Jon DiMaggio @Jon__DiMaggio Twitter profile

Pinned Tweet

Jon DiMaggio

4 months

Last night I talked with @BillWhitakerCBS on @60Minutes about ScatteredSpider, #BlackCat and #LockBit ransomware! Check it out!

Infiltrating ransomware gangs on the dark web

Jon DiMaggio, a former intelligence community analyst and current cybersecurity strategist, has used fake personas to communicate with ransomware gangs on the dark web, finding out who's behind them...

www.cbsnews.com

9

33

124

Last Seen Profiles

@ccg224eth

@eisa

@FaZeLUKKO

@TheSonney

@KennethLet26306

@FDADeviceInfo

@anarkopollas

@GeraldH273

@Anno177

@EladBanales

@khun101010

@mc_orinz

@minshewszn

@syu_nowar

@EmbryEthan

@AranjuezAhora

@Awn__SA

@BerkBrown4

@binNSJeyPWp3DXY

@6h__2

@beyffect

@The_R_Theory

@GayOFPromo

@liushaoqi666

@alhassan094

@kyiv_witch_

@eatldh

@im_wizey

@Bsg_Insidee

@MonMarHockey

@dunseithee

@SavitaAdlakha

@0704masustyling

@DrewLew24

@chactivist

@Srta__Starr

Jon DiMaggio

@Jon__DiMaggio

1 year

#LockBit , You have until 15 August to pay $10 million for my research conducted to infiltrate and identify the secrets you have been hiding. ALL AVAILABLE DATA WILL BE PUBLISHED! (in the #Ransomware Diaries Vol 3 -LockBit's Secrets!) Its time to pay!😛

35

140

846

Jon DiMaggio

@Jon__DiMaggio

2 years

My book "The Art of Cyberwarfare" is finally out! I received a copy Friday, and it was the first time I saw the book in print and could hold it in my own hands. It was surreal when I realized, wow, I actually did it!

29

66

615

Jon DiMaggio

@Jon__DiMaggio

1 year

Time up #LockBit ! JonBIT3.0 FOREVER!!!!!! ALL YOUR DATA IS PUBLISHED: #ransomware #RD3 #RansomwareDiaries

19

183

527

Jon DiMaggio

@Jon__DiMaggio

3 years

After two years of hard work, I am proud to announce that I have been working with @nostarch on my book titled “The Art of Cyberwarfare -An Investigator's Guide to Espionage, Ransomware, and Organized Cybercrime” Pre-order today!

The Art of Cyberwarfare

A detailed guide to nation-state hacking methods that shows how to track, analyze, and attribute advanced attacks.

nostarch.com

10

82

374

Jon DiMaggio

@Jon__DiMaggio

3 months

RANSOMWARE DIARIES 5 is out! Want to know more about Dmitry…I mean #LockBit ?! 😹I have a LOT more intel and now so do you!

22

111

372

Jon DiMaggio

@Jon__DiMaggio

1 year

Time is running out! #LockBit #JonBit

25

52

337

Jon DiMaggio

@Jon__DiMaggio

3 months

#LOCKBIT SEIZED LEAK SITE RESURRECTED!!! And it LockBitSupps days of anonymity are numbered! Countdown to revealing who he is has started. This time, I don’t think we will be disappointed! It’s coming ON 2024-05-07 14:00:00 UTC!!! #FuckRansomware

17

110

321

Jon DiMaggio

@Jon__DiMaggio

2 years

Today is the day! I worked a long time on this report and the research behind it. Check out my research into the human side of the #LockBit #Ransomware gang!

Jon DiMaggio

@Jon__DiMaggio

2 years

Mark your calendars! On Jan 16th, Analyst1 is releasing groundbreaking research! Using deception techniques stolen straight from the adversary’s playbook, we take an inside look into the human side of the #LockBit #ransomware gang itself! COMING SOON! Here is a teaser!

4

20

141

9

99

273

Jon DiMaggio

@Jon__DiMaggio

9 months

A data broker on the newly launched RansomedForums has posted data for sale which they claim has classified NATO data to include US data associated with the FBI, CIA, ARCYBER, and other DoD organizations. I cannot verify the data or its authenticity. But not good if true.

26

46

232

Jon DiMaggio

@Jon__DiMaggio

1 year

Dear #LockBit , I guess we are not that stupid after all…

20

19

191

Jon DiMaggio

@Jon__DiMaggio

3 months

Reference #lockbit , We are going to fix the graph to make it larger so you can see it better in RD5 but until then here it is

3

45

190

Jon DiMaggio

@Jon__DiMaggio

6 months

Do you want to know the truth behind the Sony, Pipeline, and State Farm attacks claimed by RansomedVC? I have the answer from direct engagements with the attackers and now you do too! #RANSOMWARE DIARIES 4 is OUT!👇 @Analyst1

Ransomware Diaries Volume 4: Ransomed and Exposed - The Story of RansomedVC

Jon DiMaggio will explore how RansomedVC has redefined the boundaries of cybercrime by combining propaganda, influence campaigns, and misinformation.

analyst1.com

10

75

184

Jon DiMaggio

@Jon__DiMaggio

2 years

Yesterday, LockBit updated their avatar, showing my face/headshot on Exploit. LockBit, I feel warm & fuzzy with your courting of me! Since I know you are reading this, I love the pic, but now, it’s only fair you share your face pic with me to post as my avatar. We should talk.

12

28

167

Jon DiMaggio

@Jon__DiMaggio

2 years

I won the SANS cyber security book of the year community award last night! Thank you to everyone who helped me along the way! This is one of the biggest accomplishments of my life #SANSDMA @SANSInstitute @TheHackerValley @Davidbombal @BrettCallow @nostarch @symantec @uuallan

13

15

149

Jon DiMaggio

@Jon__DiMaggio

2 years

Mark your calendars! On Jan 16th, Analyst1 is releasing groundbreaking research! Using deception techniques stolen straight from the adversary’s playbook, we take an inside look into the human side of the #LockBit #ransomware gang itself! COMING SOON! Here is a teaser!

4

20

141

Jon DiMaggio

@Jon__DiMaggio

5 months

#Lockbit should have just paid the ransom…. 😈 JONBIT3.0!!!

Jon DiMaggio

@Jon__DiMaggio

1 year

#LockBit , You have until 15 August to pay $10 million for my research conducted to infiltrate and identify the secrets you have been hiding. ALL AVAILABLE DATA WILL BE PUBLISHED! (in the #Ransomware Diaries Vol 3 -LockBit's Secrets!) Its time to pay!😛

35

140

846

7

14

128

Jon DiMaggio

@Jon__DiMaggio

2 years

Link:

Ransomware Diaries: Volume 1 | Analyst1

Discover the power of behavioral profiling in understanding ransomware attackers. Uncover motivations and beliefs of threat actors for effective defense.

analyst1.com

6

36

110

Jon DiMaggio

@Jon__DiMaggio

6 months

Want to know why #LockBit was really banned from RU underground forums? Get your popcorn and hear what really happened and our analysis in the latest @Analyst1 blog from me and @intel_anastasia !

"This Forum is a Bunch of Communists and They Set Me Up", LockBit Spills the Tea Regarding Their...

This report uncovers insights into the extortion activity in 2023, incorporating data observed across Data Leak Sites (DLS) and human-driven techniques used by actors.

analyst1.com

3

39

105

Jon DiMaggio

@Jon__DiMaggio

1 year

You know you did good when the dark web hates you and analysts and researchers celebrate you. Thanks you to all who support my work. I appreciate you! You know who you are 😉! I’m going to stop and enjoy the moment as I worked my ass off to make today happen.

9

1

103

Jon DiMaggio

@Jon__DiMaggio

1 year

Who wants to come to chase bad guys with me?!!! I am expanding my team and looking for a motivated, creative, #analytical #researcher who wants to take on ransomware gangs and do exciting and rewarding work! #job #cybercrime #ransomware

9

37

97

Jon DiMaggio

@Jon__DiMaggio

3 years

Looks like NRA may have paid Grief/EvilCorp ransom They are no longer listed on Grief's leak site.Interesting since sanctions prevent US entities making any form of payment to Evilcorp. Image shows NRA data yesterday and gone today. #evilcorp #grief #nra #ransomware @DanPatterson

10

43

95

Jon DiMaggio

@Jon__DiMaggio

8 months

We did it! Tonight was a great moment in my life and career! Thank you to everyone who helped me get here. I never thought I’d win this award even once in my career let alone back to back two years in a row. It’s been an amazing journey! Thank you to everyone who believed in me!

SANS Institute

@SANSInstitute

8 months

The Article or Book of the Year Award 📚 is awarded to the person who publishes content in book or article form that makes a significant contribution to #CyberSecurity literature. Congratulations to Community Winner @Jon__DiMaggio for his book "The Ransomware Diaries". #SANSDMA

0

6

35

20

8

90

Jon DiMaggio

@Jon__DiMaggio

11 months

Based on Lockbits new rule to only accept ransom payments of 1.5% to 3%, I spoke with a few professional negotiator colleagues this morning. All had similar sentiments but this was general response/feeling to lockbits new rule. This may backfire for #Lockbit . @AL3xL7

5

23

85

Jon DiMaggio

@Jon__DiMaggio

1 year

@BrettCallow Brett, my reputation means everything. If they pay, and I still publish, then no future ransomware gangs would give into my extortion demands. 🤗

3

1

84

Jon DiMaggio

@Jon__DiMaggio

6 months

23 hours left until the #Ransomware Diaries 4 goes live! Since this is another 60+ page report we are also releasing an audio version where I read the report which will be on SoundCloud tomorrow too. So if you want me to read you a bed time story, I have a good one for you!

1

17

79

Jon DiMaggio

@Jon__DiMaggio

2 years

It’s here! Now I just need @uuallan to sign it for me!

5

79

Jon DiMaggio

@Jon__DiMaggio

1 year

3

10

64

Jon DiMaggio

@Jon__DiMaggio

4 months

This is the worst reporting I have ever seen. To set the record straight, this is NOT a #LockBit rebrand but instead the work of a clueless and negligent reporter. They are either incompetent or looking for clickbait but it’s completely false information.

LockBit bungles attempt to rebrand as DarkVault | Cybernews

The LockBit cybercriminal outfit appears to be planning a ransomware rebrand as the DarkVault, discovered after LockBit seemingly bungled the new website’s design.

cybernews.com

12

8

65

Jon DiMaggio

@Jon__DiMaggio

13 days

🚨I'm speaking at #DEFCON ! Been on my career bucket list, and this year I finally made the cut! Join me on August 9th, where I will discuss new, previously unseen content and share stories about my engagements and 2 year relationship with the #LockBit ransomware group. Hope to

5

15

71

Jon DiMaggio

@Jon__DiMaggio

3 months

Hello ransomware junkies! I wanted to discuss the recent #Lockbit events in my own creative way. My aim is to offer a unique but fun perspective compared to the norm. Check out “Unfinished Business” from me and @analyst1 !

Unfinished Business | Analyst1

This report uncovers insights into the extortion activity in 2023, incorporating data observed across Data Leak Sites (DLS) and human-driven techniques used by actors.

analyst1.com

3

16

66

Jon DiMaggio

@Jon__DiMaggio

1 year

Thank you @Analyst1 for the awesome Analyst1 themed kicks!

4

9

62

Jon DiMaggio

@Jon__DiMaggio

11 months

Last chance to register for our webinar on The Ransomware Diaries Vol 3 covering my latest research on the #LockBit #ransomware gang! Our webinar goes live tomorrow and I hope to see you there. You can register here:

2

10

60

Jon DiMaggio

@Jon__DiMaggio

11 months

Thank you @BSides_NoVA and for having me as your keynote speaker! This was my first keynote and something that I can finally cross off the bucket list! I had a great time given my talk and sharing my research!

4

7

62

Jon DiMaggio

@Jon__DiMaggio

1 year

The Ransomware Diaries Volume 2 IS OUT! I set out to profile the the type of ransomware hacker you may chase across your organization’s networks, or worse, negotiate an extortion payment with after a #ransomware attack. This is Bassterlords story!

Ransomware Diaries V. 2: A Ransomware Hacker Origin Story

Learn about a man who entered organized crime at a young age & was groomed & mentored by a well-connected figure within the ransomware community.

analyst1.com

6

19

56

Jon DiMaggio

@Jon__DiMaggio

2 years

I noticed the “lockbit” account on Exploit, which has been dormant since Nov 2020, is active again as of Jan 1st, 2023 discussing both Tor infrastructure of the forum and the LockBit Black builder. I can’t be sure it’s authentic but is an interesting development if so.

0

19

58

Jon DiMaggio

@Jon__DiMaggio

1 year

I’m looking forward to my first keynote!!!

BSidesNoVA

@BSides_NoVA

1 year

Excited to officially announce our keynote speaker for #BSidesNoVA2023 - the GREAT @Jon__DiMaggio ! Get your tickets to the event here:

0

6

25

1

9

58

Jon DiMaggio

@Jon__DiMaggio

1 year

Dear #LockBit please start conducting your development and infra testing on an offline server, not your public leak site. It confuses people. This is the second time I have seen LockBit test on their public leak site this year. Get it together over there.

5

10

57

Jon DiMaggio

@Jon__DiMaggio

10 months

I NEED YOUR VOTE! The Ransomware Diaries is a finalist for Article/Book of the Year in the SANS Difference Makers Awards. I risked my ass engaging w/LockBit and adversaries while conducting research, so if you found it informative, please vote!!! #SANSDMA

15

12

55

Jon DiMaggio

@Jon__DiMaggio

5 months

Even the administrator for the dark web forum RAMP who is responsible for making judgment in the scam claim for #blackcat #alphv has accepted the group is conducting an exit scam and ruled against them. If history tells us anything, they will be back under a new brand/name soon.

0

14

56

Jon DiMaggio

@Jon__DiMaggio

1 year

If you liked "Ransomware Diaries Volume 1" mark your calendars. Volume 2: A Hacker's Origin Story is coming April 25th. You'll meet someone who joined some of the world's most notorious ransomware gangs and then tried to mentor a new generation to do the same.

0

9

52

Jon DiMaggio

@Jon__DiMaggio

5 months

And now to relax and enjoy the win…

3

1

53

Jon DiMaggio

@Jon__DiMaggio

8 months

This bugs me. With the ransom arrests reported today LE hit 30 homes in Ukraine “resulting in the arrests of the 5 Russian speakers.” Why imply they are Russian. They live in Ukraine. How do you know they are RU? Dont imply anything if you don’t know.

Ransomware hackers 'wreaking havoc' arrested in Ukraine - BBC News

Cyber police carry out raids to dismantle gang responsible for hacking hundreds of organisations.

www-bbc-com.cdn.ampproject.org

8

10

50

Jon DiMaggio

@Jon__DiMaggio

3 months

It was great to finally meet the legendary @mikko ! Thank you for the signed book and I can’t wait to read it!

5

4

49

Jon DiMaggio

@Jon__DiMaggio

3 months

I have a surprise for you guys! Ransomware Diaries Volume 5 should be out this week! I don’t want to spoil it, but it involves Mr. Grumpy pants! It’s going to be different than the norm, but I don’t want to spoil it! Coming soon!

3

6

51

Jon DiMaggio

@Jon__DiMaggio

10 months

Ever wonder how hard it is to be a #ransomware negotiator? #LockBit ’s leak site shows what they are up against. LockBit wants $80 mil and CDWG is willing to pay $1.1 mil. That is a big difference. I can’t imagine trying to come to an agreement when you are this far off.

3

9

49

Jon DiMaggio

@Jon__DiMaggio

1 year

2

0

46

Jon DiMaggio

@Jon__DiMaggio

2 years

When officials entered the home of the #lockbit associated criminal, they restrained him before he could lock his computer! That should yield a wealth of intel!

3

11

45

Jon DiMaggio

@Jon__DiMaggio

1 year

Good Job @FBI

1

12

44

Jon DiMaggio

@Jon__DiMaggio

2 years

At least #lockbit used a flattering pic, lol. I admit, I about spit out my coffee when I saw this today, lol. Well played.

0

2

41

Jon DiMaggio

@Jon__DiMaggio

1 year

Suspected LockBit ransomware affiliate arrested, charged in US

Russian national Ruslan Magomedovich Astamirov was arrested in Arizona and charged by the U.S. Justice Department for allegedly deploying LockBit ransomware on the networks of victims in the United...

www.bleepingcomputer.com

1

4

40

Jon DiMaggio

@Jon__DiMaggio

1 year

Shocking, LockBit disagrees with @CISAgov . “why are we attacking critical infrastructure? no one died from our attacks,no pipelines stopped, no one starved without meat”. CISA, make sure to get input from LB next time to ensure you meet his standards defining critical infra. LOL

3

12

40

Jon DiMaggio

@Jon__DiMaggio

1 year

This has to be one of the most interesting outside the box approach to researching #ransomware criminals I have seen. Well done! -Tracing Ransomware Threat Actors Through Stylometric Analysis and Chat Log Examination | by YUCA | May, 2023 | Medium

Tracing Ransomware Threat Actors Through Stylometric Analysis and Chat Log Examination

The Conceptualization

medium.com

3

8

39

Jon DiMaggio

@Jon__DiMaggio

2 years

@ddd1ms This is freaking nuts. And people say there is no connection to the RU gov... LMAO, there is now. Or soon will be. Good way to avoid arrest as well. Smart business decision in the long run. There wont be videos of FSB kicking in their doors anytime soon.

2

38

Jon DiMaggio

@Jon__DiMaggio

1 year

First #Lockbit uses my avatar and now Bassterlord uses my pic and copies my profile for his Twitter account. Lol, Bassterlord, love the new look. Such a Handsome fellow! Apparently I’m a ransomware bad guy now!!!

4

8

39

Jon DiMaggio

@Jon__DiMaggio

2 years

I spent my morning talking to @davidbombal on his you tube channel. David is a great resource for both new and seasoned #cybersecurity enthusiast’s! David has a great interview style that just gets people talking and sharing knowledge. Check it out!

David Bombal

Want to learn about IT? Want to get ahead in your career? Well, this is the right place! On this channel, I discuss Linux, Python, Ethical Hacking, Networking, CCNA, Virtualization and other IT...

www.youtube.com

2

5

37

Jon DiMaggio

@Jon__DiMaggio

9 months

#RansomedVC pretends to go bye bye, and this operation does seem to have ended. I cant wait to see who they come back as in two months…. Funny no one heard about these #ransomware arrests….🍿

2

12

36

Jon DiMaggio

@Jon__DiMaggio

11 months

@elonmusk @X @Support Your certificate for Twitter/X site on the dark web (.onion) expired back in March. A threat actor pointed this out to me so you may want to get this resolved or take your site down if you don’t intend to maintain it further. At this point, it’s a risk.

1

5

36

Jon DiMaggio

@Jon__DiMaggio

5 months

#LockBit vs Dragons! Wait that’s not right… Lol, @intel_anastasia and I wrote a blog about last weeks craziness with LockBitSupp who I’m mad at because I had to work through the majority of my vacation! As revenge… we wrote a blog. TAKE THAT! 😂

LockBit Takedown & Operation Cronos: A Long-Awaited PsyOps Against Ransomware | Analyst1

This report uncovers insights into the extortion activity in 2023, incorporating data observed across Data Leak Sites (DLS) and human-driven techniques used by actors.

analyst1.com

1

9

36

Jon DiMaggio

@Jon__DiMaggio

2 years

Want to read the Ransomware Diaries but don’t have the time to read such a lengthy report? No problem, @UseAnalyst1 made an audio version just for you! I’m not a professional reader but my kids enjoy it when I read them stories so hopefully you will too!

2

5

36

Jon DiMaggio

@Jon__DiMaggio

5 months

If you want an inside look into what it’s like to spend your days talking to cyber criminals, developing relationships, creating fake persons and infiltrating ransomware groups, like #LockBit , take a listen to the podcast! Thanks for the great interview and podcast @guardianaudio

Guardian Podcasts

@guardianaudio

5 months

How an infamous ransomware gang found itself hacked – podcast

0

4

7

1

11

35

Jon DiMaggio

@Jon__DiMaggio

1 year

I will be signing books at ⁦ @defcon ⁩ at the ⁦ @nostarch ⁩ book store section on Sat @ 3pm. I will also be doing a signing at #Blackhat on the 8th at 2pm by the breakers Registration area. Hope to see you all there!

2

11

35

Jon DiMaggio

@Jon__DiMaggio

1 year

Just to put this to rest, I have been trying to validate that the “Lockbit” account on Exploit is operated by the same human #Lockbit operators behind LockBitSupp account on XSS. I have believed it was but never had solid evidence until today. Note the Tox ID:

3

8

32

Jon DiMaggio

@Jon__DiMaggio

1 year

It’s an honor to be in the same book with ⁦ @juanandres_gs ⁩, ⁦ @nohackme ⁩ and ⁦ @meansec ⁩ amongst some of the greatest researchers over the past decade! Go #bluenomicon ⁦ @splunk ⁩ ⁦ @UseAnalyst1 ⁩

0

2

32

Jon DiMaggio

@Jon__DiMaggio

1 year

@_ChezDaniela Well, I would have to give them a wallet, which I am not doing since this is not a real extortion attempt, lol. I do have LB secrets I will expose that are pretty huge, imo, and I will share some inside drama. More importantly, I am going to tell a good story! But no doxing!

1

31

Jon DiMaggio

@Jon__DiMaggio

1 year

Hello world! …and Vegas!

0

2

30

Jon DiMaggio

@Jon__DiMaggio

1 year

Surprised to see #Lockbit using Conti #ransomware ? Dont be as we may see more. According to Lockbit,"It is important for me to expand the arsenal in my wonderful panel. Each advert decides for himself what to work with or combines several lockers in an attack on one company”1/3

3

13

31

Jon DiMaggio

@Jon__DiMaggio

8 months

JonBit3.0 strikes again, lol! Great work by @CyberNews detailing #Lockbit #Ransomware . I hate watching myself in things but they really did a good job with this. Looking forward to the next one!

LockBit, World’s #1 Cyber Criminals (An Inside Look)

For years the cybercrime scene was dominated by Lockbit: the largest and the scariest ransomware gang in the world. It attacked major companies and governmen...

www.youtube.com

1

4

31

Jon DiMaggio

@Jon__DiMaggio

6 months

It's that time again! Ransomware Diaries Volume 4 is coming! We are publishing the morning of January 30th! Mark your calendar!!!

2

5

29

Jon DiMaggio

@Jon__DiMaggio

4 months

I am honored to be included and thanks for letting me contribute to @sansforensics FOR589 cyber intelligence course! Registration is open! This is a unique course teaching skills with real world context to cybercrime investigations!

Sean O'Connor (He/Him)

@vHUMINT

4 months

A special shoutout to all the SMEs who helped us with specific parts of the @sansforensics FOR589 Cybercrime Intelligence course. Especially @SttyK @Jon__DiMaggio @ASG_Sc0rpi0n @DE7AULTsec and @afx_IDE . Thank you so much for all of your help 👏 FOR589:

3

14

47

1

3

26

Jon DiMaggio

@Jon__DiMaggio

3 months

Since I am getting bombarded with requests for the link, here you go: lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead[.]onion/

2

4

28

Jon DiMaggio

@Jon__DiMaggio

3 years

Today at @UseAnalyst1 we released a use-case accessing the cradle to grave lifecycle of the #ransomware group, #REvil . 70% of our content is from OSINT, but the other 30% is from underground forums and chats with REvil and their affiliates. Enjoy!

1

11

28

Jon DiMaggio

@Jon__DiMaggio

10 months

#LockBit has published 2 posts with CDWG data to its leak site. The data leaked looks pretty bad from both a security and business pov. Data in the archives suggest it is associated with employee badges, audits, commission payout data, and other account-related information.

3

11

25

Jon DiMaggio

@Jon__DiMaggio

10 months

Great work @intel_anastasia ! Check out @analyst1 's newest cybercrime researcher's report on #Toncoin 's use in conjunction with social media to support and fund #killnet

Analyst1

@Analyst1

10 months

Meet @intel_anastasia , our Ransomware #Cybercrime Researcher. In her latest research, she delves into Toncoin's role in cybercrime and its use by pro-Russia hacktivists. Read more: #Cybersecurity #Cryptocurrency #CybersecurityInsights #Ransomware

1

12

25

0

9

26

Jon DiMaggio

@Jon__DiMaggio

5 months

Great catch @ValeryMarchive & @ido_cohen2 and a good example of affiliate crossover. On several occasions I have been called about incidents where two payloads were identified in environment. In each one the initial thought was that two groups were targeting one victim. In

Valéry Rieß-Marchive | @valerymarchive.bsky.social

@ValeryMarchive

5 months

There are also 15 cases that appeared first at LockBit, and later under a different brand: Play (2 cases), BianLian (3), 8base (2), and Alphv (2) but also Hunters and, in Jan. 2024 ThreeAM. Here, I'm excluding Werewolves, generally accepted as an affiliate group of LB's.

1

0

9

1

5

27

Jon DiMaggio

@Jon__DiMaggio

2 months

Hanging with my homies! @ddd1ms @aejleslie and @intel_anastasia , need you guys for the next one! But not you @BrettCallow 😂

2

25

Jon DiMaggio

@Jon__DiMaggio

2 years

@davidbombal it must be a good week because the “don’t be a dumb***” / cyberwar episode on your show dropped and as of today my book is a #1 best seller on Amazon! Plus I’m sitting on beach enjoying my coffee as I type this. Hard work pays off!

David Bombal

@davidbombal

2 years

You are in a Cyber War. Jon warns: Don't be a dumb**** and try to ignore it YouTube video: #cyber #cyberwar #hack #hacking #Ransomware #cybercrime #phishing #cyberattacks #malware #CyberSecurity @nostarch @Jon__DiMaggio

5

21

84

2

5

26

Jon DiMaggio

@Jon__DiMaggio

2 months

🚨 [New Blog] The Psychology Behind “Trolling” Ransomware Gangs – And Why Law Enforcement Agencies Should Keep Doing It 🔨There are many topics we never tire of discussing, one of which is the recent LockBit takedown. In today’s blog, @Analyst1 features the work of Tim Pappa, a

2

7

25

Jon DiMaggio

@Jon__DiMaggio

2 years

Thanks @NPRDina @TheRecord_Media for the great coverage of my research. I wrote this with analysts in mind so it’s lengthy. Dina and co wrote a really interesting story with additional details and a great (much shorter) summary of the research:

Ransomware Diaries: Undercover with the Leader of LockBit

A new report from a researcher who infiltrated the Lockbit ransomware group provides an insider\'s view of the most dangerous ransomware gang in the world. Click Here and The Record were given an...

therecord.media

1

6

24

Jon DiMaggio

@Jon__DiMaggio

2 years

The warrant issued to seize the HIVE servers in the CA based data center included “Fruit”? LMAO, I am sure I am missing something here… Damnit Hive, I told you to not to steal those bananas! That is where they crossed the line.

2

3

24

Jon DiMaggio

@Jon__DiMaggio

11 months

I have said it before and I will say it again: Dina and the @ClickHereShow make the best podcast content in our field. I love their stories. They don’t talk about normal cyber content. Instead they dig in and do their own investigations to tell interesting stories. Great episode!

Click Here

@ClickHereShow

1 year

NEW EPISODE: Ilya Sachkov co-founded the cybersecurity company Group-IB to make the world safe from Russian-speaking cybercriminals. Then he asked Russian authorities to help round them up, and things went spectacularly wrong. #tech #cyber LISTEN 🎧

4

10

17

1

8

24

Jon DiMaggio

@Jon__DiMaggio

1 year

Yesterday @BrettCallow tweeted a post from a forum where a criminal is selling what they claim is data from the #USMS (US Marshals Service). Allegedly it includes CONFIDENTIAL and SECRET documents drafted between 2021 - last month. So I contacted the seller to learn more. 1/3

4

7

24

Jon DiMaggio

@Jon__DiMaggio

8 months

And… #RansomedVC is back, but under a new name, #Raznatovic according to a message posted on ransomed[.]vc today along with their previous tor address which I assume will be updated soon.

2

5

21

Jon DiMaggio

@Jon__DiMaggio

8 months

Who needs a turkey when you can smoke ribs! Happy thanksgiving!

1

0

22

Jon DiMaggio

@Jon__DiMaggio

4 months

Here we go again… #RansomHub has started its op with a very high profile target, Change Health Care -being extorted for the 2nd time in a month. This is why you cant trust that your data will be deleted when you pay a ransom. Even when its $22 million extortion payment.

WIRED

@WIRED

4 months

NEW: Change Healthcare ransomware hackers already received a $22 million payment. Now a second group is demanding money, and has sent WIRED samples of what they claim is the company's stolen data.

1

9

15

1

9

21

Jon DiMaggio

@Jon__DiMaggio

1 year

If your interested, you can see yesterdays webinar regarding the Ransomware Diaries Vol 2, which is now posted on our website: On-Demand Webinar: The Lord Has Fallen

On-Demand Webinar: The Lord Has Fallen | Analyst1

Join the author of Ransomware Diaries: Volume 2- A Ransomware Hacker Origin Story, Jon DiMaggio, for a dive into the ramifications Bassterlord has faced since his story came out.

analyst1.com

1

10

20

Jon DiMaggio

@Jon__DiMaggio

2 months

Excited to talk about what goes into the research behind the Ransomware Diaries, on May 31st at the @SANSInstitute #RansomwareSummit I’m discussing the methods and tactics that I use in my research and other fun stories 😂. You can sign up below!

SANS DFIR

@sansforensics

2 months

We're excited to announce that @Jon__DiMaggio will keynote the upcoming #RansomwareSummit ! He'll share how to correlate and discover unique insights by using the information gathered from criminal interactions. #Ransomware Register for Free Live Online:

0

5

12

0

3

19

Jon DiMaggio

@Jon__DiMaggio

6 months

Let’s talk Ransomware Diaries 4! Join me next Tuesday for our webinar where we will discuss my latest research into RansomedVC!

Analyst1

@Analyst1

6 months

📢 Set your alarms and mark your calendars because Tuesday is the day! 🗓️ Join us for an exclusive live webinar with @Jon__DiMaggio as we explore the world of RansomedVC and its intricate web of cyber intrigue. 🎙️🕵️‍♂️ You don't want to miss this! 🔐🎧

0

1

5

1

2

20

Jon DiMaggio

@Jon__DiMaggio

2 years

It’s coming.

Azim

@AShukuhi

2 years

7

83

707

0

1

20

Jon DiMaggio

@Jon__DiMaggio

5 months

Can everyone, especially the news media, PLEASE STOP REPORTING UNVERIFIED BREACHES. Over the past few days there have been lots of articles about the #Mogilevich group hacking Epic games which the company denies.

3

19

Jon DiMaggio

@Jon__DiMaggio

1 year

If you are at #BlackHat please come visit and say hello on Aug 8th at 2pm PST at the Informa Book store booth near the Breakers Registration area. I will be signing books and hope see everyone there. No book, no problem, we will have some on hand for sale but regardless, saying

Analyst1

@Analyst1

1 year

Meet renowned ransomware investigator, Jon DiMaggio, at BlackHat. Get your copy of his latest book signed on August 8th at 2 pm and gain insights into the world of cybersecurity. Don't miss out. #Cybersecurity #Ransomware #Cybercrime #Author #booksigning

1

4

8

1

6

19

Jon DiMaggio

@Jon__DiMaggio

1 year

So I’m my kids doctors office and I see this. And people wonder why medical orgs and healthcare are considered easy targets. Hard to believe I’m seeing this in 2023. We will be finding a new doc. 😑

5

4

18

Jon DiMaggio

@Jon__DiMaggio

1 year

Wait.. I’m on tv?! Lol, I missed this last night! But in all seriousness I had a great time working with some of the best researchers in the businesses. Many of them participated but never made the screen but helped tell the story. I also really appreciated the hard work by ABC!

Jeremy Kirk (@[email protected])

@Jeremy_Kirk

1 year

@realhackhistory @uuallan @Jess_Longbottom @Jon__DiMaggio @KMansted The arrests get mentioned in the full program, which aired tonight:

1

8

2

19

Jon DiMaggio

@Jon__DiMaggio

22 days

🤯I love hearing about the real lives and people who conduct cybercrime operations. @intel_Anastasia wrote a fascinating report detailing the life and personality of a criminal threat actor associated with SmokeLoader malware campaign. Fascinating criminal, for sure. Check it out

1

3

18

Jon DiMaggio

@Jon__DiMaggio

2 years

As of April 26th, my book, “The Art of Cyberwarfare” is available online and in bookstores across the US! If you’re interested in chasing bad guys like nation state and organized cyber criminals, pick up a copy!

Jon DiMaggio

@Jon__DiMaggio

3 years

After two years of hard work, I am proud to announce that I have been working with @nostarch on my book titled “The Art of Cyberwarfare -An Investigator's Guide to Espionage, Ransomware, and Organized Cybercrime” Pre-order today!

10

82

374

0

8

18

Jon DiMaggio

@Jon__DiMaggio

1 year

Defcon was great this year! I really enjoyed seeing old friends and making new ones. I can’t wait for next year! #Defcon #Bluenomicon ⁦ @meansec ⁩ ⁦ @nohackme ⁩ ⁦ @splunk ⁩ ⁦ @Analyst1 ⁩

0

1

17

Jon DiMaggio

@Jon__DiMaggio

1 year

It was great hanging out with the great @uuallan today! We definitely need to do it more often!

Allan “Ransomware Sommelier🍷” Liska

@uuallan

1 year

Another #RSAC win! Lunch with @Jon__DiMaggio ! You all should really read his ransomware diaries post!

0

1

17

3

0

17

Jon DiMaggio

@Jon__DiMaggio

4 months

My fav podcast is up for an award and could use your vote! If you have a sec, give a vote for the Click-Here podcast!

2

7

17

Jon DiMaggio

@Jon__DiMaggio

6 months

This was a real fun conversation and we covered a lot of good books that @uuallan and I read and shared some stories along the way! If you have not listened to @KaliFencl and the Breaking Badness podcast you should definitely add to your podcast list!

DomainTools

@DomainTools

6 months

This week on the Breaking Badness podcast, @uuallan and @Jon__DiMaggio join @kalifencl to discuss Jon’s book - The Art of Cyberwarfare - along with their other top book picks in the #cybersecurity industry! 📚 🎧 Listen here:

0

1

6

1

4

17

Jon DiMaggio

@Jon__DiMaggio

2 years

I love that the gov disrupted #Hive op. But I felt the individuals making the announcement struggled to convey info or even pronounce half the tech terms stated. It definitely highlighted the disconnect with senior members of gov leadership and the rest of the security industry.

1

5

16