OSINT

Russian campaign targeting Romanian WhatsApp numbers

We’ve identified a campaign that advises people to vote for a contest so they can win “prizes”. The only “prize” is that they’ll lose access to their WhatsApp account. Multiple hints indicate that the campaign originates from Russia. This article written in Romanian presents general details about this method. Users receive a WhatsApp message from […]

Russian campaign targeting Romanian WhatsApp numbers Read More »

Attackers target Romania using AI-generated videos

This blog post is a continuation of a previous one. We’ve recently seen a YouTube ad that presented a “unique” opportunity to invest in stocks. The attackers used a legitimate Podcast that was modified using AI. We believe that the account promoting the unlisted video was compromised https[:]//www.youtube[.]com/watch?v=rFk6gcrUuIE: The targeted users are advised to contact

Attackers target Romania using AI-generated videos Read More »

Attackers impersonate Romanian Gas Companies – OSINT Investigation

In this blog post, we’re going to look at a campaign that reveals recently created domains impersonating known Romanian gas companies. It all started with an ad on YouTube that featured a suspicious domain related to the legitimate RoEnergy Trade Fair. The ad was voiced in Romanian using an automatic translator. The website hosted on

Attackers impersonate Romanian Gas Companies – OSINT Investigation Read More »