This is an experiment about artificial intelligence for intelligence. Sorry for the length, but I wanted to detail all the steps and results. You will find here not only this description, but also the real results (mainly, skills and final intelligence product). If you are interested only in the product, you can go to the […]
Backdoors in the Dungeon – TURN & MQTT Abused by DragonForce
“There are paths that lead into darkness, and once you set foot upon them, the way back is never certain. Somewhere ahead, the dragon waits.” One of the latest operations uncovered involving DragonForce is the abuse of legitimate TURN (Traversal Using Relays around NAT) servers to encapsulate communications between a malicious implant and the attacker’s […]
GRU: military unit 67606
The GRU has developed a complex PSYOP structure in the Russian Military Districts. Military units 03126 (Leningrad Military District), 03138 (Central Military District), 03128 (Southern Military District) and 03134 (Eastern Military District), all of them subordinated to military unit 55111, perform regional PSYOP on the interest of each Military District. In parallel, the GRU has […]
From China with tenderness
This post does not reflect any kind of opinion. Of course, it is not a real story, but solely the product of its author’s imagination. Any resemblance to reality is purely coincidental. Dear friends, I am Wáng Méiyòng, proudly member of the Chinese Ministry of State Security (MSS). For some years now, I have the […]
Trends in Radio Frequency Spectrum Activity and Its Impact on the Geopolitical Landscape
Although it is true that the terrestrial, maritime, air, space, and cyberspace domains are the usual focus of analysis, the radio frequency spectrum also reflects the current geopolitical tensions. Within it, states systematically employ capabilities related to influence, interference, and command and control. LAB52 has SIGINT acquisition capabilities in the radio frequency spectrum, which have […]
EasterBunny: advanced espionage artifacts attributed to APT29
During 2019, as part of the results of S2 Grupo’s incident management service, LAB52 gained access to a set of artifacts—and a large amount of evidence collected during the incident—which made it possible to conduct an exhaustive investigation linking the highly sophisticated campaign to APT29. Starting in November 2025, the information about these artifacts was […]