The research initiative features six deep-dive case studies alongside six instructional manuals that examine targets such as Scattered Spider, TeamPCP, and Dmitry Khoroshev. Investigators gathered public aliases and email addresses, checking them against approximately 175 email services and 760 username platforms. This retrieved data was cross-referenced with court filings to track timelines, display names, and locations. The project also addresses prominent criminal platforms, notably including AlphaBay, RaidForums, and the REvil ransomware operation.
Key points
Researchers relied exclusively on public records, sanctions notices, and court filings wi…: Researchers relied exclusively on public records, sanctions notices, and court filings without using private or leaked data.
Retrieved profile creation dates and locations were systematically graded against officia…: Retrieved profile creation dates and locations were systematically graded against official timelines to identify impostors.
Key methodologies focused on mapping handle networks and analyzing persona burner emails…: Key methodologies focused on mapping handle networks and analyzing persona burner emails to track digital footprints.
Sources checked by our analysis pipeline: 1
These OSINT case studies start where the investigators finished. Every email address and alias in them was first printed by a court filing, a US Treasury sanctions entry or named investigative reporting, about a person who has been charged, convicted or sanctioned for cybercrime. In September 2026 we ran those identifiers through the OSINTsearch email lookup and username search, then wrote up what came back. This page indexes the series: what each post covers, the technique it teaches, and the lessons that hold across cases.
What these OSINT case studies are
Each post takes identifiers that are already public and asks two questions. How far does this address or alias travel on live platforms today? And what does that teach about investigation method? Six posts follow one case or group, from Scattered Spider to TeamPCP. Six are guides that draw on several cases to teach one technique. Together they work as OSINT investigation examples with every input shown.
Search results are presence and profile data layered on the record. A display name or location is whatever the account holder typed,…
Critical infrastructure vulnerabilities were exposed after nationwide flight operations suffered a prolonged shutdown linked to solitary networking hardware. The incident draws immediate scrutiny to the Federal Aviation Administration's reliance on legacy technologies to support modern transit networks. This mounting operational strain persists even as substantial federal resources continue flowing into preserving outdated communication setups across the country.
A router overload in Arkansas triggered a nationwide grounding of flights, according to a report from The Wall Street Journal. No further details regarding the cause of the overload, the duration of the disruptions, or the specific systems affected were disclosed.
Version 0.2.0 of the free beta platform is now available for Mac, Windows, and Linux as a streamlined replacement for Docker Desktop. By utilizing a single daemon that interfaces directly with the kernel, the software drastically cuts container startup latency and conserves host resources. These efficiency gains provide developers with rapid local testing environments alongside seamless compatibility for standard container tools.