Bad opsec

The best way to learn about opsec is to learn how people fail.

• Finnish hacker traced using Monero bad opsec Reddit investigation. Entertaining video
• Administrator of Incognito Market Complaint. Entertaining video
• Pompompurin (Conor Fitzpatrick) BreachForums owner Affidavit
• Hacker who used Genesis Market and wanted to join ISIS by contacting an undercover FBI agent (ISIS travel facilitator) Court docs
• Harvard student bomb threat and Affidavit
• leaker of classified U.S. docs (Jack Teixeira) Affidavit, Some external investigations, thread 1 and thread 2
• Ross Ulbricht (Silk Road admin) Couldn't keep himself anonymous online and how undercover agent helped the FBI to get him traped the Affidavit
• Lapsus$ kiddies. Video documentary
• BayRob Malware gang with good opsec caught. Conference video
• Man donated to Hamas
• APT1 and learning from their OPSEC failures. Conference video
• Crypto "Mixer" Bitcoin Fog Affidavit
• The 'one tiny slip' that put LulzSec chief Sabu in the FBI's pocket
• Hacker Jeremy Hammond. Entertaining video
• John William Kirby Kelley Member of 'DeadNet' & .onion 'Doxbin'. Affidavit
• How the FBI goes after DDoS cyberattackers. Conference video
• On the Digital Trail
• ChipMixer The Darknet Cryptocurrency Mixer
• The Opsec Fail of North Korean State Hacker
• All "breadcrumbs" investigations by KrebsOnSecurity
• Freedom Hosting (the malicious JavasScript, payload analysis) and TorMail
• Tor markets/activities 1, 2, 3, 4
• Joshua Schulte CIA leaker
• Multiple opsec fails by russian soldiers. Entertaining video
• Top Israeli spy chief exposes his true identity due to bad opsec. Twitter investigation.
• 4chan Syria airstrike
• Ochko123 - How the Feds Caught Russian Mega-Carder Roman Seleznev
• Series of Monumental OpSec Mistakes Led to AlphaBay's Demise
• Researchers Uncovered Uzbekistan Hacking Operations Due to Spectacularly Bad OPSEC
• De-anonymizing ransomware domains on the dark web
• Netwalker ransomware
• Old cat, new tricks, bad habits
• Geost botnet discovery of a new Android banking trojan from an OpSec error
• Opsec Mistakes Reveal COBALT MIRAGE Threat Actors