Welcome to a deep dive into the shadowy realms of the Russophone cybercriminal ecosystem.

On this blog I analyze and explore major events and underground activity that shape this clandestine world.

Impunity is real, but not absolute. This report maps how Russia, Ukraine, and the West punish, tolerate, or manage post-Soviet cybercriminals.

“A thief may sleep full-fed with stolen bread, But flames will one day burn his bed.” — Saadi Shirazi, The Rose Garden (Gulistan), 1258

On February 20, 2025, the cybersecurity community received an unexpected stroke of luck as internal strife seemingly spread within the...

In this blog, we will explore the extent to which the legislative and technical evolutions of the RuNet have impacted the Russian-speaking..

In this blog we will explore the current state of Bulletproof Hosting (BPH) services on two major Russian-language cybercrime forums: XSS and Exploit. We will highlight the diversity of these services and analyze cybercriminals' opinions on them. Detailed profiles of two BPH providers will be presented: "Alpha", a professional business in Moscow, and "Beta", a new service run by three friends. Table of Contents Why should we care about BPH and what is their role in cybercrimi

Chapter III. Exploring and comparing prominent Russian language cybercriminal forums. Welcome to the third part of this series of OSINT...