Works at a German agency on cyber-espionage.
Author of 'Attribution of Advanced Persistent Threats' (Springer, 2020).
Tweets are personal opinions.
Nov 20, 2018 • 11 tweets • 2 min read
With regards to the recent discussions about APT29's potential comeback, the attribution of OlympicDestroyer, and Zebrocy's shifting targets, some thoughts on what I call the Vermeer effect of APT clustering. 1/x
As illustrative background from history of art: Roughly 80 years ago Han van Meegeren forged a new painting in the style of Vermeer. He managed to convince an art expert to certify the painting as a genuine Vermeer. 2/x
Sep 6, 2018 • 10 tweets • 2 min read
The indictment about the Sony and Bangladesh bank attacks is 179 pages. Here are some first insights:
Compared to the GRU indictment from a few weeks earlier, this one contains less details about the individuals and their organization. E.g. it is not really clear how many "co-conspirators" are covered and how close their cooperation is.
2/n
