Andrew Blaich

1/ We just released our Q4 Adversarial Threat Report focused on our work to investigate and disrupt abusive spyware activity around the world. Our report includes findings on 8 surveillance-for-hire firms from Italy, Spain, and the UAE. We also share detailed recommendations for what a stronger whole-of-society response from governments, private industry should look like to help combat spyware abuses.

Our team has just put out the latest quarterly adversarial threat report. Read all about all the great work our threat intel investigators do across cyber espionage and coordinated inauthentic behavior: about.fb.com/news/2023/05/m…

NEW: @Meta’s Quarterly Adversarial Threat Report, featuring malware research, espionage takedowns, and disruptions of covert influence operations from: China (two networks) Iran USA and Venezuela Georgia Togo and Burkina Faso about.fb.com/news/2023/05/m…

1/ We just shared three reports based on our threat research into influence ops and cyber-espionage activity this past year 🫡 Lookback at 200+ CIB disruptions 🕵️‍♂️ Surveillance-for-Hire investigations 👨‍⚖️ Policy recs to tackle the surveillance industry A 🧵 on our findings

@evacide This is the way.

@killchain 😂🥃

1/ We just shared new security research by our malware discovery team into 400+ malicious iOS and Android apps. They were designed to steal people's Facebook login info 🧵 about.fb.com/news/2022/10/p…

🚨BREAKING🚨 @Meta took down two covert influence ops: Big one from Russia🇷🇺 targeting Europe with spoofed media websites like the Guardian and Spiegel First one from China 🇨🇳 to focus on both sides of domestic US 🇺🇸 politics and Czech-China relations. about.fb.com/news/2022/09/r…

@mobilesecurity_ Jigglypuff. There’s a name I haven’t seen in a while.

A technical analysis of Pegasus for Android – Part 1 #MobileSecurity #AndroidSecurity cybergeeks.tech/a-technical-an…

Security Summer Camp FOMO

@LannaMichalisko @mmurray I’m so sorry for your loss. We are here for you. Mike was an incredible figure. I was happy to call Mike beyond just my boss but a friend and mentor too. I’m heartbroken over this news.

Just as we hoped would happen, the prosecutor declined to file charges in the absurd F12 hacking case. It’s done. You may now resume use of your keyboard and all its keys. joshrenaud.com/pd/josh-renaud…

Was talking to a friend yesterday about why the security industry proliferates charlatans (esp in vendors). Apologies for the length but thought I would post my theory: Security is one of the few markets where information asymmetry rewards vendors who lie to their buyers. 1/n

@evacide @StancombeJared @Meta @facebookapp Thank you for the flag, Eva.

@thegrugq @ngleicher Jigglypuff is still one of my favorites that was found within Chrysaor.

These spyware companies are bad at naming things. Assume that your product name will end up in a report for the public. Do you really want “Predator” found on a journalists phone? Call it “Cat Pics” or something.

1/ With the launch of our threat report into the surveillance-for-hire industry yesterday, adding a few things here that people can do to protect themselves from these types of threats online. twitter.com/ngleicher/stat…

1/ Today we released our research into the Surveillance-for-Hire industry. It includes 7 enforcements against surveillance entities from India, Israel, China, and North Macedonia and recommendations for holding this industry accountable. 🧵: about.fb.com/news/2021/12/t…

In the wake of fascinating technical feats that simultaneously enable dubious and necessary practices, I'm confronted with our collective difficulty with moral ambiguity. The difficult truth is that all of the following statements can be (and likely are) true at once–