Recorded Future - Inside Threat Intelligence For Cyber Security

When the FBI and Justice Department took down a collective of cybercriminals known as Hive earlier this year, it targeted a group that made a name for itself, in part, by holding hospital and healthcare systems for ransom during the pandemic. What made the group so effective was its own twist on WeWork-style collaboratives… and it led to their demise.

The Department of Justice says last month’s effort to bring down the Genesis Marketplace represents a departure from traditional law enforcement actions. ‘Operation Cookie Monster' wasn’t about nabbing masterminds. It was about making it harder for JV hackers to enter the world of cybercrime.

The Iraqi government has unveiled an app that helps ordinary citizens report “indecent” content online. Since its introduction, the Ballegh app has received some 144,000 reports. And the Iraqi app isn’t the only one: A roster of similar morality apps have popped up across the region, raising new questions about the future of free speech in the Middle East.

What makes a hacker tick? That’s what we wanted to find out when we reached out to Bassterlord, a 27-year-old hacker in Ukraine who joined some of the most infamous hacking crews of our time. Researcher Jon DiMaggio of Analyst1 has released a report about him, and he gave Click Here an exclusive first look. Then, we spoke to Bassterlord ourselves.

We go behind the scenes of the new book by WIRED’s Andy Greenberg, "Tracers in the Dark." It explains how a handful of entrepreneurs and investigators demystified cryptocurrency tracking. Recently, we spoke with Andy and some crypto tracers onstage at the Links 2023 conference in New York City. Plus, North Korea’s ingenious effort to launder its stolen crypto. 

When cryptocurrency burst on the scene in 2008, it was touted as anonymous — a boon to cyber criminals all over the world. Then a few mathematicians and some federal agents proved otherwise, in a way so big it birthed an industry. With a tip of the hat to Andy Greenberg’s new book “Tracers in the Dark,” we talk to them about how they did it.

Six months after demonstrators took to the streets of Iran hoping to end its draconian hijab laws and push for a change in the leadership, the protests have moved online — into a quiet civil disobedience campaign that leadership is finding hard to control.

Drones of all shapes and sizes are part of the war effort in the skies above Ukraine. Some are helping kill the enemy; others spy on formations and guide bombs to their targets. We take you inside a school meant to boost that effort by training women to fly them. Plus, a leading dark web hacking forum meets its demise.

In a recent conversation on WAMU’s nationally syndicated show 1A, we talked about lessons learned one year into the world’s first truly hybrid war. The conversation happened amid a report from Microsoft’s Threat Intelligence Center that found new worrying signs on the Russia-Ukraine cyber front. They believe Sandworm, a cyber military unit of Russia’s intelligence service, has been launching new phishing campaigns, cyber espionage operations, and is stepping up coordination with hacktivists groups.

We follow up last week’s episode on spyware and the Mexican military with a look at Guacamaya, the hacktivist collective that helped provide key documents that showed the army purchased Pegasus spyware used on human rights advocates and local journalists. Guacamaya isn’t just targeting Mexico, though. The group has been hacking into military servers all over Latin America, and its efforts have people asking: ¿Quién es Guacamaya? (Who is Guacamaya?)

A new report has published classified documents and internal memos that make clear the Mexican Army bought Pegasus spyware and systematically deployed it against journalists and activists in Mexico. R3D, a Mexican digital rights group, and University of Toronto’s Citizen Lab, also found evidence of a formerly unknown military intelligence unit whose sole focus appears to be secret surveillance and deployment of spyware. Some of the sensitive material published in the report came from a massive hack into the Ministry of Defense by the hacktivist group Guacamaya last year. Click Here was part of a small group of journalists given early access to their findings.

Russia has deployed the Iranian-built Shahed drone to wreak havoc on Ukraine’s infrastructure. We speak to a man who is a kind of drone whisperer. After years of taking these Shahed drones apart, he says if you listen, they have amazing stories to tell.

The U.S. Supreme Court heard oral arguments this week in a case that will consider a 1995 law that shields social media companies from liability. Gonzalez v. Google could allow people to sue tech companies that use algorithms to sort through their content. Plus, we check in with Alexander Martin, The Record's UK editor, about his takeaways from the Munich Security Conference.

In a special Valentine’s Day episode, we look at the evolution of romance scams. They aren’t just about bilking lonely people out of their life savings anymore – scammers have diversified, and they’re making victims accomplices in a roster of cyber crimes from email scams and check fraud to money laundering.

At a time when an errant spy balloon has raised new questions about President Xi Jinping’s absolute control over all things Chinese, we take a look at how his regime quelled last year’s Covid protests and how an arsenal of digital weapons helped tighten his grip on power. Plus, facial recognition’s latest nemesis: knitwear.

“Shoot The Messenger” from Exile Content Studio and PRX looks at what happened to the murdered Washington Post journalist Jamal Khashoggi. The first weapon used against him was digital - a sophisticated spyware called Pegasus.

This week, Axon, the company that developed the Taser, is hosting a conference in Las Vegas called TaserCon. The event is billed as an opportunity to talk about law enforcement and public safety. Axon is expected to use the occasion to reintroduce a controversial plan: to put the company’s gun-equipped drones in police departments and schools to prevent mass shootings. And, cybercriminals’ new best friend: ChatGPT.

After spending more than a year undercover with the notorious ransomware gang LockBit, one researcher explains how the group revolutionized the business of ransomware.

Genshin Impact put the Chinese video gaming industry on the map. While the game has delighted players, it begs the question: Can China’s Communist Party and a massively popular video game peacefully co-exist?

We take a deep dive into a corner of the cryptocurrency economy that hasn’t (completely) tanked yet: Bitcoin mining. It is part cryptography, part math, and part luck.