Saher Naumaan

State sponsored threat actors in North Korea, Iran, and Russia have been experimenting with a highly successful #socialengineering technique called #ClickFix. See our latest threat research blog for full details. ⤵️ brnw.ch/21wS4c6

Also follow me now on Bluesky @saffronsec.bsky.social!

My first blog with Proofpoint is live! And we love a good crossover. State-sponsored actors try their hand at ClickFix - the hottest thing in cybercrime. Meet the North Koreans, Iranians, and Russians who are upping their social engineering game proofpoint.com/us/blog/threat…

Thank you to @HagueTIX @monica_kello @CorianneM for inviting me back to an amazing conference representing our phenomenal European cyber community, and especially for my best speaker award and lovely prizes! I’m basically honorary Dutch now.

Thanks to ⁦@EuropeanCyber⁩ and ⁦@adschina⁩ ⁦@CFR_org⁩ for publishing my take on Lazarus’ cryptocurrency shenanigans and US policy on the Net Politics blog! cfr.org/blog/north-kor…

@Maxwsmeets Now a few years out of date (I wrote it in 2018) but might help for the old ones virusbulletin.com/uploads/pdf/ma…

How many wipers have been reported pre-2022 invasion of Ukraine (all actor groups combined) vs. post invasion (only Russian wipers)? I started a list:

@__winn @EuropeanCyber I learn from the best!! 💜

@saffronsec @EuropeanCyber Queen you dropped this ———-> 👑 Congratulations!! ECCRI is *so* lucky to have you!!

Very excited to announce my upcoming fellowship with @EuropeanCyber and be part of its first cohort!

Despite the media attention and public shaming of commercial hack-for-hire companies, they aren’t going anywhere. Left unregulated, the industry will continue without consequence. From @HowellONeill with quotes from me! technologyreview.com/2021/12/28/104…

@__winn @warstudies Haha it was only a little blog, but I had been angling to write my dissertation on a topic like that - would have been so cool!

@saffronsec @warstudies Omg! Reading this now

Really interesting read and great data/trend analysis from @__winn on the proliferation of surveillance technologies through sus vendors at arms fairs who market their products globally & indiscriminately - a human rights and (inter)national security issue atlanticcouncil.org/in-depth-resea…

I miss DC from time to time, and I’m pretty sure it’s because @chbooksdc is clearly my snarky spirit animal and one of the best things on the interwebs.

Great reporting from @shanvav covering our investigation into Lazarus activity in Indonesia in 2020, one of its last big-time heists before the pandemic, and in the midst of all the group's cryptocurrency targeting - because why not both? thedailybeast.com/cash-starved-n…

So impressed by the reach of #ShareTheMicInCyber and @CamilleEsq and @lzxdc for making this campaign so successful!! Amazing to see so many people and orgs sharing their platform to help combat systemic injustices and build people up who should be more visible and appreciated

Interested in public attribution of cyber operations by the private sector? Do attend our panel next Tuesday, 4pm CET @BigCyberIdeas. @saffronsec, @selenalarson and @juanandres_gs will be on the panel with @mullerlilly and me moderating. sign up here: bigcyberideasfestival.eu/registration/

Riveting story on Hacking Team malware, the Turkish police, Gülenists, and a whole lot of political intrigue. Making sense of convoluted details and motivations in peak investigative journalism style, from none other than @KimZetter zetter.substack.com/p/hacking-team…

Come see me and some stellar industry/media/policy people on panels Sept 21-23 at @BigCyberIdeas! I have lots of opinions, you’ve been warned. bigcyberideasfestival.eu

What a scoop from @nakashimae - the firm behind accessing the iPhone in the 2016 San Bernardino case was Azimuth, which ultimately nullified the FBI's legal case against Apple and kept a precedent of gov-compelled exceptional access from being set in court washingtonpost.com/technology/202…

Great research from my friend and fellow Iran analyst @ChicagoCyber - the question remains, what is the interest behind Charming Kitten's targeting of non-covid or vaccine related medical research? proofpoint.com/us/blog/threat…