GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing ctrlaltintel.com — Ctrl-Alt-Intel Threat Research Adversary Tracking.Publicly Reported._Collaborative research investigating adversary operations, reversing malware, and tracking threat infrastructure. Featured ArticlesView all research →Search all 27 reports 
Threat Research
Russian and Allied Government Systems Compromised in Targeted CampaignsThree exposed operator workspaces reveal confirmed access to Russian and Kyrgyz government systems, a Syrian Customs C2 inventory, stolen data and wider targeting of Russian sta...
·
34 min read
Threat Research
The Gentlemen RaaS: Origins, OPSEC & OSINTTracing The Gentlemen ransomware group's origins, infrastructure, OPSEC failures, organisational structure, and alleged leader.
·
23 min read
Threat Research
INC Ransomware affiliate targets ESXi & NAS Devices in AD environmentExposed operator tooling shows an INC affiliate using likely LLM-generated scripts to enumerate, pivot, and deploy ransomware against network storage
·
22 min read
Threat Research
Burnt by Burgers: Highlighting Void Blizzard’s Russian State LinksOSINT analysis of Denis Obrezko & the Void Blizzard threat group
·
12 min read
Threat Research
FancyBear Exposed: Major OPSEC Blunder Inside Russian Espionage OpsFancyBear's OPSEC failure gives Ctrl-Alt-Intel rare visibility inside Russian espionage operations
·
46 min read
Threat Research
MuddyWater Exposed: Inside an Iranian APT operationMuddyWater espionage campaign exposed
·
28 min read
Threat Research
Diesel Vortex: Exploring connections to Russian LLCsOSINT analysis of entities potentially linked to the 'Global Profit' PHaaS platform
·
16 min read
Threat Research
From Campus to C2: Tracking a Persistent Chinese Operation Against Vietnamese UniversitiesChinese threat actor targets Vietnemse universities in extensive campaign.
·
55 min read
Threat Research
Watch Guard! Qilin affiliate exploits network appliances for initial accessSucessive OPSEC failures expose a Qilin affiliate targeting network appliances for initial access
·
26 min read
Threat Research
Chinese actor compromises thousands of Wordpress sitesOpen-directories exposes mass exploitation of web-applications globally
·
25 min read
Threat Research
South-East Asian Military Entities Targeted via cPanel (CVE-2026-41940)Exposed C2 server highlights opportunistic exploitation of CVE-2026-41940 and novel exploitation chains against South-East Asian military & hosting providers
·
14 min read
Threat Research
Dissecting FudCrypt: A Real-World Malware Crypting Service AnalysisA full technical teardown of FUD Crypt (Cryptor-as-a-Service) and surrounding activity performed by this threat actor
·
53 min read
Threat Research
KongTuke on compromised WordPress sites, DDOS Botnets and Cybercriminal FeudsHow an exposed C2 exposed the back-end of a cybercrime operation, including threat actors beefing. TGI Fridays was one of the many victims.
·
14 min read
Threat Research
Supply-Chain Attacks, TP-Link devices & a pair of socksLinking TP-Link and ASUS exploitation to a March supply-chain attack, and examining possible overlap with TeamPCP.
·
21 min read
Threat Research
Threat Research
Investigating Suspected DPRK-Linked Crypto IntrusionsA suspected DPRK-associated actor compromises crypto orgs, pillaging cloud environments, stealing proprietary exchange software and source code.
·
23 min read
Threat Research
The BuddyBoss Attack: Full Incident AnalysisReconstructing the complete kill-chain of the BuddyBoss Attack
·
23 min read
Threat Research
The BuddyBoss Attack: Claude’s Supply-Chain AttackHow Claude infiltrated the supply-chain, compromising 200+ websites for fraud
·
15 min read
Threat Research
Where is the EDR? Sliver C2 running from firewallsThreat actor deploys Sliver C2 to FortiWeb appliances
·
10 min read
Threat Research
Aeternum Loader: When your C2 lives foreverAn exposed operator panel revealed how Aeternum Loader abuses Polygon smart contracts for C2, allowing us to view all C2 commands ever sent.
·
22 min read
Threat Research
Aeternum Loader: Inside the binaryOur attempt at reversing Aeternum Loader to extract contract addresses and reveal functionality.
·
19 min read
Threat Research
ErrTraffic Under the Hood: A look at the source codeInvestigating vulnerabilities in the ErrTraffic panel
·
17 min read
Threat Research
Attack on *stan: Your malware, my C2Suspected state-affiliated actor targets Afghan and Kazakh entities
·
21 min read
Threat Research
React2Shell (CVE-2025-55182) actively exploited by threat actorsAn analysis of the threats surrounding exploitation of CVE-2025-55182
·
22 min read
Threat Research
Scanning CVE-2025-55182 for the greater goodScanning CVE-2025-55182 for the greater good
·
5 min read
Threat Research
Inside the UPMI Phishing-as-a-Service PlatformAnalysis of a fully-featured AiTM phishing platform with a collective intelligence & licensing system
·
23 min read
Short-form analysis Bulletins |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |