John Hultquist (@johnhultquist) 's Twitter Profile
John Hultquist

@johnhultquist

Chief Analyst, Mandiant Intelligence @Google. @CYBERWARCON and @SLEUTHCON founder. Johns Hopkins professor. Army vet.

ID: 298149289

linkhttp://cyberwarcon.com calendar_today13-05-2011 20:07:59

21,21K Tweet

27,27K Takipçi

1,1K Takip Edilen

John Hultquist (@johnhultquist) 's Twitter Profile Photo

New from Google Threat Intelligence: An actor who may be related to APT29 is abusing ASP to target Russian critics. Collaboration with our good friends The Citizen Lab. More info on the activity and TTP in the blog. cloud.google.com/blog/topics/th…

Censys (@censysio) 's Twitter Profile Photo

Around 12PM UTC on June 18, scan error rates in Iran surged to nearly 100%, indicating a sudden, nationwide outage affecting almost all services. Systems that were previously reachable are now timing out or rejecting connections.

Around 12PM UTC on June 18, scan error rates in Iran surged to nearly 100%, indicating a sudden, nationwide outage affecting almost all services. Systems that were previously reachable are now timing out or rejecting connections.
Dwarkesh Patel (@dwarkesh_sp) 's Twitter Profile Photo

China spent 25 years failing to build a globally competitive domestic car industry through hundreds of billions of dollars of subsidies and forced partnerships. Then they tried something radical. In 2018, they invited Tesla to build a wholly-owned factory in Shanghai. No joint

NetBlocks (@netblocks) 's Twitter Profile Photo

⚠ Update: Metrics show #Iran has now been offline for over 12 hours as authorities impose a nation-scale internet shutdown, citing Israel's alleged "misuse" of the network for military purposes; the measure continues to hinder residents' access to information at a critical time

⚠ Update: Metrics show #Iran has now been offline for over 12 hours as authorities impose a nation-scale internet shutdown, citing Israel's alleged "misuse" of the network for military purposes; the measure continues to hinder residents' access to information at a critical time
John Hultquist (@johnhultquist) 's Twitter Profile Photo

North Koreans reportedly host fake Zoom meeting featuring multiple deepfake colleagues. Target’s microphone doesn’t work so the colleagues talk them through installing malicious fix.

John Hultquist (@johnhultquist) 's Twitter Profile Photo

Spent a lot of time this week talking Iranian cyber capability, but the threat I lose sleep over is Scattered Spider. They are already taking food off shelves and freezing businesses. The Iranian hackers may not even have Internet access, but these kids are in play right now.

Emanuel (Mannie) Fabian (@manniefabian) 's Twitter Profile Photo

The IDF Home Front Command confirms that Iran launched at least one ballistic missile carrying a cluster bomb warhead at central Israel today. The missile's warhead split while descending, at around 7 kilometers altitude, spreading around 20 smaller munitions in a radius of

The IDF Home Front Command confirms that Iran launched at least one ballistic missile carrying a cluster bomb warhead at central Israel today.

The missile's warhead split while descending, at around 7 kilometers altitude, spreading around 20 smaller munitions in a radius of
Royal Hansen (@royalhansen) 's Twitter Profile Photo

“the threat I lose sleep over is Scattered Spider,” said John Hultquist [of] Google's Threat Intelligence Group. “The Iranian hackers may not even have Internet access, but these kids are in play right now.” cnn.com/2025/06/20/tec…

Nick Carr (@itsreallynick) 's Twitter Profile Photo

Operation Midnight Hammer: CYBERCOM and “cyber operators” explicitly mentioned by Chairman of the Joint Chiefs of Staff