Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Intelligence library
Loading the current evidence view. Navigation and account controls remain available.
Connected intelligence · live corpus
Start from a real-world incident, follow reporting as it arrives, or inspect indicators extracted from Telegram. These are three views of the same corpus, not three disconnected products.
Curated context
On 6 May 2022 OFAC sanctioned Blender.io — the first virtual-currency mixer ever designated. Blender was used to launder proceeds of the DPRK-linked Lazarus Group's ~$620M Axie Infinity / Ronin Bridge theft.
On 5 April 2022 the US Treasury's OFAC designated Hydra Market — then the world's largest darknet marketplace — in a coordinated action with German law enforcement, which seized its servers. The designation named the cryptocurrency addresses Hydra used to launder proceeds.
On 21 September 2021 OFAC sanctioned SUEX OTC, S.R.O. — the first cryptocurrency exchange ever designated — for facilitating transactions for ransomware operators. A large share of SUEX's known transaction history traced to illicit actors.
Ingested continuously
Ars Technica — Security · 7h ago
Microsoft Security Blog · 10h ago
Ars Technica — Security · 12h ago
SecurityWeek · 13h ago
Telegram intelligence
Browse extracted indicators without signing in. Account access preserves the channel and message context needed for deeper review.
SecurityWeek · 13h ago