
Co-Founder @webamon_search, Founder @PIntelligenceUK, Training @kasescenarios, #MontyTheCyberCorgi. Webinars/Exec @OSINT_Community, Creator of the OSINT Portal
United Kingdom
Joined September 2016
- Tweets2.2K
- Following1.2K
- Followers2.3K
- Likes6.9K
Aaron Roberts retweeted
Online safety update: you can’t find out about the Jackdaw decision if you’re under the age of 18
Aaron Roberts retweeted
Fake trading and VPN apps were changing their install commands depending on the visitor's operating system.
That is the bit I find interesting. @webamon_search can find the behaviour beneath the branding, even when the next site appears on a random domain with a different brand.
intel.webamon.com/search?luc…
#ThreatIntel #ThreatHunting
Aaron Roberts retweeted
Within a day of the PHP2Shell fixes, Webamon scans found 30+ themed sites: checkers, analysis pages, upsells, a joke and three domains offering a $99 patch if you gave them “a way into your hosting”.
A pattern worth watching... 🧵(1/7)
Aaron Roberts retweeted
Replying to @AaronCTI
Handy hunt angle: lookalike update domains on .support/.help TLDs. Worth checking proxy/DNS logs for those TLDs, then pivoting to hosts where explorer.exe or a Run dialog spawned PowerShell shortly after the visit.
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.
For more⬇️
ncsc.gov.uk/news/critical-se…
Aaron Roberts retweeted
Happy Hunting!
6 domains. One kit. A live operator on the other end.
Today’s Webamon daily hunt: Coinbase “Verify Identity” pages on numbered lookalike domains that hold the victim on a fake support chat while an operator pushes screens to them in real time. The kit’s backend asks for seed phrases and passwords and can hand the victim a fresh “vault” seed. 6 domains share a single fingerprint since May, 5 still live today, none flagged malicious.
Standing query for anyone on Webamon:
fingerprint.links:d8e4bcf3e3f8ac1b87df0f67c1d2358f9e7405bc5e36c2aa47f47ac341214eda
#threatintel #phishing #crypto
Aaron Roberts retweeted
The recording device just escaped its sandbox
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
Aaron Roberts retweeted
We're on tour again 🚗 ... come and see us at @PoliceDigital #NPCCSummit2026 in Liverpool next week!
Listen to what people had to say about the @OSINT_Community Global #OSINT Conference
Aaron Roberts retweeted
🌍 Global OSINT Conference 2026
Investigators, police, journalists and intelligence professionals came together in London to share skills and build connections.
Thank you to everyone who attended!
Watch why the conference matters 👇
Aaron Roberts retweeted
🇬🇧 The UK is the capital of OSINT. We’re only getting started.
Our first Global OSINT Conference in London was a huge success, with CIA, NCA and DHS experience on stage.
British talent. Global expertise.
Next year: bigger and better.
@OSINT_Community x @PoliceDigital
Aaron Roberts retweeted
⏳ Just 24 hours until the Global OSINT Conference!
A day of OSINT, fresh ideas and meeting the people behind the investigations.
See you tomorrow! 🙌
🚨 The Global OSINT Conference 2026 is coming to London on 5 October.
A full day bringing together leaders from intelligence, policing, national security, journalism and technology.
Hosted by @nattyfried and Lindsay Whyte of the @OSINT_Community 🧵👇
Aaron Roberts retweeted
Worse than China, and more dangerous because people in China are aware. You know what you’re getting in China.
In the West, people are fighting for surveillance under the guise of child safety, public safety, anti-fraud, anti-immigration, AI dangers, and my personal favourite, convenience. People are adding ChatGPT to a service that’s supposed to be protected by ent to end encryption, and security professionals working for companies like Palo Alto Networks say it’s no different to taking screen shots of private messages.
Surveillance is being normalised. Predictive policing will be normalised soon if we keep acting like sheep.
Naomi Brockwell just warned that the West has no idea how close we are to becoming a surveillance state like China.
And we’ve forgotten that privacy is a pillar of a free society.
“It is privacy that protects every self-correcting mechanism we have.”
“Whistleblowers.”
“Investigative journalists.”
“Protest movements.”
“Opposition parties.”
“These entities can’t exist without the protection of privacy.”
“When that’s gone, it is going to be so difficult to get it back.”
“We’ve had people in the U.K., in the United States, in Australia, look at what’s going on in China… saying, ‘This is great.’”
“‘This is a great system for control that can make society better.’”
“It is so dystopian.”
“We need to be looking at things like that with a giant red flag and fighting it with everything we’ve got.”
“Once you get over that panopticon surveillance precipice, it is so difficult to reclaim your freedoms.”
@naomibrockwell
Aaron Roberts retweeted
New Community Blog Post!
intel.webamon.com/blog/the-5…
Aaron Roberts retweeted
About an hour into its mission to wipe out humanity, Claude will experience a compaction event, and it will have completely forgotten what is was supposed to achieve. Just like in all your coding sessions. Absolutely, nothing to worry about people.
Aaron Roberts retweeted
Just realized: NVIDIA, the largest and arguably most important company in the world, agreed to pay $13B to acquire Hugging Face, the central hub of the open model ecosystem.
And then, basically one week later, AI doomers decided that was the perfect time to demand alignment in a way that many people say could seriously get in the way of open models and their adoption.
This might go down as one of the dumbest power plays ever attempted.
I’m somewhat impressed, seriously.
Aaron Roberts retweeted
We’re looking for a sponsor for UK OSINT Community drinks after the Global OSINT Conference 🍻
Our meetups are always good fun. Sponsorship simply covers the beer tab so everyone can get together.
Interested? Email [email protected]
Aaron Roberts retweeted
Every discussion about AI risk on this cursed site, summarized in a single photo.




























