1. X
  2. BlockOSINT
Log inSign up
BlockOSINT
3,701 posts
Image
user avatar
BlockOSINT
@0xfigo
Intel | @north_scan | @_SEAL_Org | Ketman medium.com/@heinerg
northscan.co
Joined July 2009
913
Following
436
Followers
RepliesRepliesMediaMedia
  • Pinned
    user avatar
    BlockOSINT
    @0xfigo
    Dec 2, 2025
    🎥 After months tracking #DPRK IT worker fake hiring operations, we had the chance to collaborate on something rare: the full Famous Chollima attack cycle captured on video – tools, tactics, and targets, end-to-end. 🙏 Huge thanks to @MauroEldritch and the ANY RUN team
    user avatar
    Mauro Eldritch 🏴‍☠️
    @MauroEldritch
    Dec 2, 2025
    🇰🇵 Meet Aaron AKA Blaze, a #Lazarus recruiter. 💵 He offered 35% of a salary if we let his operators use our laptops "to work in" (infiltrate) Western companies. ▶️ We gave him ANYRUN sandboxes, recording everything they did. ⬇️ Full article below. Full disclosure on Dec 4.
    Image
  • user avatar
    BlockOSINT
    @0xfigo
    Aug 9
    Gracias por compartir!!
    user avatar
    Juan Brodersen @ DEF CON 34 / BLACK HAT USA
    @juanbrodersen
    Aug 8
    #DEFCON34: A sala llena, @MauroEldritch y Heiner García exponen en main track una investigación que empezó a principios de año sobre norcoreanos intentando infiltrarse en empresas occidentales 🔥 + Info en @anyrun_app
    Image
    00:00
    Image
    Image
  • user avatar
    BlockOSINT
    @0xfigo
    Aug 6
    First time at @defcon and glad to have this beauty in my hands 🔥
    Image
  • user avatar
    BlockOSINT
    @0xfigo
    Jul 23
    Glad to see NorthScan growing with support from the community🙏 Special thanks to @Giveth @thedaofund, @wintermute_t, and everyone who supported the project!
    user avatar
    NorthScan
    @north_scan
    Jul 23
    NorthScan is growing 🔎 With support from the Ethereum Security QF round hosted through @Giveth, NorthScan received community donations and matching funds to strengthen our research A special thank you to @thedaofund @Quantstamp and @wintermute_t for their major contributions,
  • user avatar
    BlockOSINT
    @0xfigo
    Jul 9
    🙏Glad to share a new series of short investigations into North Korean IT workers using GitHub to build fake identities, manufacture credibility, and infiltrate companies: The GitHub Diaries of DPRK IT workers
    Image

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
Advertisement
Advertisement