Words published here do not necessarily reflect views of my employer or any other organization I am affiliated with.
Research and analysis about malware, network forensics, and the intersection of crime with anything that electrons flow through.
Ally of the Cyber Threat Alliance (CTA), a threat intelligence sharing network whose members comprise most of the infosec industry's largest companies.
Volunteer docent and astromech droid for ancient technology at
media archaeology lab (npub1vhp…cqle) - I break robust modern computers and act as caregiver to the old, fragile ones.
Executive director of Elect More Hackers. On a mission to recruit and train infosec people to run for office - more at electmorehackers.com
I use this account for posting about professional and infosec stuff. Personal account is
Spike :donor: (npub1rr4…tefp)Research blog:
https://news.sophos.comBackup tooter: @threatresearch.bsky.social
No longer using:
https://twitter.com/threatresearchThreat level: mostly harmless
Pronouns: /ˈprōˌnouns/ (I'm not picky)
LinkedIn:
https://www.linkedin.com/in/andrew-brandt-9603682/Published at
2025-04-01T22:08:45ZEvent JSON
{
"id": "44895184b8f40610c58956cfce63768faaa158f4d8d2f672671b845fd82274e2",
"pubkey": "98b26073ee87a66d1c56267d6a3a068a11f60d5c87abf95ddfa64fd38961eb84",
"created_at": 1743545325,
"kind": 0,
"tags": [
[
"proxy",
"https://infosec.exchange/users/threatresearch",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/threatresearch",
"pink.momostr"
],
[
"-"
]
],
"content": "{\"name\":\"Andrew 🌻 Brandt 🐇\",\"about\":\"Words published here do not necessarily reflect views of my employer or any other organization I am affiliated with.\\n\\nResearch and analysis about malware, network forensics, and the intersection of crime with anything that electrons flow through.\\n\\nAlly of the Cyber Threat Alliance (CTA), a threat intelligence sharing network whose members comprise most of the infosec industry's largest companies.\\n\\nVolunteer docent and astromech droid for ancient technology at nostr:npub1vhpdkuyajuk0l88dla0ek4hnx3aa54nkx475npqmcaethkc7gxjs8tcqle - I break robust modern computers and act as caregiver to the old, fragile ones.\\n\\nExecutive director of Elect More Hackers. On a mission to recruit and train infosec people to run for office - more at electmorehackers.com\\n\\nI use this account for posting about professional and infosec stuff. Personal account is nostr:npub1rr4dzlu9sxvy6vd0knc3atn00se49rjwmthdsx2nyat4zj8ptgyqp9tefp\\n\\nResearch blog: https://news.sophos.com\\nBackup tooter: @threatresearch.bsky.social\\nNo longer using: https://twitter.com/threatresearch\\nThreat level: mostly harmless\\nPronouns: /ˈprōˌnouns/ (I'm not picky)\\nLinkedIn: https://www.linkedin.com/in/andrew-brandt-9603682/\\n\",\"website\":\"https://infosec.exchange/@threatresearch\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/303/079/645/882/511/original/36df28e5470b9055.jpg\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/303/079/645/882/511/original/e85ba7b301ff2200.jpg\",\"nip05\":\"threatresearch_at_infosec.exchange@momostr.pink\"}",
"sig": "dd4e068fb8866300c8e660ce20d5cf2e01fa9f83ea9c80baca12233c335e0ad2ecc972c64acc4ddea0cae1831674ddd1b7e7f370163995dd5c6e511c32ecb298"
}