Blog / Tag

#ofac

Everything tagged ofac.

3articles

3 articles matching #ofac

Guides9 min

Threat Actor Attribution With OSINT: From Alias to Name, With Evidence Grades

A username match is not an attribution. Using aliases and email addresses already printed in sanctions entries, court filings and named reporting, this guide grades each kind of OSINT evidence on a six-rung ladder, from common-word collisions like "mango" (439 exact-match results) to email-anchored accounts and display names that reproduce a published identification. It also covers what never counts and how to verify a "hacker's email" before you pivot.

News9 min

LockBitSupp on the Record: What Khoroshev's Emails and Alias Show Now

LockBitSupp is the persona US, UK and Australian authorities tied to Dmitry Khoroshev in May 2024. We ran the eight email addresses OFAC and KrebsOnSecurity published, and the alias itself, through a live search. One mailbox still reaches a GitHub account, opened in 2011, on the NeroWolfe persona Krebs tied to him. The alias returns 22 exact-handle results, and the YouTube channel that shows his name is very probably a fan's.