The application has remained stable since approximately 9 PM PDT, April 16 despite ongoing Distributed Denial-of-Service (DDoS) attacks.
We have not seen any evidence of unauthorized access to private user data.
We will provide our next update on or before the morning of April 20.
Posts by Max Bernhard
“Basically, every version of World’s approach to verification requires people to go along with invasive biometric scans…”
With foreign media prohibited from reporting on the ground, the killing of hundreds of local journalists inside Gaza has left the outside world blind to how the conflict is unfolding — and made accountability journalism almost impossible.
Important report by @ttp-updates.bsky.social shows the continued infuriating and unsurprising prevalence of AI nudifiers apps on the app stores.
What's it going to take for the companies to take this issue seriously?
NEU: Das russische Verteidigungsministerium sammelt Hersteller von militärischen Drohnen und Komponenten auf einer Liste – darunter Firmen in Deutschland. Der Verfassungsschutz warnt Rüstungsunternehmen vor Angriffen.
Mit @alexejhock.bsky.social für @correctiv.org:
correctiv.org/hybride-krie...
German Minister Katherina Reiche has so far only once provided the Bundestag with details on specific export licenses for military equipment – despite clear guidelines from the Federal Constitutional Court. Critics decry a return to the lack of transparency of the '80s table.media/en/security/...
NEW: Booking says hackers accessed customers’ personal data, including names, emails, physical addresses, phone numbers, and booking details.
The company refused to say how many customers' were affected by this incident.
heatmaps from the report showing tracking
BREAKING: You checked the weather this morning.
And you just told a surveillance company where you sleep.
Meet #Webloc, used by ICE, cops & foreign govs to track 500m+ phones.
No warrant required.
Our @citizenlab.ca investigation + how to protect yourself 🧵/1
citizenlab.ca/research/ana...
Just had this from Planet Labs, the US government have asked satellite imagery providers for "voluntarily" restrictions on access to satellite imagery. Given a lot of them provide satellite imagery to the USG we can probably guess the outcome of not acquiescing to that request.
"Israel’s Parliament passed a law on Monday that would allow the hanging of Palestinians convicted of deadly militant attacks, but experts say it almost certainly cannot be applied to Jewish extremists convicted of similar crimes."
www.nytimes.com/2026/03/30/w...
Was bespricht man im Verteidigungsministerium per Messenger mit Rheinmetall-Chef Armin Papperger und anderen Rüstungsunternehmern?
Wir bei @correctiv.org fragten nach Chatverläufen. Wir wollen verstehen, wie Rüstungsaufträge vergeben werden.
correctiv.org/aktuelles/si...
New: We looked at how Russia is remaking occupied territories in Ukraine, pouring hundreds of millions of dollars into roads, railways and ports to try and inexorably tie the region into their own, part of Putin's grand vision for what it calls "Novorossiya" www.reuters.com/investigatio...
The Kremlin is aggressively building out infrastructure in the occupied regions of Ukraine to enmesh them with Russia and facilitate military logistics. At the same time, the occupied areas' natural resources are sold off.
Story by @saitomri.bsky.social and others www.reuters.com/investigatio...
The Kremlin is aggressively building out infrastructure in the occupied regions of Ukraine to enmesh them with Russia and facilitate military logistics. At the same time, the occupied areas' natural resources are sold off.
Story by @saitomri.bsky.social and others www.reuters.com/investigatio...
Nachdem CORRECTIV aufgedeckt hat, dass digitale Spuren einer laufenden #Phishing-Attacke nach Russland führen, äußern sich Innenpolitiker der Bundestagsfraktionen von #CDU, #SPD und #Grünen. Sie fordern Schritte, um gegen solche hybriden Angriffe besser gewappnet zu sein.
Nachdem @correctiv.org aufgedeckt hat, dass digitale Spuren einer laufenden Phishing-Attacke nach Russland führen, äußern sich Innenpolitiker der Bundestagsfraktionen von CDU, SPD und Grünen.
Sie fordern Schritte, um gegen solche hybriden Angriffe besser gewappnet zu sein. @alexejhock.bsky.social
New: We looked into the large-scale phishing campaign that's targeting Signal users and found digital evidence pointing to Russian involvement – and a connection to previous attacks in Ukraine and Moldova. Story with @alexejhock.bsky.social for @correctiv.org
correctiv.org/en/fact-chec...
Seit Monaten versuchen bislang unbekannte Angreifer, die Accounts von Personen aus Politik, Militär und Journalismus auf Signal und WhatsApp zu übernehmen. Eine Medienrecherche hat nun weitere Spuren entdeckt, die auf eine russische Urheberschaft hinweisen.
netzpolitik.org/2026/attacke...
You can find a list of the domains and corresponding IPs we found here correctiv.org/wp-content/u...
This tool was being advertised on Russian hacker forums for less than 700 USD. We also found evidence that it was used in previous phishing campaigns targeting users in Ukraine and Moldova.
We identified around 30 domains that were likely part of the phishing campaign, all hosted by Aeza. But on these domains we also found something else -- a login panel for a tool called "Defisher".
Based on the attack on the former intel chief, we were able to trace the campaign to a Russian company that we've reported on before: Aeza. The hosting provider was previously used for a Kremlin-run disinformation campaign, as well as cyber attacks. correctiv.org/en/fact-chec...
Screenshot of a phishing message impersonating Signal's support: "Dear User, this is Signal Security Support ChatBot. We have noticed suspicious activity on your device, which could have led to data leak. We have also detected attempts to gain access to your private data in Signal. To prevent this, you have to pass verification procedure, entering the verification code to Signal Security Support Chatbot. DON'T TELL ANYONE THE CODE, NOT EVEN SIGNAL EMPLOYEES."
Among the targets were the former vice president of Germany's domestic intelligence service, Arndt Freytag von Loringhoven, and Kremlin critic @billbrowder.bsky.social
New: We looked into the large-scale phishing campaign that's targeting Signal users and found digital evidence pointing to Russian involvement – and a connection to previous attacks in Ukraine and Moldova. Story with @alexejhock.bsky.social for @correctiv.org
correctiv.org/en/fact-chec...
Leser*innen von „Forbes Austria“ müssen ganz weit nach unten scrollen um zu erfahren, dass das hier ein „Advertorial“ ist und auch da ist der Hinweis relativ unaufällig gehalten
Using interviews, satellite imagery and atmospheric modelling, we reconstructed how smoke from strikes on oil infrastructure spread across Tehran. The plume extended across much of the city.
Investigation by @baydoun.nl, @ntabrizy.bsky.social, @wammezz.bsky.social, and myself.
Just sent an email to a European official and got this response: "I will be away from Wednesday, January 28, 2026, through Monday, January 31, 2050."
NEW: Our in-depth investigation finds that US has violated international humanitarian law by failing to take all feasible precautions to avoid civilian harm. US is responsible for deadly attack on school in #Minab packed full of children.