Lightnews — Scholar-powered news

Allison Nixon

@nixonnixoff.bsky.social

6.2K followers 1.1K following 160 posts

Chief Research Officer @ Unit 221B
most reliable way to reach me is my company's outreach form on the website

my other urls:
https://infosec.exchange/@nixonnixoff
https://www.linkedin.com/in/allison-nixon-81822124/
don't bother contacting me on twitter

Posts Replies Media Videos

Allison Nixon

@nixonnixoff.bsky.social

They were a Chainalysis customer and had access to their data?

www.youtube.com/watch?v=jk2U...

DigitalMint Boosts Its Compliance and Investigations Program

YouTube video by Chainalysis

www.youtube.com

November 3, 2025 at 6:16 PM

Allison Nixon

@nixonnixoff.bsky.social

Also this breach happened before the layoffs and when *everything was fully staffed*. Can you imagine whats happening now.

October 11, 2025 at 4:27 AM

Allison Nixon

@nixonnixoff.bsky.social

Violent gangs of children are also hacking PACER to find out if their friends snitched. It is a free for all.

www.justice.gov/usao-nj/medi...

k. Approximately 18 megabytes of data, including a file
containing an export of thousands of names, titles, and work
locations of U.S. Courts users that was dated January 12,
2025, were recovered from Server-2. A representative of the
U.S. Courts stated, in substance and in part, that one of the
compromised accounts had exported a file on January 12,
2025, of U.S. Courts account users.
l. A representative of the U.S. Courts stated, in substance and
in part, that three users had their accounts reset using multifactor authentication software. That same software was
located on Server-2. Further, the evidence of the unique
identifiers for each compromised account was also recovered
from Server-2.

October 11, 2025 at 3:49 AM

Allison Nixon

@nixonnixoff.bsky.social

It makes me happy :)

September 24, 2025 at 8:12 PM

Allison Nixon

@nixonnixoff.bsky.social

unironically yes. every single time.

August 20, 2025 at 12:32 AM

Allison Nixon

@nixonnixoff.bsky.social

ddosing him only makes him stronger

brian krebs on signal chat having way too much fun with this

August 20, 2025 at 12:27 AM

Allison Nixon

@nixonnixoff.bsky.social

These kinds of articles need to involve the sobering realities of arrested hackers post-pandemic. The article opens with the 4 arrested, but doesn't mention one was publicly ID'ed as a member of 764. Hiring is a non starter. Your quote is on the money. Pre-offense MUST be the focus.

August 19, 2025 at 11:34 PM

Allison Nixon

@nixonnixoff.bsky.social

I crosspost between Twitter and Bluesky, but sadly Bluesky does not have poll functionality. So I will post a screenshot of a poll I am running over there. Don't bother visiting to vote, because it was a trick question anyways

What is more dangerous to involve in a DDOS attack?
Five webcams in Alaska
36.4%
Krebsonsecurity.com
63.6%
11 votes
·
6 days left

August 19, 2025 at 9:23 PM

Allison Nixon

@nixonnixoff.bsky.social

Obligatory Krebs article

krebsonsecurity.com/2025/08/oreg...

Oregon Man Charged in ‘Rapper Bot’ DDoS Service

A 22-year-old Oregon man has been arrested on suspicion of operating "Rapper Bot," a massive botnet used to power a service for launching distributed denial-of-service (DDoS) attacks against targets -...

krebsonsecurity.com

August 19, 2025 at 9:04 PM

Allison Nixon

@nixonnixoff.bsky.social

DOJ shoutout for our company in this case too

www.justice.gov/usao-ak/pr/o...

Oregon man charged with administering “Rapper Bot” DDoS-for-hire Botnet

ANCHORAGE, Alaska – An Oregon man was charged by a federal criminal complaint today in the District of Alaska on charges related to his alleged development and administration of the “Rapper Bot” DDoS-...

www.justice.gov

August 19, 2025 at 9:03 PM

Allison Nixon

@nixonnixoff.bsky.social

bsides LV keynote. i found the live stream that has my talk. go here and go to negative 5 hours 37 minutes (will be a different time value as time goes on...)
www.youtube.com/watch?v=4CD9...