DEV-0537 targeting organizations for data exfiltration and destruction

Re:DEV-0537 targeting organizations for data exfiltration an... by notuger on Wednesday March 23, 2022 @08:21AM (#30777688)

the telegram channel name is related to a big hack activity in brazil last year, they always share brazilian news..

[ Parent | on HN ]

Re:DEV-0537 targeting organizations for data exfiltration an... by chockchocschoir on Wednesday March 23, 2022 @08:23AM (#30777706)

It's also a relatively easy, cheap and common opsec strategy to mask your geographic location by constantly sharing news from a place you're not actually located at. Same as saying "good morning" every day to your "team" when actually it's night at your location.

[ Parent | on HN ]

Re:DEV-0537 targeting organizations for data exfiltration an... by michaelcampbell on Wednesday March 23, 2022 @11:51AM (#30779748)

I read years ago that the US "SEAL Team 6" was named to throw off adversaries (primarily Russia at the time; maybe again now?) that the US actually HAD at least 6 SEAL teams.

[ Parent | on HN ]

Re:DEV-0537 targeting organizations for data exfiltration an... by toyg on Wednesday March 23, 2022 @08:41AM (#30777834)

TFA said they started by targeting South American organisations, it tallies that they could be Brazilian.

[ Parent | on HN ]

Re:DEV-0537 targeting organizations for data exfiltration an... by bgroat on Wednesday March 23, 2022 @08:55AM (#30777953)

This is reminding me of L in Death Note describing how he tracked Kira down to a particular Japanese neighborhood

[ Parent | on HN ]