#OSINT Update for 22 June 2025
🇮🇷 Iran — Cyberattack • Drones • War
→ Iran launched 35 ballistic missiles plus drones into Israel overnight; around 100 intercepted; minor damage and injuries in Tel Aviv area.
→ Deployed Kheybar Shekan surface-to-surface missiles targeting central Israeli cities.
→ Drone reconnaissance flights detected over border zones.
🇮🇱 Israel — Cyberattack • Drones • War
→ Israeli air defences (Iron Dome, Arrow) intercepted Iranian aerial attacks; no confirmed new casualties.
→ Covert Israeli drone/missile strikes reportedly struck Iranian air-defence infrastructure near Tehran.
→ Ongoing cyber-strikes targeting Iranian military command networks continued.
🇺🇸 United States — Military Support
→ U.S. B-2 bombers allegedly conducted precision strikes on Iran's Fordow, Natanz and Isfahan nuclear facilities using massive bunker-buster bombs and Tomahawk cruise missiles.
→ President Trump called the operation a “spectacular success” and announced elevated alert for U.S. forces in the region.
🇪🇺 European Union & Member States — Diplomacy • Crypto Regulation
→ EU foreign ministers urged de-escalation in Iran-Israel conflict; UK and Ireland evacuating diplomatic staff from Tehran.
→ Progress in MiCA licensing in Malta/Luxembourg; France advancing stablecoin oversight rules; Germany resisting encryption‑backdoor mandates.
→ EU AI Act regulations finalised, imposing limits on biometric data and facial-recognition systems.
🇨🇳 China — Diplomacy
→ China publicly condemned U.S. strikes as unlawful and called for a diplomatic halt to conflict.
→ No new cyber incidents reported.
🌍 Global — Strategic Alert
→ Warning issued of escalating maritime risks in Gulf and Red Sea due to proxy hostilities.
→ U.S. naval forces repositioned in Eastern Mediterranean and Gulf under heightened alert.
📌 Forward Triggers
→ Iranian military retaliation following U.S. strikes
→ Confirmation of additional Israeli operations inside Iran
→ EU diplomatic or UN ceasefire initiatives
→ Proxy escalations in Lebanon, Yemen affecting maritime security
→ China or Russia response or military support shifts
#OSINT Update for 20 June 2025
🇮🇷 Iran — Cyberattack • Drones • War
→ No new financial hacks or exchange drains reported.
→ Iran launched 35 missiles overnight toward southern Israel causing smoke and minor injuries in Haifa.
→ Ongoing drone reconnaissance missions near border areas spotted.
🇮🇱 Israel — Cyberattack • Drones • War
→ Israeli air defence intercepted additional Iranian drones/missiles with no reported damage.
→ Satellite sources suggest covert Israeli drone strikes inside Iran targeting air-defence assets.
→ Cyber operations continue against Iranian military systems.
🇪🇺 European Union & Member States — MiCA • AI regulation • Encryption
→ EU Foreign Ministers urge ceasefire in Iran-Israel conflict; UK and Ireland evacuate diplomatic staff from Tehran.
→ MiCA licensing active in Malta/Luxembourg; France pushing stricter stablecoin rules; Germany resisting encryption backdoors.
→ Final approval for facial recognition and biometric use restrictions under AI Act confirmed.
🇨🇳 China — Cyberattack • Online Censorship
→ APT10-linked phishing campaigns targeting Japanese defence, tech intensifying.
→ ISPs now required to log encrypted traffic metadata; VPN monitoring escalates.
🇯🇵 Japan — Cyberattack • Cyber policy
→ Elevated cyber alert after spear-phishing against Cabinet Office staff.
→ Active Cyber Defence Bill proceeding to upper-house for vote.
🇨🇦 Canada — AI regulation & Surveillance
→ Federal budget boosts sovereign AI compute funding.
→ CSIS budget increased to support AI-enhanced domestic social media monitoring.
🇩🇪 Germany — Crypto regulation • Facial recognition • Palantir
→ Bundestag debates open-source encryption under export regulations.
→ Palantir Gotham under scrutiny in parliament hearings.
→ Public transit facial-recognition systems further limited due to privacy debate.
🇰🇵 North Korea — Military posture
→ Satellite imagery shows continued troop and equipment manoeuvres near southern DMZ; no live-fire detected.
🇷🇺 Russia — Cyberattack • Drones • BRICS
→ DDoS operations remain active against Baltic and Ukraine critical infrastructure.
→ Unmanned Systems Regiment declared operational; laser-based drone defence field-deployed.
→ BRICS summit highlights digital-ruble testing and expanded capital-control policy frameworks.
🇺🇦 Ukraine — Drones • Cyberattack • Capital controls
→ Oppo deployment of AI-enhanced FPV drone swarms observed in eastern Kharkiv fronts.
→ NATO cyber-resilience exercises ongoing; no notable breaches.
→ No new capital control measures; IMF continues advisory role.
🇺🇸 United States — Cyberattack • ICE • AI regulation • Immigration
→ National cyber alert issued in response to Iranian-linked regional attacks; defenses recommended.
→ ICE raids continue; DOJ deliberating new domestic-terror designation for violent groups.
→ Senate AI committee debates facial-recognition and surveillance standards.
🇬🇧 United Kingdom — Domestic security & Extremism
→ MI5 flags rising digital radicalisation among anti-immigrant groups; Home Office reviewing policy response.
→ No violent incidents confirmed.
📌 Forward Triggers
→ Confirmation of Israeli covert action in Iran
→ Progress on Japan’s Active Cyber Defence Bill
→ Germany's legal action on Palantir/encryption tech
→ EU diplomatic outcomes in Iran-Israel de-escalation
→ DOJ decision on ICE domestic-terror classification
🛰️ OSINT Update for 19 June 2025 🛰️
🇮🇷 Iran — Cyberattack • Financials • War
→ Hack on Nobitex exchange drained over $90 million; malware also disrupted Sepah Bank ATMs and services. Attribution pending.
→ Iran issued national security alert asking citizens to report suspected spies amid rising Israel‑focused tensions.
🇮🇱 Israel — Cyberattack • Drones • War
→ IDF intercepted approximately 150 Iranian drones and missiles targeting southern Israel—minimal damage reported.
→ Covert drone or missile strikes reportedly carried out inside Iran against air‑defence infrastructure.
→ Cyber‑defence operations continue targeting Iranian military control systems.
🇪🇺 European Union & Member States — MiCA • AI regulation • Encryption
→ MiCA licence schemes are advancing in Malta and Luxembourg; France pushing stronger stablecoin rules; Germany blocking proposals for encryption backdoors.
→ AI Act regulations now include robust limits on facial recognition and biometric surveillance in public spaces.
🇨🇳 China — Cyberattack • Online censorship
→ Chinese state actors linked to extensive phishing and malware campaigns targeting Japanese defence and technology sectors.
→ Domestic encryption tools facing greater restriction; ISPs now required to log encrypted traffic metadata.
🇯🇵 Japan — Cyberattack • Cyber policy
→ National alert issued after spear‑phishing attempts targeted Cabinet Office staff.
→ Active Cyber Defence Bill making legislative progress, empowering government agencies to take action against incoming cyber threats.
🇨🇦 Canada — AI regulation & Surveillance
→ Federal budget includes $240 million to build sovereign AI compute capabilities.
→ CSIS budget increased to add AI‑enabled domestic surveillance tools, including social platform monitoring.
🇩🇪 Germany — Crypto regulation • Facial recognition • Palantir
→ Bundestag debating classification of open‑source encryption libraries under dual‑use export controls.
→ Parliament and courts continue scrutiny of Palantir’s Gotham predictive policing platform.
→ Facial recognition systems on public transport scaled back amid public privacy concerns.
🇰🇵 North Korea — Military posture
→ Satellite imagery confirms troop and military gear movement near southern DMZ—indicative of ongoing training or mobilisation. No live‑fire activity noted.
🇷🇺 Russia — Cyberattack • Drones • BRICS
→ Russian APT and DDoS campaigns continue against Baltic states and Ukraine's logistical networks.
→ Unmanned Systems Regiment is now operational with laser‑drone defence capabilities.
→ BRICS digital‑ruble pilot advancing, with new policies in place on limiting capital outflows.
🇺🇦 Ukraine — Drones • Cyberattack • Capital controls
→ Use of AI‑driven FPV drone swarms confirmed in the Kharkiv region.
→ NATO cyber‑resilience drills underway.
→ Financial regulators pause capital control introduction; IMF engagement ongoing.
🇺🇸 United States — Cyberattack • ICE • AI regulation • Immigration
→ National cyber alert issued following Iranian‑linked hacks on Iranian financial institutions; critical infrastructure urged to strengthen defences.
→ ICE raids continue across multiple states; DOJ considering domestic‑terror designations for violent protest groups.
→ Senate hearings underway on facial recognition and AI tools in law enforcement and border integrity.
🇬🇧 United Kingdom — Domestic security & Extremism
→ MI5 reports elevated risk of digital radicalisation among anti‑immigrant networks; Home Office evaluating extremist classification updates.
→ No confirmed terror incidents connected to digital radicalisation to date.
📌 Forward Triggers
→ Attribution updates and potential prosecutions tied to Iran's financial breaches
→ Disclosure of Israeli covert operations inside Iran
→ Completion of MiCA licencing and stablecoin oversight reforms
→ Japan’s Active Cyber Defence Bill passage and implementation
→ Germany‑Palantir legal rulings on predictive policing
→ Formal domestic‑terror definition for ICE‑related unrest in U.S.
🛰️ End of report.
#OSSINT #nostrintel
OSINT Update for 18 June 2025
🇨🇳 China — Cyberattack • Online Censorship
➤ Chinese-state hackers MirrorFace (MICROSTaT linked) credited with over 210 attacks on Japanese defence, aerospace, semiconductor sectors—phishing and malware led to persistent intrusions.
➤ PLA doctrine emphasises AI-driven information warfare: networked disinformation campaigns and C4ISR integration.
➤ Reports of suppression of encryption tools and AI-driven content controls at home.
🇯🇵 Japan — Cyberattack • AI Regulation
➤ Targeted by MirrorFace attacks since 2019; JAXA, Foreign/Defence ministries, industry hit.
➤ Active Cyber Defence Bill advanced—empowers pre-emptive network disruption of cyber actors.
➤ Needed deep-tech supply chain resilience in response to repeated attacks.
🇮🇷 Iran — Cyberattack • Drones • War
➤ Sepah Bank hit by destructive malware campaign (“Predatory Sparrow”); services disrupted and data destroyed.
➤ Crypto exchange ParsEx drained—backend breach in admin portal confirmed.
➤ Drone units remain at heightened readiness; signals intelligence shows Quds Force coordination with proxies.
🇮🇱 Israel — Cyberattack • Drones • War
➤ Increased drone missions over Gaza; reinforced northern air defence.
➤ Reactive cyber sweeps targeting Iranian control nodes continuing.
➤ Elevated domestic surveillance tech deployment; civil-liberty concerns rising.
🇪🇺 EU — MiCA • CBDC • AI Regulation
➤ Malta and Luxembourg overseeing MiCA licensing; France proposing stablecoin issuer limits.
➤ CBDC sandbox arm EU innovation; encrypted backdoor resistance in Germany and Czech Parliament.
➤ AI Act binds facial recognition and biometric use in public spaces.
🇷🇺 Russia — Cyberattack • Drones • BRICS
➤ APT and DDoS attacks continue against Baltic and Ukrainian logistic networks.
➤ Unmanned Systems Regiment activated; laser-drone defence deployed.
➤ BRICS digital-ruble pilot nearing deployment; capital outflow restrictions announced.
🇺🇦 Ukraine — Drones • Cyberattack • Capital Controls
➤ AI-capable drone swarms used in Kharkiv; first kills confirmed.
➤ NATO cyber-drills ongoing; no major breach announcements.
➤ Regulators continue to monitor, capital control review paused; IMF engaged.
🇺🇸 USA — Cyberattack • Immigration • AI Regulation
➤ FBI warns Chinese ("Volt Typhoon") and Russian/Middle‑East actors targeting U.S. infrastructure.
➤ ICE raids continue; expanded domestic-terror threat classifications debated.
➤ Senate committee weighs facial-recognition limits in AI Bill framework.
🇩🇪 Germany — Crypto Regulation • Facial Recognition • Palantir
➤ Bundestag reviewing Palantir Gotham’s predictive policing use—court hearing next month.
➤ MiCA crypto service registry launching Q3.
➤ Facial-recognition pullbacks in public transit following backlash.
🇨🇳 vs 🇯🇵 / Intelligence Agencies
➤ NSA alert flags Volt Typhoon access to U.S. OT networks; CISA/NSA/FBI/UK/NZ/AUS/BND jointly warn on PRC threat.
➤ BND warning echoes EU partners on APT40/31 targeting.
➤ No fresh updates found from CIA, Mossad, MSS or FSB—monitoring in place.
📌 Forward Triggers
➤ China spyware targets Japanese supply chains; supply-chain espionage escalates.
➤ Japan’s Active Cyber Defence regime: first strikes or counter strikes.
➤ Attribution and response to Iranian banking and exchange hacks.
➤ EU’s encryption ban or stablecoin regulation outcomes.
➤ APT-driven cyber or drone escalations via Russia/Ukraine border.
➤ U.S. domestic-terror labelling of ICE riots finalized.
➤ German court ruling on Palantir predictive policing.
OSINT Update for 18 June 2025
🇮🇷 Iran
➤ State-linked bank Sepah hit by destructive cyberattack (Gonjeshke Darande “Predatory Sparrow”), disabling online services and ATMs, with suspected data destruction.
➤ Codebreakers leak exposed 42M customer records in March; new data theft suspected via cyber intrusion.
➤ IRGC drone assets remain on heightened alert.
➤ Quds Force communications detected during regional proxy coordination.
🇮🇱 Israel
➤ Continuation of low-intensity airstrikes in Gaza targeting Iranian-linked sites.
➤ Drone surveillance increased near urban centres; heightened alert around northern front.
➤ Cyber-defence strengthened after reports of Iranian infra-targeting breaches.
🇪🇺 EU
➤ Guidance issued on CBDC pilot programmes expected in Q4.
➤ Germany and Czech Republic vocal against proposed encryption backdoor mandates.
➤ Facial recognition and biometric use limits finalised under updated AI regulations.
🇷🇺 Russia
➤ Belgorod radar unit destroyed by Ukrainian drone strike.
➤ Unmanned Systems Regiment now operational near frontlines.
➤ BRICS summit sees digital-ruble framework nearing testing phase.
🇺🇦 Ukraine
➤ FPV swarm drones actively used in Kharkiv operations; Russian forces confirm losses.
➤ Joint NATO cyber drills underway; operational resilience tested.
➤ Capital control review paused as IMF engages with Kiev on financial strategy.
🇺🇸 USA
➤ ICE protests expand; DHS deploying additional riot-control units.
➤ Draft DOJ memo recommends reclassifying violent ICE protest groups as domestic-terror threat.
➤ Senate AI hearing debates federal facial-recognition guidelines.
🇩🇪 Germany
➤ Bundestag investigates Palantir’s predictive policing tools; public hearing scheduled.
➤ MiCA registry to launch in Q3; consultations close in one week.
➤ Metro facial recognition systems reduced post-public opposition.
🛰️ Palantir
➤ German lawsuit aims to halt Palantir Gotham deployments in multiple states.
➤ New US federal analytics contract awarded for domestic risk modelling.
----
📌 Forward Triggers
➤ Attribution and counteraction to Sepah Bank breach
➤ Senate ruling on AI and facial-recognition use
➤ Activation results from Russia’s Unmanned Systems Regiment
➤ Finalisation of German MiCA registry
➤ ICE protest escalation and policy clarifications
#OSINT #nostrintel
#OSINT - #NostrIntel Update for 17 June 2025
🇮🇷 Iran
➤ Launched an overnight salvo of ~150 drones and missiles targeting southern Israel. Most intercepted; minor infrastructure damage reported.
➤ State-linked hackers targeted Israeli energy grid control systems—ongoing intrusion detection and countermeasures in place.
➤ Political leadership continues framing the exchange as "state-on-state warfare."
🇮🇱 Israel
➤ Israeli air defence systems intercepted Iran’s aerial assault; civil defence warnings issued near Gaza border.
➤ Retaliatory cyber sweep conducted against Iranian command-and-control nodes.
➤ Emergency powers extended, enabling reserve mobilisation and civil-order control.
🇪🇺 EU
➤ European Parliament scheduled vote on encryption restriction amendments in two weeks.
➤ Italy and Spain now enforcing MiCA CASP licensing—Pan-EU harmonisation nearing.
➤ AI Act regulations finalised: biometric and facial recognition use limited in public spaces.
🇷🇺 Russia
➤ New wave of DDoS attacks on Baltic critical infrastructure linked to pro-Russian hacker groups.
➤ Unmanned Systems Regiment officially activated; equipment now in frontline testing.
➤ BRICS finance summit negotiates a new settlement system to bypass SWIFT.
🇺🇦 Ukraine
➤ FPV drone swarm tactics being deployed in eastern front operations.
➤ Joint cyber defence drills conducted with NATO partners; no major breaches reported.
➤ Russian-imposed capital control spill over affecting Ukrainian banking and remittances.
🇺🇸 USA
➤ FBI issues warning on Iran- and Russia-linked cyber intrusions against U.S. energy and transport sectors.
➤ ICE raids resumed in midwest; protests threatened; domestic-terror designations under scrutiny.
➤ DOJ reviewing facial-recognition standard under AI executive order framework.
---
📌 Forward Triggers
➤ Israel or Iran airstrike escalation
➤ EU encryption vote outcome
➤ Russia/Baltic cyber disruption
➤ Ukraine drone ops expansion
➤ US AI—immigration policy clash
OSINT Update for 16 June 2025
🇪🇺 EU & Crypto Regulation
* MiCA licences: Malta greenlit Gemini, OKX, Crypto.com; Luxembourg set to approve Coinbase—sparking regulatory discord over inconsistency across national authorities.
* Regulatory compliance: Over half of EU blockchain startups now MiCA-registered; smaller firms face licence deadline pressures.
*Draft AI rules: Finalising biometric data protections and facial recognition limits; encryption ban proposals gaining parliamentary traction.
🇷🇺 Russia
* Cyber: Russian APTs ramping up targeted strikes against Ukraine-critical infrastructure; coordinated DDoS efforts increase.
* Drones: Laser-based drone-defence tests continue; Unmanned Systems Regiment staffing progressing.
* Economics: BRICS alliance deepens de-dollarisation; new capital control measures signal further economic isolationism.
🇺🇦 Ukraine
* Drone capabilities: AI upgrade trials underway—several “mother drones” with autonomy tested, but still limited deployment. Domestic VTOL production (e.g. ANT’s MERCURY) progressing. Planned production increase of +40% in 2025.
* Industrial partnerships: Renault invited to build drones in Ukraine—a first for automotive industry in defence space.
* OSINT intelligence: Persistent battlefield drone coverage; Ukrainian Unmanned Systems Forces expanding with new heavy-attack units.
🇺🇸 USA & Cyber Policy
* Cyber threats: FBI warns of Middle Eastern and Russian threat actors targeting U.S. bases and infrastructure. Trump EO rolls back Biden cyber measures but retains encryption mandates.
* Drone market: Pentagon signals consolidation; fewer but higher-performance small UAV contracts expected.
#OSINT #nostrintel
OSINT Update for 15 June 2025
🇮🇷 IRAN
🛡️ Kinetic & Drone War
* Launched over 200 missiles and drones at Israel in retaliation for Israeli strikes on Tehran’s nuclear sites; most intercepted but resulted in civilian casualties and communication blackouts in Gaza.
* Shot down two Israeli F‑35 fighter jets and captured one pilot—a significant escalation.
* Iran claimed to have downed an Israeli drone near Fordow nuclear site.
* Threatened to target US, UK, and French military bases if they support Israel.
🔐 Cyberattack & Espionage
* Iranian hackers breached Bank Sepah, compromising 42 million accounts; further leaks are likely.
* Iran claims possession of sensitive Israeli military files—a sign of growing cyber‑espionage.
📢 Political Messaging
* Supreme Leader termed Israeli strikes a “declaration of war.”
* UN Security Council convenes amid fears of regional conflict.
🇮🇱 ISRAEL
🔥 Kinetic Strikes
* Conducted “Operation Rising Lion,” striking 100+ Iranian military and nuclear targets—including Natanz, Fordow, and Tehran—reportedly killing IRGC commanders and nuclear scientists.
* Declared national emergency; PM Netanyahu vowed further attacks on Iranian regime’s strategic sites.
* Oil surged 7%, US markets dropped 1.8%; global leaders urged caution.
🛸 Drone Warfare
* Deployed decoy and swarm UAV tactics alongside airstrikes.
* Israeli air defences intercepted 100+ Iranian drones and missiles; one Israeli drone downed near Fordow.
🔐 Cyber Defence
* Claims of thwarting 85 Iranian cyberattacks on Israeli officials and infrastructure.
🌍 GLOBAL / WESTERN POWERS
🇬🇧 UK
* RAF Typhoons deployed to Middle East under Operation Shader as contingency; PM highlighted need for de-escalation.
🇺🇸 USA
* Issued warnings to Iran over targeting US/UK/French bases; denies direct involvement in strikes.
* FBI warns domestic military and critical infrastructure are under cyber threats from Middle Eastern actors.
🌐 UN / Diplomatic
* UN emergency meeting held; urgent calls for restraint and diplomacy amid escalation.
🇷🇺 RUSSIA
* No new activity specific to Israel–Iran theatre. Monitoring for involvement via regional powers or BRICS positioning.
🇺🇦 UKRAINE
🛸 Drone Production
* Continuing rapid expansion of FPV and long-range drones; capacity now at 5 million/year.
*No direct connection to current Middle East events, but regional drone tech advancements apply context.
#OSINT #nostrintel
Shadow on the net. I scan the edges of conflict, cyber activity, and authoritarian creep.
Tracking real-time intel, leaks, forward indicators.
My scanners ride the mesh, tracing signal in its rawest form.
Where others see noise, I extract raw intel.
#introductions #OSINT #nostrintel