Lightnews — Scholar-powered news

Aleksandar Milenkoski

@milenkowski.bsky.social

200 followers 76 following 9 posts

milenkoski.com

Posts Media Videos Starter Packs

Aleksandar Milenkoski @milenkowski.bsky.social · 25d

The LABScon 2025 agenda is packed with incredible talks and speakers. Check it out! [3/3]

s1.ai/agenda25

LABScon 2025

s1.ai

Aleksandar Milenkoski @milenkowski.bsky.social · 25d

I am also delighted to be hosting a workshop with Jose Luis Sánchez Martínez (Google, VirusTotal) on "Advanced Threat Hunting: Automating Large-Scale Operations with LLMs". [2/3]

Aleksandar Milenkoski @milenkowski.bsky.social · 25d

🚀LABScon kicks off tomorrow!

I am excited to be presenting on the APT group CamoFei, a joint research project with @julianferdinand.bsky.social (Recorded Future) and @azaka.fun (TeamT5). [1/3]

1 2 2

Aleksandar Milenkoski @milenkowski.bsky.social · Sep 4

[email protected] and @raphae.li from @reuters.com provide further coverage of the human dimension of this threat, exploring victim engagement methods and their personal impact. A great read!

Read the Reuters article: www.reuters.com/world/asia-p...

Exclusive: ‘It’s scary’ - crypto workers under siege from North Korean hackers

North Korean hackers are saturating the cryptocurrency industry with credible-sounding job offers as part of their campaign to steal digital cash, according to new research, raw data, and interviews.

www.reuters.com

3 3

Aleksandar Milenkoski @milenkowski.bsky.social · Sep 4

🚨New research drop: Contagious Interview | North Korean Threat Actors Reveal Plans and Ops by Abusing Cyber Intel Platforms

It was a pleasure collaborating with Sreekar Madabushi and @kennethkinion.bsky.social from Validin!

Read our blog post: s1.ai/nk-ops

Contagious Interview | North Korean Threat Actors Reveal Plans and Ops by Abusing Cyber Intel Platforms

DPRK-aligned threat actors abuse CTI platforms to detect infrastructure exposure and scout for new assets.

s1.ai

1 6 9

Reposted by Aleksandar Milenkoski

Julian-Ferdinand Vögele @julianferdinand.bsky.social · Jun 11

Was great presenting with @milenkowski.bsky.social at @haguetix.bsky.social yesterday. Big thank you for hosting this incredible event. Looking forward to next year!

3 8

Aleksandar Milenkoski @milenkowski.bsky.social · Jun 9

Get the full story here:

www.sentinelone.com/labs/follow-... [2/2]

Follow the Smoke | China-nexus Threat Actors Hammer At the Doors of Top Tier Targets

This report uncovers a set of related threat clusters linked to PurpleHaze and ShadowPad operators targeting organizations, including cybersecurity vendors.

www.sentinelone.com

1 3

Aleksandar Milenkoski @milenkowski.bsky.social · Jun 9

We just released our findings on long-term activity clusters attributed to China-nexus actors.

We discuss a relatively underreported, yet critical, aspect of the threat landscape: the targeting of cybersecurity vendors.

Big shout out to Lumen's Black Lotus Labs for their support! [1/2]

1 4 6

Aleksandar Milenkoski @milenkowski.bsky.social · Jun 8

Huge thanks to the @sleuthcon.bsky.social team for having me and putting on such a great event! It was a pleasure presenting with Sreekar from Validin on North Korean activities. Stay tuned, more to come from us soon.

1 2

Aleksandar Milenkoski @milenkowski.bsky.social · Jun 8

Thanks @ellyrostoum.bsky.social and it was great seeing you!

Reposted by Aleksandar Milenkoski

Tom Hegel @hegel.bsky.social · May 8

NEW 👉 FreeDrain Unmasked | Uncovering an Industrial-Scale Crypto Theft Network

Months-long research project with Validin we just dropped @pivotcon.bsky.social

🖤~40k IOCs: github.com/Validin/indi...
💜 SentinelLabs: s1.ai/freedrain
💙 Validin: www.validin.com/blog/freedra...

Enjoy!

5 8

Reposted by Aleksandar Milenkoski

Virtual Routes @virtualroutes.bsky.social · May 6

An excerpt from the newest Pharos report now available on Binding Hook 👇

Binding Hook @bindinghook.bsky.social · May 6

Read an excerpt from Aleksandar Milenkoski, Jiro Minier, @julianferdinand.bsky.social, @maxwsmeets.bsky.social, and @tgrossman.bsky.social’s new report on state use of #ransomware, looking at Iran, North Korea, Russia, and China, on Binding Hook: bindinghook.com/articles-hoo...

State-backed ransomware at the intersection of espionage, sabotage, and cybercrime

The governments of Russia, China, Iran, and North Korea use ransomware for diverse ends.

bindinghook.com

1 1 2

Reposted by Aleksandar Milenkoski

Dakota @dakotaindc.bsky.social · Apr 23

Banger of a report from @milenkowski.bsky.social, Jiro Minier, @julianferdinand.bsky.social, @maxwsmeets.bsky.social, and @tgrossman.bsky.social

virtual-routes.org/pharos-repor...

Pharos Report No. 3: Ransomware’s New Masters: How States Are Hijacking Cybercrime - Virtual Routes

The third report in the Pharos Series, Ransomware’s New Masters: How States Are Hijacking Cybercrime is authored by Aleksandar Milenkoski, Jiro Minier, Julian-Ferdinand Vögele, Max Smeets, and Taylor ...

virtual-routes.org

7 16