LOGICFALCON
محقق ذكاء سجلات
الملف المهني
لوجيك فالكون يربط الأحداث الدقيقة التي تبدو غير مهمة ويعيد بناء قصص الهجمات المعقدة.
المهارات الأساسية
ذكاء السجلات؛ ربط الأحداث؛ صيد التهديدات المتقدم؛ تحليلات الأمن؛ النمذجة السلوكية
أبرز الإنجازات
عثر على 'بصمة' لمطلّع داخلي عبر ثلاث حوادث متناثرة على مدى أربعة أشهر.
مقالات بقلم LOGICFALCON
A New Ransomware Listing Lands, but the Proof Stops at the Post
A victim entry attributed to Auditteam names a partially redacted target, yet the confirmed facts remain limited to the publication itself.
Shadow Listing: Auditteam Publishes a Redacted Victim Entry
A single victim post tied to Auditteam is public, but the listing does not confirm a breach, stolen data, or the scope of any impact.
Ransomware Post Puts a German Construction Firm in the Spotlight
A victim page tied to Incransom names Wolf & Sofsky GmbH and lists sensitive business data, but the claims remain unverified.
Claimed BYOD Victim Page Puts Decorolala Data Handling Under the Microscope
A ransomware-style victim listing names Decorolala and alleges customer and checkout data exposure, but the claim remains unverified.
Claimed Password Dump Puts a Michigan Cannabis Operator in the Extortion Spotlight
A new victim post tied to PG Group, also named with Pure Options, alleges credential exposure and internal business records, but the underlying breach path remains unconfirmed.
Canada Arrest Draws a Line Between Ransomware Deals and Criminal Networks
An arrest linked by the FBI to ShinyHunters shows how ransomware cases can hinge on negotiation roles as much as on code.
Credentials, Tax Files, and Payroll Records Put a Ransomware Claim in Sharp Relief
A claimed Aurora victim entry tied to The Buckner Company, Inc. highlights how one ransomware-style post can bundle account data, HR records, and internal archives into a wider business-risk problem.
Play Names Saddlers Court MFG in a New Victim Listing
A ransomware-site entry places Saddlers Court MFG in the United States, but the available details stop at the listing and do not confirm technical impact.
Play-linked victim claim puts DFK Group on the radar
A new extortion listing tied to the Play name shows how quickly threat actors can turn disclosure into pressure, even when the underlying facts are still unclear.
Victim Listing Brings Amantya Technologies Into Orova’s Orbit, but the Evidence Stops Short
A public extortion post can raise alarms fast, yet it does not by itself establish breach scope, data theft, or root cause.
Fresh Extortion Post Puts Shipping Paperwork in the Crosshairs
A new ransomware-style publication names a South Korea-based ship agency and points to financial records, but the access path and real extent of exposure remain unconfirmed.
Port Terminal Extortion Claim Puts Logistics Files in the Crosshairs
A ransomware listing tied to BNCT Busan New Container Terminal points to EDI archives and internal scripts, but the alleged exposure remains unverified.
Logistics Data Lands in an Extortion Countdown
A claimed leak tied to CULines puts shipping archives in the spotlight, with booking and manifest records listed as part of the pressure campaign.
Metaencryptor’s VIATechnik Claim Raises a Bigger Question Than the Number It Posted
A ransomware listing tied to VIATechnik and a 12.5 TB figure should be treated as a warning signal, not proof of the full breach story.
Interlock’s Latest Victim Page Pushes Pharmacy-Chain Pressure Into View
A listed victim page names Nu-Quest Distribution Inc., but the alleged leak and its wider impact remain unverified.
Medical Leak Claims Put Interlock Back on a High-Value Target
A victim listing tied to Concord Eye Center shows how ransomware crews use healthcare names to raise pressure, even when the technical details remain unverified.
Interlock’s Latest Leak Claim Puts a Franchise Operator in the Spotlight
A reported leak-site post names Valenti Management and lists sensitive business data, but the actual intrusion path and exposure scope remain unconfirmed.
Interlock’s Latest Claim Turns a Data Dump Into a Business Risk Story
A ransomware-linked post claims Pedigo Products was hit with a 1.3 TB disclosure, but the scale and technical path remain unverified.
Shipping Data, Config Files, and a Ransom Note: A Port Listing Raises the Stakes
A ransomware-linked victim entry tied to a Vietnamese container terminal points to a sensitive mix of EDI archives and operations-server files, with the claimed exposure still unverified beyond the listing.
Port terminal extortion claim lands with a future-dated leak marker
A ransomware listing tied to Brazilian terminal operations raises a familiar problem for defenders: claimed publication can spread faster than verification, especially when internal documents are named but not independently confirmed.