Second #cybertracker for 2023 A quick reminder: The Cybertracker I produce for the Russia-Ukraine war is based on Intent of the threat actors, not capability. I will start this with an apology, I have had many reach-out to ask when the next cybertracker would be released as I missed March…

A look at recent targeted cyber-attacks against Australia TL:DR Australia was targeted by multiple allegedly religiously motivated hacktivist groups over several days during March 2023. There were close to 300 attacks including DDoS, Defacement, Doxxing and Breach and Leak attacks. Around 200 attacks were successful — meaning they achieved the…

The most infamous Russian Hacktivist group’s operational structure TL:DR: Killnet has grown their umbrella organization considerably since March 2022. Killnet continues to rally new groups to their large scale campaigns, such as the targeting of Germany and NATO in recent months. Killnet and its creator Killmilk continue to have success in…

All groups tracked since February 2022 As we approach the end of the year I felt it would be worth providing an overview of all the groups I have tracked that have been engaged in some capacity in the Russia-Ukraine war in cyberspace. You may have noticed i refuse to…

Anonymous Sudan and Zarya Legion TLDR Anonymous Sudan’s most high-profile DDoS attack was against Microsoft in June 2023, below we review insights that reveal they may have had help from another pro-Russian hacktivist group, Zarya Legion. Zarya Legion may have been linked to Zloader botnet. Microsoft shut-down Zloader botnet in April…

A fortnightly insight into the Australian cyber threat landscape After a busy few weeks we felt that more value might be delivered via this blog as a fortnightly installment, instead of weekly. With that we present the second edition of the Australia Cyber Update. As a reminder this information is…

Weekly coverage of cyber events of interest in Australia Hello and welcome to the start of a weekly newsletter that myself and another Australian threat researcher, arb0ur (https://twitter.com/arb0ur) are putting together. The goal of this weekly newsletter is to provide an overview of cyber events of interest related to Australia…

This is the first cybertracker for 2023. I have held off posting as there was a stagnant period across the holidays, but now with a considerable uptick mostly from pro-Russian groups I felt it was time to release an update. For this addition I am sharing two different versions, hoping…

My apologies, this update was delayed. Here we are, it is November 2022 and this is the 20th cybertracker, not something I expected when I started putting them together. It’s a lot of work but feedback tells me it is valuable to a wide-range of people so It is worth…