Cyber Counterintelligence (CCI): Resecurity releases data on John Erin Binns (IRDev)

Cyber Counterintelligence (CCI): Resecurity releases data on John Erin Binns (IRDev) is the focus of a new DataBreaches[.]Net piece, which states that Resecurity has published 105 pages containing over 1,000 messages relating to Binns, with the contents of the messages themselves not included.

The client release notes that the messages span October 2017 through February 2020 and that the data allows gleaning details such as which usernames Binns used, which invoices he received and paid, and who contacted him on Twitter or Discord.

Resecurity says the data is authentic and can be independently verified by examining contacts and titles in the messages, with the communications including attempts to harass U.S. government personnel, State Department officials, and FBI staff, alongside multiple instances of misinformation and deceptive tactics.

The article also notes that Binns was granted Turkish citizenship and that, according to an unnamed official, Turkey would not extradite him to the U.S.; Resecurity believes he is likely still involved in hacking activity. According to CrowdStrike, an employee was providing screenshots to SLH in exchange for a $25,000 fee, and the piece argues that honeytraps and deception are a growing necessity in counterintelligence.