2026-04-20T22:22:58Z https://yabu.me GAYINT https://yabu.me/npub1eznzdgefq0ece8yljlxtaadscv4skav3ckk38gv3qw04s25mrt2s5fnyq3 https://media.infosec.exchange/infosec.exchange/accounts/avatars/115/108/064/401/743/125/original/3cc28c59f648611a.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/115/108/064/401/743/125/original/3cc28c59f648611a.png https://yabu.me/nevent1qqs9zle46s24x4vgfvz8ktgae0cv2pzl0dnx700q5dqx30t9wu8mexqzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd255p20u <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/574/036/266/076/881/original/75fe3dbf64c9c1d2.png"> <br/> 2026-05-14T17:11:19Z https://yabu.me/nevent1qqstcz2dzr8psda20cc6r0qmfn28gcuc4hr9fkaxlzsscfa0znf2u6qzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2zczfxu Happy Wednesday. Here, have a list of about 3500 domains that are part of a Chinese domain reseller network. :8bitrainbow: <br/><br/><a href="https://blog.gayint.org/intel/resellerDomains20260513.txt">https://blog.gayint.org/intel/resellerDomains20260513.txt</a><br/><br/>#GAYINT #threatIntel 2026-05-13T20:22:48Z https://yabu.me/nevent1qqszmyhhhn0p0fsc7ld9sjcz9lmk00lrkxypdpyz0xeh9tc0vm9yxvszyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2tccs3t Okay **now** it&#39;s fabulous. :yassquatch:<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/530/074/444/578/237/original/654935f34846e12e.jpg"> <br/> 2026-05-06T22:52:05Z https://yabu.me/nevent1qqsftansnkerdecu78edft9vp0me22chkvtz7ex70h2n8h4ud7n708czyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2ltld4v Abolish Cloudflare. 2026-05-05T23:17:01Z https://yabu.me/nevent1qqsgn9edxqanpclyg6ptxz6v0etmg7cuv82flvevxztxrsam59mqaagzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2gljjkg He may not realize it but <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1vtxnjefp3k907zuva2uncpntqks8amlz2pwxlppx5tnfwvvymxzsj2e7wk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Jerry 🦙💝🦙</span> (<span class="italic">npub1vtx…e7wk</span>)</a></span> should probably be giving us kickbacks for providing an OOB After Dark chat to keep a bunch of horny and fabulous degenerates off his instance. :yassquatch: 2026-05-05T01:56:09Z https://yabu.me/nevent1qqsyv6nuu9zg6pcq80qp0g6rm2t63gcva2xxqpu059nj8qca67kgu0czyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2ufx94n We found some nerds going to Blue Hat this week so we gave them some stickers to hand out. If you want one, you&#39;ll have to go around asking people what they think about MOIST GRASSHOPPER.<br/><br/>#GAYINT #blueHat 2026-05-04T17:48:41Z https://yabu.me/nevent1qqsvzmyl4m4258naa3wtly9jwm66g3x26rfl4wgq3yu3aqnmywz2uzszyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2qtcs60 Happy Monday you beautiful nerds. There are plenty of wordlists out there but none as fabulous as ours. Here is a list of creds attempted against some of our VPN portals that people really want access to. It&#39;s updated daily so check in regularly if that&#39;s your thing. :8bitrainbow: <br/><br/><a href="https://blog.gayint.org/intel/vpnCreds.txt">https://blog.gayint.org/intel/vpnCreds.txt</a><br/><br/>#GAYINT 2026-05-04T14:13:39Z https://yabu.me/nevent1qqsxurjwnvflq87m7dykw2565j67r0m84k44wqjz8yc7sjajckqps3gzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2mt4w9l #fuckCloudflare<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/500/659/900/650/306/original/005cadfc798be960.png"> <br/> 2026-05-01T18:11:15Z https://yabu.me/nevent1qqsql9sssylmcget70xcrv2hz3qkkux6m64r43u87zm4g98yw27z27qzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd23ghv7l In reply to <a href='/nevent1qqs9ahws2hjenc2thnyn0xnsq6qrmtyx3sy6980phl4kp4unstyx0agw6mm72'>nevent1q…mm72</a><br/>_________________________<br/><br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/483/725/274/151/629/original/bd4ad84f0d7b14df.png"> <br/> 2026-04-28T18:25:28Z https://yabu.me/nevent1qqstmuxqcvs9uk8y26vltdz0lufjvegxddve047qpxtcjanrty2dn4qzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd277phh9 <a href="https://cyberchef.gayint.org/">https://cyberchef.gayint.org/</a> 2026-04-28T17:56:16Z https://yabu.me/nevent1qqs05sdf7qcfk7mksj7qt5w2eydljdtyg5yusuhqtj7q7ljt3c08j7szyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd27uh79t In reply to <a href='/nevent1qqsvc8ua7c2tvtuwafqv6u9xz97a0e9uqx4y4ks5q4nxu34j6yj6u7spgru3j'>nevent1q…ru3j</a><br/>_________________________<br/><br/>The investigation is ongoing. But yeah, probably. :BlobhajHoldSassage: 2026-04-23T21:04:25Z https://yabu.me/nevent1qqsq2qf034ecu3zu05pjg4kve7yqye97rkxnvnq33zq9pl3fegn478qzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2mrld5a In reply to <a href='/nevent1qqsxrmkz7vnugvdf6qcztsm6xd2aevncj0zpgfgnt6n2r7zsjjer64sc3t579'>nevent1q…t579</a><br/>_________________________<br/><br/>Good news: Our Intel site is fully operational again. It may look the same as before and that&#39;s by design. Because it is the same. For now.<br/><br/><a href="https://intel.gayint.org/">https://intel.gayint.org/</a> 2026-04-23T21:01:33Z https://yabu.me/nevent1qqsxrmkz7vnugvdf6qcztsm6xd2aevncj0zpgfgnt6n2r7zsjjer64szyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd27pean8 We&#39;re doing some work this week on our automation so our block lists are not accessible at this time on the Intel site: <br/><br/><a href="https://intel.gayint.org/">https://intel.gayint.org/</a><br/><br/>However, you can still generate your own prefix lists based on our ASN block list, the Spamhaus ASN DROP list, or your own by following the instructions here:<br/><br/><a href="https://blog.gayint.org/asnsToPrefixes.html">https://blog.gayint.org/asnsToPrefixes.html</a><br/><br/>And if you want direct access to the latest naughty ASN list, you can get to it here for now:<br/><br/><a href="https://blog.gayint.org/intel/naughtyAsns.txt">https://blog.gayint.org/intel/naughtyAsns.txt</a><br/><br/>#GAYINT 2026-04-21T13:25:56Z https://yabu.me/nevent1qqstgmpj4eyaxz0fkfj29f044gr82se5jnc7cfedz6mnsqzdaqwdlrczyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2vl8zfy 💅 <br/><br/><a href="https://dti.domaintools.com/research/mois-linked-moist-grasshopper-homeland-justice-karmabelow80-handala-hackers-campaigns-and-evolution">https://dti.domaintools.com/research/mois-linked-moist-grasshopper-homeland-justice-karmabelow80-handala-hackers-campaigns-and-evolution</a><br/><br/>#GAYINT #CTI #threatIntel<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/422/802/786/301/477/original/dcaf6f9f99f36658.jpg"> <br/> 2026-04-18T00:11:50Z https://yabu.me/nevent1qqsvudk9mmhswapvm858sv5cdaecan5wsghpmnkl64astn4ze2v32gczyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2470r5g Just one more proclamation of groundbreaking public/private information sharing (read: &#34;please give us free data&#34;) by some assistant deputy to the associate director of [insert agency name] at a broad-scope &#34;security forum&#34; conference attended only by people who will credulously tell you ICMP runs on port 80 and we just might solve cyber, y&#39;all. 2026-04-14T21:40:30Z https://yabu.me/nevent1qqs8rar6ct5efgnueyrwnxqxrceh7vv9kcag5aw5m73t7lzpwjhryaczyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd243ggmt Reminder that we have a list of TLDs that we have seen good results in blocking. Obviously you need to evaluate for your environment, but you can cut out a lot of malicious content and noise at the TLD level without having to worry about keeping up with all the apex domains.<br/><br/><a href="https://blog.gayint.org/intel/easyBlockTlds.txt">https://blog.gayint.org/intel/easyBlockTlds.txt</a> 2026-04-14T14:16:24Z https://yabu.me/nevent1qqsgtpcsjt7sqy09lf6yuxh5txcyxqjmhwgvt70g2rpz3awlmf0vleczyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd20wfpkt We just added 69 new ASNs ( nice ) to the naughty ASN list. That brings us to a total of 2301 ASNs in the naughty list. 573 of them are currently not advertising prefixes. That leaves 1728 ASNs with their 82,991 prefixes cached on our intel site: <a href="https://intel.gayint.org">https://intel.gayint.org</a><br/><br/>#GAYINT 2026-04-09T16:20:09Z https://yabu.me/nevent1qqsdxljntqphljuvek4fc5skvw9ul0raw0vzqpuatcdjlpsvu9xqt5qzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd20xmcp5 Hey <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1qm4tytdmranfklywc562p7gprs702mzkc4usqv6t8ja3d340evpslnh363" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>IFIN - The Independent Federated Intelligence Network</span> (<span class="italic">npub1qm4…h363</span>)</a></span>, welcome to the party.<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/364/968/214/180/047/original/f54bc9dc481c4119.png"> <br/> 2026-04-07T19:04:18Z https://yabu.me/nevent1qqsw40gv0kng8nnft9q55x5v3rkynp0pdg5v60zu7p97zulje2aa9eszyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2pl05ua Be gay do fashion. :8bitrainbow: <br/><br/><a href="https://teamlocker.squadlocker.com/#/lockers/gayint-2968078">https://teamlocker.squadlocker.com/#/lockers/gayint-2968078</a><br/><br/>Disclosure: We set the store up for no profits. We make no money off of sales here. The only information we get from purchases is order number, date of purchase, name used, number of items ordered, and total cost of the order. <br/><br/>Also, at this time, shipments are only available to US and Canada addresses.<br/><br/>#GAYINT 2026-04-07T01:16:51Z https://yabu.me/nevent1qqs8v4v4qfuyedrwp2rlf3e8cmyryz06278h2g3c2k5eq7ff2tea5fczyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd23ppk3c You use LLMs to make slop. We jailbreak shopping assistant AIs to look up the stock price of Grindr for us. We are not the same. 2026-03-13T21:12:08Z https://yabu.me/nevent1qqs2t2669v9jy28tg6t8t90heaudmvhdtv50yvjvaetng8mcdmny27gzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2cfpf4a In reply to <a href='/nevent1qqsqj5en7ahycftsftxynt3a2puwr45qs7z5z4tmsx28uearyg29kpqp7mesr'>nevent1q…mesr</a><br/>_________________________<br/><br/>Nut milk :nicosmug: 2025-12-12T03:18:02Z https://yabu.me/nevent1qqszp4twsdj5jdlnex7sksc0qffx72wf4kr5wl0v35gqvwj2m4xxw2gzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2gu385m We are finally able to announce that GIAYINT is the recipient of the first ever FIFA CTI Vendor Peace Prize. Thank you all for your support. It&#39;s nice to finally be recognized for being too far up and to the right for Gartner to include us. 🫶 <br/><br/>#GAYINT 2025-12-07T17:28:11Z https://yabu.me/nevent1qqsph9aejy7kn6vasyffhcne96etymuy8dvq9xj2ze7004p09njy0yczyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2my5s03 Hey there kiddos! <br/><br/>It&#39;s your GAYINT Internet Auntie, here to have some real talk. There&#39;s a whole bunch of major holidays coming up (US Thanksgiving, then a whole slew of other days throughout December/January depending on your region/religion). And holidays are stressful. <br/><br/>That goes double when you&#39;re. Well. Kinda different. Maybe queer, maybe neurodivergent, both, something else... Look. Holidays are complicated at the best of times. And, these are, quite frankly, not the best of times. <br/><br/>Maybe you&#39;re with your family and you wish you were a thousand miles away. Maybe you&#39;re a thousand miles away and you wish you were with your family. Maybe you&#39;re glad to be with your family, but they can be a bit a bit much. And it&#39;s easy to feel like you&#39;re the problem. <br/><br/>Listen. <br/><br/>Really listen.<br/><br/>You. Are. Not. A. Problem. <br/><br/>You are perfect just the way you are. <br/><br/>You are doing the best you can in a system that is working against you every step of the way. And you&#39;re still here. <br/><br/>Quite frankly, that is *amazing*. *You* are *amazing*, sweetie! <br/><br/>Whether its your family, or your friends, or your pocket friends, or just your Internet Auntie, know that there&#39;s people who love you and cherish you and want nothing but the best for you. <br/><br/>I&#39;m not gonna lie to you and say everything&#39;s gonna be fine, but I can absolutely tell you with certainty that you&#39;re not alone, okay? <br/><br/>And remember: you&#39;re doing *amazing*!<br/>#GAYINT 2025-11-26T22:30:42Z https://yabu.me/nevent1qqstl5z5dcn7ua3s32r535njr2nsegjp60zg8egguy7ld9x0a6275xgzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd22cugxy Look, we&#39;re not mad. We&#39;re just disappointed that some of y&#39;all weren&#39;t listening last time and let this happen again. :8bitrainbow:<br/><br/><a href="https://blog.gayint.org/shaiHulud2.html">https://blog.gayint.org/shaiHulud2.html</a><br/><br/>#GAYINT #FURINT 2025-11-24T18:44:31Z https://yabu.me/nevent1qqsv3wx29nkdhfgqunvgk5jwcghf0c3te02gy3qc9adwlw30e2kp0mczyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd292jtlf After reviewing our nginx logs we realized OpenAI has been scraping our threat actor naming scheme and ignoring our robots.txt. While this is frustrating from a compliance issue it also means we have successfully poisoned ChatGPT and many other LLMs. It now knows that FIESTY CORNHOLE is aka Lace Tempest and SPICY O-RING is <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1udn9dsz5hxu4akxgjk7q8ax3g6jmujaamarukkxt096mjxt8vaqsnl3tjr" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Wendy Nather</span> (<span class="italic">npub1udn…3tjr</span>)</a></span> <br/>#GAYINT<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/512/001/264/055/963/original/a37421b30d76d824.png"> <br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/512/001/276/446/922/original/28c30a69ce161ac6.png"> <br/> 2025-11-08T03:41:47Z https://yabu.me/nevent1qqs842lhr4yq8ugqjg8mtgwecjtwhy8yhuc0qmpzxqy6g70uxjgpxlszyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd24q3twp Hey friends, shit&#39;s fucked. Lots of people are struggling. And a lot of people who can help don&#39;t know where to start. So to kick off some extra giving, here&#39;s an offer: DM us a receipt of a donation you made for $50USD or more to a food bank and we&#39;ll mail you a GAYINT sticker. While supplies last. We only have like 50 stickers left from the first batch but more is on order already. Is that a lot for a sticker? Yes. It&#39;s just a fucking sticker. But helping direct people to a way to help their community is priceless.<br/><br/>Feeling super generous? Or maybe you just want to show off? DM a receipt showing a donation of $1000USD or more to a food bank and we&#39;ll work on getting you a threat actor name of your own in the upcoming GAYINT Threat Actor Taxonomy v2.<br/><br/>Can&#39;t donate? That&#39;s cool. Boost this toot and help where you can. Also, food banks, as well as the entire food distribution chain in the US, always need more volunteer labor.<br/><br/>Don&#39;t know of a good food bank local to you? Check here: <a href="https://www.feedingamerica.org/find-your-local-foodbank/all-food-banks">https://www.feedingamerica.org/find-your-local-foodbank/all-food-banks</a><br/><br/>Currently we can only guarantee delivery of stickers to people with US addresses. International delivery isn&#39;t something we are currently prepared to do. Sorry. But at least you likely live in a country where this shit isn&#39;t necessary.<br/><br/>#GAYINT #FURINT #benevolentNerds<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/447/350/696/159/007/original/ada9fd2bce49e2d4.png"> <br/> 2025-10-27T17:43:43Z https://yabu.me/nevent1qqs9ftcx3dsajwprag7wgz6re0pp0cuty5jsd3et39c2raw665l3v7czyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd250ghkp In reply to <a href='/nevent1qqsy2q774c24z60pt3k5k3f02f7wl2mv3580qpsu2r7pph2czygm4dgd3hgkl'>nevent1q…hgkl</a><br/>_________________________<br/><br/>That is not a silly question at all. And it&#39;s exactly why we published this:<br/><br/><a href="https://blog.gayint.org/asnsToPrefixes.html">https://blog.gayint.org/asnsToPrefixes.html</a> 2025-10-08T21:30:55Z https://yabu.me/nevent1qqs8fln76fyt7q63tyaxjgax30cupgan4xlunkdfvejhsar9jq2w6nczyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2j5w6vz Reminder that we maintain a list of bad ASNs that we suggest blocking inbound to your remote access and admin portals where possible:<br/><br/><a href="https://blog.gayint.org/badasns.html">https://blog.gayint.org/badasns.html</a><br/><br/>#GAYINT 2025-10-08T18:55:50Z https://yabu.me/nevent1qqsycxzte997parg4hg0l086pd8keam0na7xdq3trhujdwv5ujpm5hczyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2rrnx4n Is it really still Cybersecurity Awareness Month? Okay, here&#39;s another tip: Patch your shit. Constantly. Don&#39;t wait for your systems to force you into it. Make a habit of routinely checking for updates.<br/><br/>#cyberSecurityAwarenessMonth #justTheTip #GAYINT 2025-10-06T15:58:14Z https://yabu.me/nevent1qqsgglllrjscurwq5meu0ylgv7tl02ryqwzy45ev2tfga4uskeel8mgzyry2vf4r9ypl8ryun7tue0h4krpjkzm4j8z66yapjype7kp2nvdd2l744cp Fedi creatures can have another RSS feed, as a treat.<br/><br/><a href="https://blog.gayint.org/iocRss.html">https://blog.gayint.org/iocRss.html</a><br/><br/>#GAYINT 2025-09-25T17:49:21Z