Where Is Anton Nikolaevich Korotchenko (Антон Николаевич Коротченко) Also Known as Koobface Botnet Master KrotReal? - Part Five

An image is worth a thousand words. Related.

What is Nassef from Darkode Up To? - Part Two

Dear blog readers,

I've decided to continue my elaboration and provide further actionable intelligence on a well known member of the Darkode cybercrime-friendly forum community Nassef.

Nassef is using xavi-linuxer@live.com as his personal email address account and is known to have registered the following domains using it - hxxp://tonymontana.cards - hxxp://tonymontana.cash - hxxp://tonymontana.biz.

He's also using the following email address account tonymontana_mexican@yahoo.com and is known to have registered the following domains using it:

hxxp://c2bit-power.com
hxxp://procarder.com
hxxp://novlops.cc
hxxp://freshcvv2.com
hxxp://sharkcc.com
hxxp://edumps.cc
hxxp://cvvlist.com
hxxp://cardinghispano.com
hxxp://dumps4you.com
hxxp://zanoled.com
hxxp://vic-socks.com
hxxp://dump-service.com
hxxp://thugcarders.com
hxxp://hotdumps.com
hxxp://dumpsvendor.com
hxxp://getbette.com
hxxp://crimemarket.com
hxxp://cardingmaestro.com

hxxp://ug-storecards.com
hxxp://cvvsite.com
hxxp://tonymontana.cc
hxxp://dumpsclinique.com
hxxp://source4dumps.cc
hxxp://skycvv.com
hxxp://carderprofit.cc
hxxp://styxmarket.com
hxxp://wt1shop.com
hxxp://scene-tools.com
hxxp://fraudsmarket.com
hxxp://cardersvilla.com
hxxp://bigcarder.com
hxxp://cardertools.com
hxxp://cvvsh0p.com
hxxp://fe-dumpstore.com
hxxp://profitbins.com
hxxp://carding-shop.com
hxxp://zonecvv.com
hxxp://torcrds.com
hxxp://shopvl.net
hxxp://prvtzone.com
hxxp://rdpwallmart.com
hxxp://xdedic.com
hxxp://smartstripes.biz
hxxp://cc-base.com

Related posts:

• What is Nassef from Darkode Up To?
• Exposing the Darkode Forum Bust and the Associated Individuals Behind It - Or How I Almost Got Kidnapped? - An OSINT Analysis
• Domain Portfolio Operated by Sp3cial1st from Darkode 
  

He's also known to be using renon66@mail.ru as his personal email where he is known to have registered the following domains:

hxxp://fe-dumpstore.com
hxxp://profitbins.com
hxxp://dump-service.com
hxxp://thugcarders.com
hxxp://torcrds.com
hxxp://shopvl.net
hxxp://cardertools.com
hxxp://cvvsh0p.com
hxxp://xdedic.com
hxxp://smartstripes.biz
hxxp://carding-shop.com
hxxp://zonecvv.com
hxxp://cc-base.com
hxxp://prvtzone.com
hxxp://rdpwallmart.com
hxxp://novlops.cc
hxxp://scene-tools.com
hxxp://fraudsmarket.com
hxxp://cardersvilla.com
hxxp://edumps.cc
hxxp://cvvlist.com
hxxp://c2bit-power.com
hxxp://procarder.com
hxxp://zanoled.com
hxxp://vic-socks.com
hxxp://freshcvv2.com
hxxp://sharkcc.com
hxxp://hotdumps.com
hxxp://dumpsvendor.com
hxxp://cardinghispano.com
hxxp://dumps4you.com
hxxp://ug-storecards.com
hxxp://source4dumps.cc
hxxp://getbette.com
hxxp://crimemarket.com
hxxp://cardingmaestro.com
hxxp://wt1shop.com
hxxp://cvvsite.com
hxxp://tonymontana.cc
hxxp://dumpsclinique.com
hxxp://bigcarder.com
hxxp://skycvv.com
hxxp://carderprofit.cc
hxxp://styxmarket.com

Real Time OSINT on NSO Group and Bulgaria's Circles Commercial Spyware Developers - An Analysis

If an image is worth a thousand words so is real time OSINT methodology. More on Bulgaria's Circles here and here.

Stay tuned.