hakan's Avatar

hakan

@hatr

reporter covering cyber (both crime and state-sponsored) for Der Spiegel and ZDF, short overview at https://linktr.ee/hakantanriverdi, Signal: hakan.25

6,512
Followers
711
Following
395
Posts
31.05.2023
Joined
Posts Following

Latest posts by hakan @hatr

Post image

Oh look... ChatGPT sniffing Russian disinformation up its nose 700 times in 5 days

Exactly what researchers have warned about for more than a year but have been told to take a hike

buttondown.com/readwrite/ar...

10.03.2026 15:57 👍 32 🔁 18 💬 1 📌 4

Hakan Tanriverdi with a great, brief writeup on linking 100+ Doppelganger/SDA domains thanks to a single unique string in their Wordpress setup.

Highly recommend you go follow/subscribe if you have not already. He's been putting out fantastic cyber work.

10.03.2026 15:55 👍 5 🔁 1 💬 0 📌 0
lexomnium registered with roygeneral@proton.me

lexomnium registered with roygeneral@proton.me

lebelligerant registered with roygeneral@proton.me

lebelligerant registered with roygeneral@proton.me

brennendefrage registered with roygeneral@proton.me

brennendefrage registered with roygeneral@proton.me

deintelligenz registered with roygeneral@proton.me

deintelligenz registered with roygeneral@proton.me

Shoutout to the reader/researcher who reached out to say that all of the four su-domains showing up are registered with the same mail address

10.03.2026 15:16 👍 2 🔁 0 💬 0 📌 0
Video thumbnail

Most accurate portrait of modern culture currently available

10.03.2026 03:09 👍 15724 🔁 3841 💬 279 📌 227
Preview
Edition 11 – One mistake ties together more than 100 domains Hey there, Hakan here. This week's edition is going to be a short one about mistakes. Without those, it'd be a whole lot harder to do my job. When trying to...

Short newsletter item about one mistake from disinfo operations #Doppelgänger that makes it possible to tie together >100 domains

buttondown.com/readwrite/ar...

10.03.2026 13:09 👍 12 🔁 8 💬 1 📌 1
Preview
From a Sophisticated Browser-Extension Supply-Chain Compromise to a VibeCoded Twist: A Chrome Extension as the Initial Access Vector for a Broader Malware Chain Independent technical analysis of a Chrome extension compromise, fake update chain, and Windows-stage malware activity.

"A formerly legitimate Featured Chrome extension (ShotBird) was turned into a remote-controlled malware channel after an apparent ownership transfer"

Curious if this is another case of an extension being sold on ExtensionHub again? A place to watch...

monxresearch-sec.github.io/shotbird-ext...

08.03.2026 18:36 👍 19 🔁 16 💬 0 📌 0
Preview
The mystery of a globetrotting iPhone-hacking toolkit Tools used in a series of hacking campaigns by hackers in Russia, Ukraine, and China may have originated inside U.S. government contractor L3Harris, TechCrunch has learned.

"Two former employees of government contractor L3Harris told TechCrunch that Coruna was, at least in part, developed by the company’s hacking and surveillance tech division, Trenchant."

techcrunch.com/2026/03/09/a...

10.03.2026 05:30 👍 1 🔁 0 💬 0 📌 0
Preview
She Came Out of the Bathroom Naked, Employee Says Bank details, sex and naked people who seem unaware they are being recorded. Behind Meta’s new smart glasses lies a hidden workforce, uneasy about peering into the most intimate parts of other people’...

“You think that if they knew about the extent of the data collection, no one would dare to use the glasses”.

www.svd.se/a/K8nrV4/met...

09.03.2026 15:33 👍 3 🔁 3 💬 0 📌 0
Preview
How Trump’s War in Iran Has Echoes of Putin and Ukraine

"both pro- and anti-Kremlin bloggers from Russia started referring to Mr. Trump’s plan as “Tehran in three days.” It was a reference to “Kyiv in three days,” the ironic shorthand used to describe the Kremlin’s hubris in believing that Ukraine would quickly crumble."

www.nytimes.com/2026/03/08/u...

08.03.2026 16:05 👍 7 🔁 4 💬 0 📌 0
Preview
Pentagon Refuses to Say If AI Was Used to Select Elementary School as Bombing Target Did the US military use Anthropic's Claude to select targets in its weekend operations in Iran, with devastating results?

“We have nothing for you on this at this time,” CENTCOM said.

futurism.com/artificial-i...

08.03.2026 09:32 👍 3 🔁 3 💬 0 📌 0
Preview
Exclusive | China Suspected in Breach of FBI Surveillance Network The FBI said it has addressed ‘suspicious activities’ on its networks.

If China is confirmed to be responsible for the breach, it would signal the latest intrusion by Beijing’s hackers of computer systems related to law-enforcement surveillance orders, which contain highly sensitive material.

www.wsj.com/politics/nat...

06.03.2026 22:57 👍 5 🔁 2 💬 0 📌 0
Preview
Russia Secretly Sharing Location of U.S. Targets With Iran, U.S. Officials Say In a sign of deepening ties, satellite data from Moscow could help Tehran hit American forces around the Middle East.

"The former Russian intelligence officer, who had been briefed on the topic, said Russia was only giving a limited amount of intelligence information derived from its satellites to Iran"

www.wsj.com/world/russia...

06.03.2026 22:23 👍 2 🔁 0 💬 0 📌 1
Preview
Proton Mail Helped FBI Unmask Anonymous ‘Stop Cop City’ Protester A court record reviewed by 404 Media shows privacy-focused email provider Proton Mail handed over payment data related to a Stop Cop City email account to the Swiss government, which handed it to the FBI.

Proton Mail Helped FBI Unmask Anonymous ‘Stop Cop City’ Protester https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/

06.03.2026 18:12 👍 7 🔁 8 💬 0 📌 1
Preview
Exclusive: US investigation points to likely US responsibility in Iran school strike, sources say Military investigators believe it is likely that U.S. forces were responsible for an apparent strike on an Iranian girls' school that killed scores of children on Saturday, two U.S. officials told Reu...

A huge tip of the hat to the NYTimes, the CBC, the BBC, Reuters and others for being absolutely all over this school bombing and piecing together the truth of what happened -- www.reuters.com/world/middle...

06.03.2026 03:21 👍 102 🔁 33 💬 3 📌 0
Preview
Bellingcat’s New Tool to Explore Historical and Spatial Flight Data Turnstone can visualise historical trends in flight data or filter them by geography, aircraft type and other parameters.

Trying to make sense of an aircraft’s movements during a conflict? Context is everything. That’s why we built Turnstone, an open source tool that searches historical flight data to allow researchers to explore flight patterns over time and in specific locations. www.bellingcat.com/resources/20...

05.03.2026 14:35 👍 286 🔁 115 💬 2 📌 3
Preview
Anthropic’s AI tool Claude central to U.S. campaign in Iran, amid a bitter feud Anthropic’s AI tool Claude is playing a key role in the U.S. military’s campaign in Iran, amid a bitter fight with the Pentagon over the terms of its use in war.

Not even mentioned in passing is the school that was bombed.

Given that it was adjacent to local Islamic Revolutionary Guard Corps (IRGC) barracks, the "precise location" provided by Claude seems to be the essence.

www.washingtonpost.com/technology/2...

05.03.2026 08:17 👍 6 🔁 3 💬 0 📌 0
Preview
Operation Diebstahl: „Nächste Zielperson: Frau Anna Thalhammer“ Jan Marsalek soll Taschendiebe auf profil-Chefredakteurin Anna Thalhammer angesetzt haben. Die genauen Anweisungen zur Operation Diebstahl wurden im Prozess gegen Egisto Ott vorgelesen.

"Die Chats zeigen, wie detailliert die Informationen waren, die Marsalek zur Verfügung standen – und wie penibel der Österreicher Angriffe auf heimische Beamte und profil-Chefredakteurin Anna Thalhammer geplant hatte. "

www.profil.at/investigativ...

05.03.2026 08:01 👍 1 🔁 0 💬 0 📌 0
Preview
(S+) Iran: So gnadenlos späht das Regime die eigene Bevölkerung aus – ein Insider packt aus US-Präsident Trump fordert die Iraner auf, das Regime zu stürzen. Doch die Führung in Teheran hat einen gigantischen Überwachungsapparat erschaffen. SPIEGEL-Recherchen gewähren Einblick in das Spähsys...

Leaked documents provide a frightful look into the Iranian regime's surveillance apparatus.

04.03.2026 09:45 👍 3 🔁 4 💬 2 📌 1

thanks

03.03.2026 21:14 👍 1 🔁 0 💬 0 📌 0
Preview
Instagram Create an account or log in to Instagram - Share what you're into with the people who get you.

In case you want to hear me speak in German
www.instagram.com/p/DVbkhskjD0X/

03.03.2026 20:40 👍 4 🔁 0 💬 0 📌 0
#EyesOfIran : breaking the code of Iran’s surveillance system.
#EyesOfIran : breaking the code of Iran’s surveillance system. 🇮🇷👁️ [New investigation] #EyesOfIran : breaking the code of Iran’s surveillance system. War, unrest… and a sophisticated mass-surveillance weapon. ➡️ Today, we’re able to reveal that the…

🇮🇷👁️[New investigation] #EyesOfIran : breaking the code of Iran’s surveillance system.

War, unrest… and a sophisticated mass-surveillance weapon.

youtube.com/shorts/_cxri...

@forbidden-stories.bsky.social @lemonde.fr @papertrailmedia.de @spiegel.de
@derstandard.at @heuteshow.de Tamedia

03.03.2026 17:06 👍 17 🔁 12 💬 1 📌 6

doch, doch, poste noch, brauche noch ein wenig!

03.03.2026 17:36 👍 3 🔁 0 💬 0 📌 0
Preview
Iran: So gnadenlos späht Regime die eigene Bevölkerung aus – Ein Insider packt aus US-Präsident Trump fordert die Iraner auf, das Regime zu stürzen. Doch die Führung in Teheran hat einen gigantischen Überwachungsapparat erschaffen. SPIEGEL-Recherchen gewähren Einblick in das Spähsystem der Mullahs.

US-Präsident Trump fordert die Iraner auf, das Regime zu stürzen. Doch die Führung in Teheran hat einen gigantischen Überwachungsapparat erschaffen. SPIEGEL-Recherchen gewähren Einblick in das Spähsystem der Mullahs.

03.03.2026 17:08 👍 26 🔁 10 💬 8 📌 1
Preview
(S+) Iran: So gnadenlos späht Regime die eigene Bevölkerung aus – Ein Insider packt aus US-Präsident Trump fordert die Iraner auf, das Regime zu stürzen. Doch die Führung in Teheran hat einen gigantischen Überwachungsapparat erschaffen. SPIEGEL-Recherchen gewähren Einblick in das Spähsys...

Irans Regime wankt, doch ob es fällt, ist unklar. Über Jahre hat die Islamische Republik einen gigantischen Überwachungsapparat aufgebaut. Die #EyesOfIran-Recherchen gewähren nun Einblicke in das Spähsystem der Mullahs. www.spiegel.de/ausland/iran...

03.03.2026 17:04 👍 13 🔁 4 💬 1 📌 0
Preview
Insider aus dem Iran enthüllt: Gesichtserkennung wird zur Jagd von Protestierenden eingesetzt Tausende Tote, totale Kontrolle: Ein Insider enthüllt, wie Irans Mullah-Regime Protestierende per Gesichtserkennung jagt.

We spoke with a dozen people who know the regime, either because they had to flee after being imprisoned or from a technical point of view.

All of this, and more, you can find in our reporting,
#EyesOfIran

www.zdfheute.de/politik/ausl... (video, 10 min)

03.03.2026 17:22 👍 15 🔁 3 💬 2 📌 0
Preview
Ein Regime im Überlebensmodus: Leak zeigt Irans massive Überwachung im Land Das Regime in Teheran wackelt. Jene, die unter ihm gelitten haben, jubeln. Ein Insider enthüllt, wie die Revolutionswächter ihre Gegner per Gesichtserkennung jagen

We have obtained videos showing the software in a live-scenario, at metro stations in Teheran. We have contracts, and we have had a look at the code, built by the Russian company Ntechlab.

www.derstandard.at/story/300000...

03.03.2026 17:20 👍 17 🔁 7 💬 1 📌 0
Preview
(S+) Iran: So gnadenlos späht Regime die eigene Bevölkerung aus – Ein Insider packt aus US-Präsident Trump fordert die Iraner auf, das Regime zu stürzen. Doch die Führung in Teheran hat einen gigantischen Überwachungsapparat erschaffen. SPIEGEL-Recherchen gewähren Einblick in das Spähsys...

If you're following the situation in Iran, this one is of interest to you.

We can prove how the regime in Iran is using facial recognition software to surveil its citizens.

(Gift link)
www.spiegel.de/ausland/iran...

03.03.2026 17:20 👍 53 🔁 25 💬 4 📌 1
Preview
DomainTools Investigations | Doppelgänger / RRN Disinformation Infrastructure Ecosystem 2026 Analysis of the Doppelgänger / RRN disinformation ecosystem. Learn how this DevOps-style infrastructure uses automated media impersonation, TLD rotation, and cloud-native hosting to target global audiences and evade enforcement.

DomainTools Investigations researchers have spent the past several weeks pulling apart data from Russian threat actor Doppelganger to analyze recent campaigns and explore its technical and organizational structures.

#infosec #threatintel #cybersecurity

dti.domaintools.com/research/dop...

02.03.2026 19:42 👍 3 🔁 3 💬 1 📌 1
Preview
Inside the plan to kill Ali Khamenei Israel spent years hacking Tehran’s traffic cameras and monitoring bodyguards ahead of the assassination of Iran’s supreme leader

„Israel was also able to disrupt single components of roughly a dozen or so mobile phone towers near Pasteur Street, making the phones seem as if they were busy when called and stopping Khamenei’s protection detail from receiving possible warnings.“

www.ft.com/content/bf99...

02.03.2026 21:19 👍 5 🔁 0 💬 0 📌 0
Post image

WSJ reporting that the U.S. used Claude for the air strikes in Iran. Centcom has been using Claude "for intelligence assessments, target identification and simulating battle scenarios" www.wsj.com/livecoverage...

01.03.2026 05:41 👍 2281 🔁 946 💬 155 📌 392