BushidoToken Blog

ID: 11287bc4-bdf7-5700-a278-efa2cdc85b9d

STIX ID: identity--11287bc4-bdf7-5700-a278-efa2cdc85b9d

Feed Type: skeleton

Earliest post: 2020-02-14

Latest post: 2025-10-19

The BushidoToken blog features in-depth cyber threat intelligence research focused on ransomware, threat actor activity, and attacker tooling. It provides detailed analyses, OSINT-driven insights, and practical resources like the Ransomware Tool Matrix to support threat hunting, detection, and incident response.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

07/20/2026

Title	Date Published ↓	Describes Incident	Visible
UK Cybercrime Journal: Hargreaves Landsdown Extortion Attempt by Bashe	2026-06-24	True	True
UK Cybercrime Journal: Sustained DragonForce Campaign	2026-06-17	True	True
Ransomware Tool Matrix Project Updates: Three Groups To Track	2026-06-15	True	True
UK Cybercrime Journal: Arup Group Breached by FulcrumSec	2026-06-10	True	True
UK Cybercrime Journal: British Universities Struck by ShinyHunters Before Exam Season	2026-06-03	True	True
UK Cybercrime Journal: £102 million Lost to Scams in 2025	2026-05-27	True	True
UK Cybercrime Journal: Inside the Cl0p attack on South Staffs Water	2026-05-23	True	True
Lessons from the BlackBasta Ransomware Attack on Capita	2025-10-19	True	True
Ransomware Tool Matrix Project Updates: May 2025	2025-05-05	True	True
Tracking Adversaries: EvilCorp, the RansomHub affiliate	2025-04-02	True	True
Investigating Anonymous VPS services used by Ransomware Gangs	2025-03-09	True	True
Analysis of Counter-Ransomware Activities in 2024	2025-02-12	True	True
Tracking Adversaries: Ghostwriter APT Infrastructure	2025-01-19	True	True
Top 10 Cyber Threats of 2024	2024-12-08	True	True
The Russian APT Tool Matrix	2024-11-10	True	True
Tracking Adversaries: The Qilin RaaS	2024-06-12	True	True
Tracking Adversaries: UAC-0050, Cracking The DaVinci Code	2024-03-06	True	True
Tracking Adversaries: Akira, another descendent of Conti	2024-03-06	True	True
Tracking Adversaries: RedZei, Chinese-speaking scammers targeting Chinese students in the UK	2024-03-06	True	True
Tracking Adversaries: GreenMwizi, Kenyan scamming campaign using Twitter bots	2024-03-06	True	True
Tracking Adversaries: Scattered Spider, the BlackCat affiliate	2024-03-06	True	True
Lessons from the iSOON Leaks	2024-02-27	True	True
Top 10 Cyber Threats of 2023	2023-12-12	True	True
Geopolitical Cybercrime: LockBit attack on the ICBC	2023-11-11	True	True
Hacktivists: Liars and Morons	2023-08-05	True	True
Investigating SMS phishing text messages from scratch	2023-07-22	True	True
Unmasking Ransomware Using Stylometric Analysis: Shadow, 8BASE, Rancoz	2023-05-24	True	True
Fake Steam Desktop Authenticator App distributing DarkCrystal RAT	2023-05-18	True	True
Raspberry Robin: A global USB malware campaign providing access to ransomware operators	2023-05-03	True	True
Tips for Investigating Cybercrime Infrastructure	2023-03-04	True	True
Detecting and Fingerprinting Infostealer Malware-as-a-Service platforms	2022-11-26	True	True
The Continuity of Conti	2022-11-18	True	True
The Game of Attribution	2022-11-11	True	True
Brute Ratel cracked and shared across the Cybercriminal Underground	2022-09-29	True	True
Analysis of the emerging Darth Maul eCrime Market	2022-08-18	True	True
Unravelling a Mimikatz campaign	2022-08-08	True	True
Space Invaders: Cyber Threats That Are Out Of This World	2022-07-31	True	True
Deep-dive: The DarkHotel APT	2022-06-29	True	True
Overview of Russian GRU and SVR Cyberespionage Campaigns 1H 2022	2022-06-27	True	True
Ofgem Energy Bill Rebate Phishing Fraud	2022-05-26	True	True
Gamer Cheater Hacker Spy	2022-05-03	True	True
Lessons from the Conti Leaks	2022-04-18	True	True
One Way Or Another: Initial Access Vectors	2022-03-20	True	True
Analysis of a recent Magecart campaign	2020-09-05	True	True