perfect description of a recent case I worked on.
While technically pretty easy to analyze, it felt really weird. It was more like a attack-tree than a attackpath and often it was really creative in some parts but totally boring and dumb in different situations.
Interesting case, but far away from the skill of any average ransomware crew.
And it was soooooo noisy.
G0rb :possum:
npub1p5…ky8t3
2026-10-13 18:23:08 UTC
in reply to nevent1q…hygj
Author Public Key
npub1p5jzgxh7d267v34epvwgvvr60wdzcztu42hu993u3sgu2www2n5szky8t3Seen on
wss://relay.momostr.pinkPublished at
2026-10-13 18:23:08 UTCEvent JSON
{
"id": "b24fa944864d321e404fe45f058487351397e33496c2f69ae0ecc6f117971511",
"pubkey": "0d24241afe6ab5e646b90b1c86307a7b9a2c097caaafc2963c8c11c539ce54e9",
"created_at": 1791915788,
"kind": 1,
"tags": [
[
"e",
"46089b355b6b56d3e2b4655e0e6b1b99d6c8376d633bce81b0b6e90ac25464af",
"",
"root",
"41ad2de6af3ae190eed299336829bf9144ad50c10cc44e8b817af8c9e4b08503"
],
[
"proxy",
"https://infosec.exchange/@g0rb/117434993104713710",
"web"
],
[
"p",
"41ad2de6af3ae190eed299336829bf9144ad50c10cc44e8b817af8c9e4b08503"
],
[
"proxy",
"https://infosec.exchange/users/g0rb/statuses/117434993104713710",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/g0rb/statuses/117434993104713710",
"pink.momostr"
],
[
"-"
]
],
"content": "perfect description of a recent case I worked on. \n\nWhile technically pretty easy to analyze, it felt really weird. It was more like a attack-tree than a attackpath and often it was really creative in some parts but totally boring and dumb in different situations. \n\nInteresting case, but far away from the skill of any average ransomware crew. \n\nAnd it was soooooo noisy.",
"sig": "ac3aef1e87e2c4eb9bdc6b6b79eb591ec5364ba9d37d512177df52efed19e288895e814f5b95b7c7f67c0df6df9093377df0cae9918650b824a81c3fc868f578"
}