threat intel
The botnet you can't unplug: blockchain C2 in 2026
Attackers store malware C2 addresses on public blockchains where nobody can delete them. A roundup of 2026 campaigns, IOCs and what defenders can do.
I get in. Through doors, through web applications.
Juraj Daniš is a red team operator specialising in physical intrusion and black team operations, and a penetration tester for web applications and APIs. He has spent ten years in IT and more than five in offensive security, running engagements for organisations in fintech, banking and healthcare.
Certifications
CRTOCertified Red Team OperatorZero-Point Security
CAPenXCertified AppSec Pentesting eXpertThe SecOps Group
CNPenCertified Network PentesterThe SecOps Group
WEB1Web Application Pentester Level 1TryHackMe
Research
phishing
Homograph phishing attacks in 2026
Almost every TLD registry now blocks mixed-script domains, but whole-script Cyrillic fakes and accented Latin lookalikes still slip through in .com.
redteam
In-situ recon: one device for RF capture and covert photography
How I ran a covert RF spectrum survey and interior photography from a single antenna pole during an authorized red team engagement.