Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/greynoise/statuses/115567035436048758">GreyNoise (greynoise@infosec.exchange)'s status on Tuesday, 18-Nov-2025 05:59:20 JST</a><a href="https://infosec.exchange/@greynoise" title="greynoise@infosec.exchange"><img src="https://gnusocial.jp/avatar/239158-48-20240209210313.webp" width="48" height="48" alt="GreyNoise" style="position: absolute; left: 0; top: 0;">GreyNoise</a></section><article><p>EU sanctioned Stark Industries in May. Leaked docs gave them 12 days warning.</p><p>Result: ASN shuffle, rebrand to THE.Hosting. Corporate shells changed, network behavior didn't.</p><p>We tracked it: AS44477→AS209847. Packets don't lie. <br>🔗 <a href="https://www.greynoise.io/blog/stark-industries-shell-game" rel="nofollow">https://www.greynoise.io/blog/stark-industries-shell-game</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/5871939#notice-11536116">In conversation</a><time datetime="2025-11-18T05:59:20+09:00" title="Tuesday, 18-Nov-2025 05:59:20 JST">about 3 months ago</time> <span>from <span><a href="https://infosec.exchange/@greynoise/115567035436048758" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@greynoise/115567035436048758">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: cdn.prod.website-files.com</div><h5><a href="https://www.greynoise.io/blog/stark-industries-shell-game">The Stark Industries Shell Game - When Bulletproof Hosting Proves Bulletproof</a></h5><div></div></header><div>EU sanctions hit Stark Industries in May 2025. GreyNoise data shows how the group quietly rebranded to THE.Hosting and kept its malicious infrastructure running.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
GreyNoise (greynoise@infosec.exchange)'s status on Tuesday, 18-Nov-2025 05:59:20 JST GreyNoise
EU sanctioned Stark Industries in May. Leaked docs gave them 12 days warning.
Result: ASN shuffle, rebrand to THE.Hosting. Corporate shells changed, network behavior didn't.
We tracked it: AS44477→AS209847. Packets don't lie.
🔗 https://www.greynoise.io/blog/stark-industries-shell-game
In conversationabout 3 months ago from infosec.exchangepermalink
Attachments
1. Domain not in remote thumbnail source whitelist: cdn.prod.website-files.com
  The Stark Industries Shell Game - When Bulletproof Hosting Proves Bulletproof
  EU sanctions hit Stark Industries in May 2025. GreyNoise data shows how the group quietly rebranded to THE.Hosting and kept its malicious infrastructure running.

Public

Embed Notice

HTML Code

Corresponding Notice