nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh Hmm... I suppose the commoditization and separation of initial access and post-initial access crews, that's probably true for most criminal activity. But I don't know if I'd say that...

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh knowing the motivation of your threat group is important. Like knowing that you got creds stolen from a group that is going to sell them versus use them is important. Also knowing if so...

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh that guy doesn't deserve to be a meme https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/976/164/858/609/486/original/492a3e41b207764e.png

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh agreed. I think this every time I catch myself down a rabbit hole of "oh they reused this github username on another site, wonder what other threads I can pull at"