Explore Intellidark’s research and analysis on cyber threats, cybercrime, and emerging security risks. Our publications provide investigative insights and strategic perspectives on evolving threats and their implications.
How cybercriminal forums act as infrastructures that turn fragmented criminal capabilities into markets, from network access, credentials and malware to laundering services, and how reputation, escrow and verification build trust between anonymous actors.
From espionage and influence operations to proxy hacktivism against Israel, the United States and Middle Eastern countries: Iranian cyber power as an interconnected ecosystem of state institutions, contractors, proxies, hacktivist personas and criminal intermediaries.
How cooperation between China, Russia, Iran and North Korea has grown into a flexible network across military, technological, economic and cyber domains, accelerated since Russia's full-scale invasion of Ukraine, and what it means for international security.
An in-depth analysis of the cyber-physical threats to critical infrastructures and their impact on national security: threat actors, the main nations conducting such attacks, and a strategic risk assessment.
Understanding the new frontlines of power in the cyber age: how cyberspace became a strategic domain, the cybercrime ecosystem and its operations, and state-sponsored cyber activities and conflicts.
From shadows to escalation: an overview and analysis of the cyber and electronic operations in the Israel-Iran conflict, the cyber forces, strategies and capabilities of both sides, and their electronic warfare efforts.
An overview and analysis of the cybercriminal environment and operations: platforms and organization, modus operandi from social engineering and malware to deepfakes and money laundering, cybercriminals' psychology, and the geographical distribution of cybercrime.
From cybercriminal campaigns to online foreign influence and cyber terrorist operations: how threat actors exploit human vulnerabilities through social engineering, virtual HUMINT and artificial intelligence.
From terrorism to war: an overview and analysis of the cyber operations carried out alongside asymmetric warfare since October 7, 2023, by hacker and hacktivist groups and APT actors supporting Hamas or Israel.
An overview of how threat actors use cryptocurrency, from crime and terrorism to nuclear programs, war and the evasion of international sanctions, how its anonymity is exploited and traced on the blockchain, and its impact on international security.
How DDoS attacks work, the services offered on the dark web, and their use in geopolitical conflicts: cooperation between hacktivists and cybercriminals such as Anonymous Sudan and KillNet, financing, and their role as a means of diversion and destabilization.
How radical Islamist organizations use cyberspace, from social networks and encrypted messaging applications to the darknet, and the cyber capabilities of Hamas, Hezbollah, the Islamic State and Al-Qaeda.
What Cyber HUMINT is, how it differs from HUMINT and OSINT, and how undercover intelligence operations are run online: threat actor profiles, financial transactions, and building and managing avatars and cover stories.