Nicola R.

Vintage OSINT tool : How it started - How its going https://lnkd.in/eFEdSdtU

19

12 Comments

🌎 You might think fentanyl is a US only problem but as this report from TRM Labs shows, the US is just one node in a vast network that encompasses most of the world’s trade in illicit synthetic drugs which relies heavily on cryptocurrencies. 🌍 In “Beyond Fentanyl: Cryptocurrency’s role in the international synthetic drug precursor market,” we take a closer look at Chinese precursor drug manufacturers and examine trends in how they leverage cryptocurrency: 🔺 Chinese precursor manufacturers received over USD 26 million in cryptocurrency in 2023 🔺 The amount of cryptocurrency deposited into wallets linked to Chinese precursor manufacturers increased by over 600% from 2022 to 2023 🔺 Around 60% of cryptocurrency payments to Chinese precursor manufacturers to date have been made on the Bitcoin blockchain 📥 Download the report here 👉 https://lnkd.in/eHDZDEZF #drugs #digitalassets #illicitfinance

34

1 Comment

🌐 Unlock the Power: Leading OSINT Platforms🎖 (Part 2) #E043 #OSINT #Solutions - Blackdot Solutions Videris: Streamlines investigations by integrating OSINT workflows into one platform, making it proficient for conducting due diligence and complex investigations. - Maltego Technologies: A graphical link analysis tool that allows us to install and integrate multiple third-party services useful for a wide variety of purposes in our investigations. - OSINT Combine NexusXplore: An advanced platform designed to empower corporate intelligence teams to effectively manage online corporate risks by integrating multiple sources of valuable information. - InGravPlatform PeopleMon: A top-tier data analytics solution providing agencies with access to comprehensive analytical reports regarding specific individuals or entities of interest. -Authentic8 Silo: The platform facilitates anonymous and secure digital investigations and intelligence gathering across the surface, deep, and dark web. #advancedOSINT #cyber #intelligence #enterprises

515

19 Comments

Emphasizing Business Continuity in Crypto Firms: Lessons from National Security Priorities Read here:   https://lnkd.in/e76fpj8C In light of the recent National Security Memorandum on Critical Infrastructure Security and Resilience, it's imperative for sectors, including the burgeoning field of cryptocurrency, to reassess their risk management and business continuity strategies. This memorandum underscores the importance of robust asset-level risk management and the necessity of minimizing systemic and cross-sector risks, which are particularly relevant to the digital and interconnected nature of the crypto industry. Crypto firms, recognized as part of the financial services sector, must ensure that their operational resilience is fortified against both cyber threats and other systemic vulnerabilities. The call for establishing minimum security and resilience requirements reflects a move towards more stringent governance, urging crypto businesses to align with national efforts to safeguard critical infrastructure. The memo also highlights the role of intelligence sharing and information exchange, stressing that being informed of emerging threats is crucial for maintaining continuity. As crypto firms navigate risks that could have nationally significant consequences, integrating these practices will not only enhance their resilience but also position them as compliant and secure entities in the eyes of regulators and investors. Adopting these strategic measures, crypto firms can protect their operations and contribute to the broader goal of national economic security, thereby ensuring that they remain robust in the face of both current and emerging threats. If you're interested in delving into our Business Continuity Advisory, Please get in touch with Landis & Co for tailored strategies at emily@emilylandiswalker.com and follow Landis & Co here. You can also schedule a 30 minute call with me here: https://lnkd.in/g7v3U6h9 Andrea Perlak Chris Ekai Rohan Ehsan Jaidev Iyer Oonagh van den Berg (Lady) Lori Souza MBA, BSIT James Burnie FRSA Mark Armour, cABCF Mark Bittinger Andrew Sheves #CryptoSecurity #BusinessContinuity #RiskManagement #NationalSecurity #CriticalInfrastructure

1

🎰 Thrilled to unveil our latest blog post diving deep into the intricate realm of gaming license requirements across the diverse landscape of the United States! 🃏 In our comprehensive comparison, we examine the fingerprint requirements, a crucial milestone in the licensing journey, uncovering the unique approaches adopted by various states. 🌟 Nevada 🌟 New Jersey 🌟 Mississippi 🌟 Pennsylvania 🌟 Illinois 🌟 California 🌟 Washington In summary, while the core prerequisite of fingerprint submissions remains consistent, the nuances in procedures underscore each state's dedication to preserving the integrity of its gaming sector. Familiarizing oneself with these distinctions is paramount for applicants navigating the licensing process. Dive into our blog for an insightful exploration! https://lnkd.in/ee4cUvvT #GamingIndustry #LicensingRequirements #USStates #GamingCompliance #fingerprints🌟🎰🔍

7

1 Comment

Unveiling the Power of OSINT: Harnessing Online Investigation for Modern Challenges Online Investigator👇 https://lnkd.in/g_HmeAUS https://lnkd.in/gHBP2VYR In an era dominated by digital footprints and interconnected data networks, the art of investigation has evolved significantly. Open Source Intelligence (OSINT) has emerged as a pivotal tool in the arsenal of investigators, journalists, and analysts alike. Leveraging publicly available information from various online sources, OSINT enables a deeper understanding of individuals, organizations, and events. Let's explore how OSINT transforms online investigation and its applications across diverse domains. #Understanding_OSINT OSINT encompasses the collection, analysis, and exploitation of publicly available information from sources such as social media, websites, news articles, public records, and more. Unlike traditional investigative methods, which may rely on closed sources or direct inquiries, OSINT capitalizes on the vast expanse of data freely accessible on the internet. #Tools_and_Techniques Effective OSINT requires proficiency in using specialized tools and techniques tailored for different purposes: 1. Social Media Analysis: Platforms like Twitter, Facebook, LinkedIn, and Instagram yield valuable insights through user-generated content, location tags, and network connections. 2. Metadata Examination: Photos and documents often contain hidden metadata, providing details such as timestamps, device information, and geolocation data. 3. Web Scraping: Automated tools can extract data from websites, forums, and databases, enabling comprehensive analysis of trends or information dissemination. 4. Public Records and Databases: Government archives, court records, property listings, and business registries offer structured data critical for verifying identities or tracing financial activities. 5. Advanced Search Techniques: Boolean operators, search engine filters, and domain-specific queries enhance precision in retrieving relevant information. #Applications_in_Investigations OSINT finds extensive application across diverse fields: Law Enforcement: Investigating crimes, identifying suspects, and monitoring threats through social media analysis and digital forensics. Corporate Intelligence: Assessing competitors, evaluating market trends, and mitigating risks associated with business transactions. Journalism: Verifying sources, uncovering stories, and contextualizing events by analyzing publicly available data. Cyber Security: Monitoring digital footprints, identifying vulnerabilities, and preemptively countering cyber threats. #Ethical_Considerations_and_Challenges Despite its utility, OSINT raises ethical considerations: Privacy Concerns: Balancing the right to privacy with the need for transparency and accountability. Data Reliability: Assessing the accuracy and authenticity of information obtained from unverified sources.

1

Exciting News! I am thrilled to share that Spin.AI has partnered with Perception Point, enhancing our Browser Extension Risk Assessment capabilities! This collaboration integrates our innovative risk assessment tool with Perception Point's Advanced Browser Security, offering unprecedented visibility and control over third-party browser extension risks—a significant step forward in securing SaaS environments. The lack of visibility into unsanctioned or malicious SaaS apps and browser extensions poses significant security and compliance risks, emerging as a new cybersecurity threat. When we ask CIOs or CISOs, "How many apps and browser extensions have access to your mission-critical SaaS data?" the typical response is, "I have no clue." I look forward to seeing how this partnership will empower Admins and SecOps teams to make informed decisions and keep SaaS environments safe! 💪 #CyberSecurity #Partnership #Innovation #BrowserSecurity

48

Cybercriminals are exploiting Binance smart contracts as intermediary C2 servers, favoring them due to their resilience against takedowns. Initially used for deploying infostealers, these smart contracts have potential applications for distributing various types of malware. A new technique, EtherHiding, was described over half a year ago, in October 2023. Analysts observed a shift in the networking patterns of an older scheme that deceives users into installing malware disguised as browser updates. Instead of fetching malicious code from Cloudflare Workers, attackers now direct their requests towards smart contracts on Binance. Smart contracts, essentially code executed when specific conditions are met, operate similarly to Cloudflare Workers, which previously allowed fraudsters to use legitimate Cloudflare servers for hosting malicious code. The difference lies in smart contracts being hosted on a blockchain, making them nearly impossible to take down. This resilience likely contributes to cybercriminals’ increased interest, besides their cost-effectiveness. ~First Hackers News To Continue reading this article, click on this link >>> https://lnkd.in/gQdyThWE #cybercriminals #binance #infostealers #malware #cloudflare #attackers #browser #malicious #blockchain #cyberattack #cybersecurity #fhn #firsthackersnews #informationsecurity #latestnews

1

Europol Arrests Cybercrime Leaders In Armenia & Ukraine In Largest Ever Int‘l Crackdown, Disrupting Network Of Bots Responsible For Hundreds Of Millions In Damages & Millions Of Infected Users ➖➖➖ In a historic operation against cybercrime, Europol, Europe's leading crime agency, coordinated the largest-ever crackdown on botnets. Operation Endgame, conducted from May 27 to 29, targeted a network spreading malware & ransomware, leading to the arrest of four suspects in Armenia & Ukraine. This extensive operation involved law enforcement from 13 countries, including the FBI, Germany, the Netherlands, and France. Significant actions were also conducted in the UK & the US, with over 100 servers & 2,000 domains taken down. Droppers, used in these attacks, allowed hackers to install harmful software by bypassing security measures. These droppers are engineered to be particularly evasive, disguising their code to mimic legitimate software, operating undetected on infected computers, and self-deleting after completing their mission. The malware spread primarily through phishing attempts, utilizing deceptive emails & compromised websites. The FBI highlighted the disruption of over 100 servers hosting attacks involving four Windows-based malware variants: IcedID, Smokeloader, Pikabot, and Bumblebee. These strains caused "hundreds of millions of dollars" in damages via ransomware or password stealers, according to FBI Director Christopher Wray. Europol also targeted two other malware variants, used to generate millions by selling access to infected computers. One suspect amassed €69 million (approximately $75 million), largely in cryptocurrency, by renting out websites to other cybercriminals for extortion schemes. As part of Operation Endgame, police conducted 16 raids across four countries. This takedown resulted in over 100 servers & 2,000 domains being disabled across Europe & North America. These domains are now under the stringent surveillance of European law enforcement. Europol declared that the takedown operation is ongoing & has planned further actions to dismantle remaining & future cybercrime networks. Read the full article on ZartonkMedia.com.

7

🔒 The #Encryption Dilemma: WhatsApp's Crossroads in India As a staunch advocate for end-to-end encryption, WhatsApp faces a significant challenge with India's new #IT regulations. These rules require platforms to trace the origin of certain messages, potentially undermining the very encryption that has earned WhatsApp its 'gold standard' status in user privacy. In a country where over 400 million people rely on WhatsApp for communication, the platform is at a crucial juncture: comply and risk user privacy, or uphold encryption and possibly exit the Indian market ? 🛡️ What could be possible solution to this dilemna in WhatsApp vs Ministry of Electronics and Information Technology ? 1)Compliance: Implementing #traceability could compromise WhatsApp's #encryption, potentially exposing user #data. 2) Non-Compliance: Leaving #India would uphold their encryption policies but significantly impact their user base. 3) Negotiation: Finding a middle ground with the Indian government could preserve user privacy while meeting regulatory needs. 💬 Join the Conversation: What should WhatsApp do? Is it more critical to comply with regulations or to protect user privacy? Share your thoughts on how tech companies should navigate such dilemmas. Watch the video for a deeper dive into this pressing issue ! 🎥👇 #Encryption #Privacy #Regulations #WhatsApp #CyberSecurity #TechPolicy #Encryption #Privacy #Regulations #WhatsApp #CyberSecurity #TechPolicy #KanishkGaur #DigitalPrivacy #DataProtection #TechRegulations #EndToEndEncryption #UserSecurity #GlobalTech #WhatsAppIndia #TechEthics #DigitalRights #PrivacyVsCompliance #TechTrends #InnovationInSecurity #CyberThreats #PolicyDebate #DataGovernance #ConsumerTrust #InformationSecurity #SecureCommunication #TechLeadership #PublicPolicy

34

🗳️Voting Vanguards🗳️ ICYMI: CISA published a comprehensive "Guide to Operational Security for Election Officials," aiming to bolster the security of U.S. election infrastructure. 🛡️ The guide provides a detailed overview of operational security (OPSEC) measures within the electoral context, emphasizing the identification and protection of sensitive information that could be compromised by threat actors. This vulnerability can jeopardize the duties of election workers, expose voters' personally identifiable information, and grant unauthorized access to critical systems. 👩‍💼 To combat these risks, the guide suggests integrating OPSEC principles into daily election operations and cultivating a culture of security awareness among election staff. By understanding how adversaries might view sensitive data, election officials can more effectively assess and mitigate potential threats. CISA also supports election workers with training in secure practices, incident response planning, and de-escalation techniques, positioning this guide as a crucial tool to safeguard the integrity and transparency of elections. 👇 Click the link below to view and download a full copy of the guide for yourself and let us know in the comments your thoughts on election security and how we can address the vulnerabilities of tomorrow, today. #CISA #election #electionsecurity #cybersecurity #vote #votersecurity #electioninfrastructure #vulnerabilities #technology #riskmitigation #threatactors https://buff.ly/3xTmkpa

1

Stay Ahead with Real-Time Crime Mapping 🗺 🚨 In today's fast-paced world, staying ahead of crime is crucial for law enforcement agencies. With CRIMEWATCH's Real-Time Crime Mapping feature, police departments can now allocate resources more effectively and respond quickly to incidents, enhancing public safety and community trust. Our Real-Time Crime Mapping system offers dynamic and up-to-the-minute visualization of crime patterns and trends. This powerful tool enables officers to see the latest incident data as it happens, allowing for more informed decision-making and strategic deployment of resources. With this feature, we are empowering law enforcement agencies to be more proactive, making our communities safer and more secure. Real-time data means real-time action, and that makes all the difference. Learn more about how CRIMEWATCH is revolutionizing public safety through innovative technology: https://crimewatch.net/ #PublicSafety #LawEnforcement #CrimePrevention #CommunitySafety #InnovationInPolicing #CRIMEWATCH #RealTimeData

3

I have a very laissez faire view of digital footprints — the kind that I’m sure will scare Glenn Gore and the most staunch arbiters of privacy. As a digital native, I see how my data identity has been used to the best of effects. My TikTok algorithm is a beautiful work of (relatable) art: my Instagram, an unending funnel of things I didn’t know I needed to buy. I’m quite certain I’ll go mad if one day my digital identity gets reset. Sometimes I wonder how it got to this. My logic is that my data is always being mined and used six ways come Sunday. It’s inevitable the more digitally connected we are. Today, with the rising trend of online scams, there’s an even higher need to protect and identify consumers. And how do you identify consumers? Through the exchange of data. It’s all very poetic really — the thing that will protect us is also the very thing that we need to surrender. It’s why I still retain mixed feelings about what Gore has to say about data: “At Affinidi, securing digital identities is a priority as we navigate an increasingly digitised society, ensuring individuals can confidently claim their digital existence.” But can we though? Do we need to? I’m not sure. For me, the digital data surrender is an inevitability, so the Internet might as well deliver me information that I need and may enjoy — like a tinted serum from Rationale or a pair of wide-leg pants from Marakech. Still, I admire Gore’s sense of hope with his North Star at the Temasek-funded firm — “Where your personal data is as intrinsic to you as your physical self and treated with the utmost respect and privacy.” Because in a world where data is as easy to mine, dole, and exchange as promises and opinions, hope is perhaps the very thing that we need. Have a read.

21

2 Comments