Signal is just another area of operations for cybercrime and organised crime like any other. And CTI vendors would not be doing their job if they were not infiltrating these communities and group chats. It’s not Signal’s fault. It’s just a fact of the internet.

TL;DR — No lol, Signal wasn’t hacked

The Threat Actor Profile Guide for CTI Analysts Threat actor profiles are made for a range of reasons. An example trigger for creating  a new profile can include after an incident, e.g., a...

ICYMI: In July 2023, Curated Intel members shared a brand new resource for the community called 'The Threat Actor Profile Guide for CTI Analysts'.

The Threat Actor Profile Guide for CTI Analysts (curatedintel.org)

Happy to share that I'll be speaking at DEF CON 31. Won't be there physically, mind, but meet the rest of the Blue Team Village!

More info on BTV events here: https://blueteamvillage.org/events/def-con-31/

Annd I am live, hoping to bring forensics in everyone's lives soon!