A security researcher's blog dissecting real-world phishing and crypto wallet-drainer campaigns found in spam inboxes. Posts walk through redirect chains, abused infrastructure such as IPFS, Blogspot and GitHub, and include indicators of compromise.
Website: https://blog.gtfkd.com/
Stoïk's security team publishes detailed technical write-ups on real ransomware intrusions, scanner vulnerabilities and on-chain ransom tracing. Readers get incident timelines, root-cause analysis and concrete defensive checks drawn from the team's own investigations.
Essays and a serialized book on AI-era cybersecurity, trust and measurement, citing specific vendor and lab reports. Readers get an original framework, including the Learning Advantage Ratio and the work-factor idea for AI judgment, alongside analysis of how security metrics get gamed.
Covers security news for people who run their own servers and care about privacy, including supply-chain attacks, runtime vulnerabilities and forensic tooling. It separates verified facts from rumour and explains what each issue means for readers and which fixes to apply.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
