user avatar
    Will
    @BushidoToken
    Aug 5
    Watch out for those RMMs! 👇
    user avatar
    Team Cymru Research
    @teamcymru_S2
    Aug 5
    INTEL DROP Remote-management tools are the access layer for a lot of live intrusions. We're tracking 949 malicious IPs running RMM software (AnyDesk, ScreenConnect, MeshCentral) across 220 ASNs, most of it in the US, the Netherlands, Germany, and Russia. RMM staging malware:
  • user avatar
    Will
    @BushidoToken
    Jul 31
    For those interested in LAPDOGS Operational Relay Box (ORB) infrastructure 👇
    user avatar
    Team Cymru Research
    @teamcymru_S2
    Jul 31
    INTEL DROP Tracking China-aligned LAPDOGS Operational Relay Box (ORB) infrastructure in our detection pipeline which powers our Total Insights Feed. - Family: LAPDOGS - Total hosts: 196 - Attribution: China-aligned - Top countries: HK, JP, SG - Distinct ASNs: 19 1.9.117.13
    Image