Max Bernhard | @mxbernhard.bsky.social

New: We looked into the large-scale phishing campaign that's targeting Signal users and found digital evidence pointing to Russian involvement – and a connection to previous attacks in Ukraine and Moldova.

In January, a phishing message arrived on my Signal account, supposedly from "Signal Support." The unwise attack attempt, gave me a unique opportunity to peek inside this wide-scale phishing campaign targeting journalists and politicians. I was target #13,730 in their database.

Vor einer Weile stießen wir auf #Tiktok auf ein auffälliges Profil: Eine junge Frau wirbt einerseits für ihr Profil auf einer Erotik-Plattform, andererseits für die #AfD. Und: Sie arbeitet mit #KI. correctiv.org/faktencheck/hi… (1/6)

.@derspiegel and others now report that the German government suspects Russia to be behind this espionage campaign, in line with our findings last month spiegel.de/politik/deutsc…

Since 28 February 2026, southern Lebanese villages close to the Blue Line have been systematically destroyed. CIR has analysed satellite imagery of 46 towns and villages to document the scale and pattern of what is happening on the ground. 1/5 [📽️: Detonation of residential homes in Naqoura, southern Lebanon at coordinates 33.1209, 35.1345 and 33.1208, 35.137. Source: X]

Ein Satellitenbild soll brennende Öl-Infrastruktur unter anderem in Saudi-Arabien und Kuwait zeigen. Doch die Aufnahme ist mit Hilfe von Künstlicher Intelligenz gefälscht. correctiv.org/faktencheck/20…

We are observing a targeted campaign delivering DarkSword RCE (GHOSTBLADE) via fake Atlantic Council "discussion invitation" emails. IOCs: siekeltd[.]com escofiringbijou[.]com -- payload & C2

New: We looked at how Russia is remaking occupied territories in Ukraine, pouring hundreds of millions of dollars into roads, railways and ports to try and inexorably tie the region into their own, part of Putin's grand vision for so-called "Novorossiya" reuters.com/investigations…

New: We looked into the large-scale phishing campaign that's targeting Signal users and found digital evidence pointing to Russian involvement – and a connection to previous attacks in Ukraine and Moldova.

The US is making its offer of security guarantees for a peace deal conditional on Kyiv ceding all of Donbas to Russia, Zelenskiy told Reuters. Trump is applying pressure to Ukraine in an effort to bring a quick end to the four-year war, he said. reuters.com/business/aeros…

@wearetlpblack @Billbrowder @alexejhock @correctiv_org Thanks for spotting! Just fixed it

@mxbernhard @Billbrowder @alexejhock @correctiv_org Thanks for the IOCs! This "[.]" below looks like a typo, should be "/" probably ->

@Billbrowder Story with @alexejhock for @correctiv_org correctiv.org/en/fact-checki… You can find a list of the domains and corresponding IPs we found here correctiv.org/wp-content/upl…

@Billbrowder This tool was being advertised on Russian hacker forums for less than 700 USD. We also found evidence that it was used in previous phishing campaigns targeting users in Ukraine and Moldova.

“Made in USA” and Department of Defense codes: new photos of weapon debris allegedly recovered from Feb. 28 school strike in Minab show remnants consistent with a U.S.-made Tomahawk cruise missile. w/ @malachybrowne @johnismay nytimes.com/2026/03/09/wor…

Israeli soldiers shot dead Jad, a Palestinian boy, denied paramedics access to him at gunpoint, & watched Jad bleed out for 45 min.Then kidnapped the body denying a burial. Their accusation: Jad was throwing a stone. Video shows they planted one #Palestine bbc.com/news/articles/…

U.N.-backed investigators say Sudan’s Rapid Support Forces have carried out a campaign in el-Fasher that shows hallmarks of genocide against non-Arab communities. apnews.com/article/rsf-su…

Die EU sperrte 2022 den russischen Staatssender Russia Today, um Propaganda und Desinformation zum Krieg gegen die Ukraine zu unterbinden. Jahre später erreicht der deutsche Ableger, RT DE, über Spiegelseiten noch immer Millionen Aufrufe. Woran liegt das? correctiv.org/faktencheck/hi…