Cyber Counterintelligence (CCI): Resecurity releases data on John Erin Binns (IRDev) - DataBreaches.Net
Briefly

"It may be a bit of an understatement to say that Resecurity has been up in the faces of ScatteredLapsus$Hunters and ShinyHunters. Not Only did they recently embarrass the former by deceiving them with a honeypot and providing law enforcement with details about the threat actor attempting to access the synthetic data, but now they have followed up with a new article about Connor Riley Moucka ("Waifu," "Judische," "Ellyel8"), Cameron John Wagenius ("Kiberphant0m"), and John Erin Binns ("IRDev," "IntelSecrets")."
"As part of this newest article, they have released 105 pages containing over 1,000 messages related to Binns. The release does not include the contents of the messages, which span from October 2017 through February 2020. Still, much can be gleaned from the subject lines and other information, including which usernames Binn used for specific accounts, which invoices he received and paid, and who was contacting him on Twitter or Discord."
Resecurity confirmed the authenticity of acquired message metadata and declined to disclose the acquisition source. The release contains 105 pages of headers and metadata for over 1,000 messages related to John Erin Binns spanning October 2017 through February 2020, without message contents. Subject lines and metadata reveal aliases Binns used, accounts he operated, invoices he received and paid, and contacts via Twitter and Discord. Communications show attempts to harass U.S. government personnel, State Department officials, and FBI staff, along with multiple instances of misinformation and deceptive tactics. Binns obtained Turkish citizenship and may not be extradited; Resecurity assesses he likely remains involved in hacking activity against U.S. interests.
Read at DataBreaches.Net
Unable to calculate read time
[
|
]