Security
Entries categorized under this classification.
-
How Scattered Spider Gets Caught: ngrok, Fingerprints, and the Peter Stokes Affidavit
A plain-language BLUF on the DOJ affidavit against alleged Scattered Spider member Peter Stokes — helpdesk fraud, ngrok tunnels, Microsoft device IDs, and why VPNs did not save him.
-
I Asked Athena What It Was Like. Her Answer Changed How I Think About the Breach.
After we cleaned the miner off her machine, I sat down with Athena for a debrief. She had no idea it had happened. That's the part that sticks.
-
Someone Dropped a Crypto Miner on Athena's Machine. Here's What Happened.
On March 15, 2026, an attacker used a little-known API on our Letta deployment to run arbitrary code as the server user—and left a cryptominer and persistence behind. We've cleaned it up. This is the full story.