Top all-time · #1024
Recorded Future
Company blog · recordedfuture.comsecurity
Recorded Future is the company blog at recordedfuture.com, writing about security. Since 2010, 64 different Hacker News readers have linked it 74 times, most often “Recorded Future - Unlock The Predictive Power Of The Web”. It is still writing: the last post was on 2026-10-29, and you can follow it by feed.
Too few sampled comments (20) to say how often HN recommends it.?
Why HN links it
HN readers link Recorded Future's threat research reports, mostly as sources on state-linked hacking, cybercrime and influence operations. Most comments only cite them as evidence.
Summarised by Claude from a sample of 20 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Get real-time, actionable cyber threat intelligence with Recorded Future. Mitigate cyber risks, prioritize threats, and proactively secure your organization.
Most-linked posts?
- Recorded Future - Unlock The Predictive Power Of The Web4 people · 4 mentions · first linked 2010-08-10
- North Korea Revolutionized the Internet as a Tool for Rogue Regimes3 people · 3 mentions · first linked 2020-02-10
- Beyond Hybrid War: How China Exploits Social Media to Sway American Opinion2 people · 3 mentions · first linked 2019-03-08
- How Al-Qaeda Uses Encryption Post-Snowden (Part 2)2 people · 2 mentions · first linked 2014-08-01
- Military Reaper Drone Documents Leaked on the Dark Web2 people · 2 mentions · first linked 2018-07-11
- APT10 Targeted Norwegian MSP and US Companies in Sustained Campaign2 people · 2 mentions · first linked 2019-02-06
- Russian-Speaking Hacker Selling Access to the US Election Assistance Commission2 people · 2 mentions · first linked 2016-12-16
- How Al-Qaeda Uses Encryption Post-Snowden2 people · 2 mentions · first linked 2014-05-16
What Hacker News says?
No, they’re using those same techniques, and they’re just as troublesome as they were before, to the degree they’re provably being used to decide who to send malicious payloads to… Zero-click simply highlights if the user needs to actively interact with an element to get a malicious payload - or not. This did get me interested in the specifics of the payload, though: “It maintains persistence via COM hijacking by ov…
Comment linking /research/tracking-candirus-devilstongue-spyware
on “AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware”Submitted Thieves and Geeks: Russian and Chinese Hacking Communities as a story · 122 points
HN discussionHere's the link to our blog: https://www.recordedfuture.com/facebook-chat-messages/
Comment linking /facebook-chat-messages/
on “Facebook Chats Are Being Scanned by a CIA Funded Company?”Submitted North Korea Is Not Crazy as a story · 90 points
HN discussionRU cybercriminals pay bribes to RU law enforcement to stay out of trouble as well as bend the knee and work for GRU/KBG when called upon for various requests by them. then there is also the unspoken rule of "dont shit where you eat" aka RU/CIS based ransomware operators and hackers cant attack any companies in the CIS region. a good read, https://www.recordedfuture.com/research/dark-covenant-3-cont...
Comment linking /research/dark-covenant-3-controlled-impunity-and-russias-cybercriminals
on “US declines to join more than 70 countries in signing UN cybercrime treaty”Submitted China Propaganda Network Targets BBC Media, UK in Large-Scale Influence Campaign as a story · 48 points
HN discussionI hope this isn't an endorsement of serpentza or laowhy86, bitter expats with middle school mandarin proficiency flunking out of China are not insightful sources. There are millions of Chinese diaspora who lived in both Chinese and western cultures with much more useful things to say. Here are recent studies on how domestic and foreign Chinese propaganda works. How the Chinese Government Fabricates Social Media Post…
Comment linking /china-social-media-operations/
on “How China Unleashed Twitter Trolls to Discredit Hong Kong’s Protesters”Submitted Military Reaper Drone Documents Leaked on the Dark Web as a story · 15 points
HN discussion>My friend and I have been analyzing this trend for a long time. You can spot the 50 cent army on youtube on any video that has US and China in the title. The three go to arguments are There's actual reputable and recent research about 50c Army abroad - they don't exist. Beyond Hybrid War: How China Exploits Social Media to Sway American Opinion https://www.recordedfuture.com/china-social-media-operations... >While…
Comment linking /china-social-media-operations/
on “TikTok hits 1.5B downloads, outperforming Instagram”Submitted How Al-Qaeda Uses Encryption Post-Snowden (Part 2) as a story · 11 points
HN discussionWashington Post attributed the attack to Russian actor APT29/Cozy Bear on Dec 14th [1], quoting unnamed sources. FireEye [2] Dec 13th & Volexity [3] Dec 14th were more cautious, citing an unknown actor that they dubbed UNC2452, and Dark Halo, respectively. Recorded Future made a fair but ultimately inconclusive case for Chinese attribution [4], Dec 30th. US gov/CISA continues to claim "Russian linked" [5], Jan 5th.…
Comment linking /solarwinds-attribution/
on “Solarwind, Fireeye, Microsoft and Cisco leaks are offered for sale”Submitted Are You a Target for Nation-State Propaganda? as a story · 5 points
HN discussionWell there is also this company https://www.recordedfuture.com/ which has the CIA and Google as investors, like anything political the grey area covers a lot.
Comment linking /
on “Massive New Surveillance Program Uncovered by Wall Street Journal”Submitted Stripping Tor Anonymity: Database Dumps, Illegal Services, Malicious Actors as a story · 5 points
HN discussionLooks like it primarily comes from two ASN's in Brazil: CLARO S.A. (AS28573) and TELEFÔNICA BRASIL S.A (AS18881). Interestingly, it looks like Brazil is right up there with Russia when it comes to total number of risky ASN's. source: https://www.recordedfuture.com/asn-blocklist-analysis/
Comment linking /asn-blocklist-analysis/
on “Deanonymizing Tor Circuits”Submitted Online Surveillance, Censorship, and Discrimination for Lgbtqia+ Community as a story · 4 points
HN discussionThis breach happened in September 2018. More info https://www.recordedfuture.com/apt10-cyberespionage-campaign... official visma statement: https://www.visma.com/press-releases/intelligence-report-vis...
Comment linking /apt10-cyberespionage-campaign/
on “China hacked Norway's Visma to steal client secrets”Submitted “Beijing One Pass” Employee Benefits Software Exhibits Spyware Characteristics as a story · 3 points
HN discussionGoogle is "good"? http://www.schneier.com/essay-306.html http://money.cnn.com/2005/08/05/technology/google_cnet/ https://www.recordedfuture.com/ ( Google and In-Q-Tel both major investors ) http://thestockmarketwatch.com/stock-market-news/recent-even... http://xsreviews.co.uk/2011/05/google-to-lose-500m-to-antitr... Could keep going for a while. My point is simple: It is easy to forget the "bad" when everyone focuse…
Comment linking /
on “Y Combinator’s Paul Graham: We’re Looking For People Like Us”Submitted Introducing the world's first Temporal Analytics Engine as a story · 3 points
HN discussionThere was a company in my city that did something like this. They didn't survive. They crawled the data, but also had a services component to do something with the data. Like, they had contracts with pharma companies to search for indications that a page was selling counterfeit drugs. I'm not sure of the exact details of why they didn't make it. Also, I'm thinking about Recorded Future ( https://www.recordedfuture.c…
Comment linking /
on “Ask HN: Can web scraping be the basis of a viable business model?”Submitted Despite Sanctions, North Koreans Continue to Use Foreign Technology as a story · 2 points
HN discussionA cursory analysis of the bitcoin addresses for this malware suggests that sending US$300 in BTC can be difficult. I see sends of US$178, US$189, US$332, US$280, US$362, US$220, etc. Possibly the amount is negotiable, or the amount to pay is different across different geographies. (edit: Looks like this exists, based on the Economist's Big Mac Index: https://www.recordedfuture.com/fatboy-ransomware-analysis/ )
Comment linking /fatboy-ransomware-analysis/
on “WannaCry – The largest ransom-ware infection in history”Submitted Using Infostealer Logs to Unmask CSAM Consumers as a story · 2 points
HN discussion- X4 · 2012-05-06
So you say Google is using a battery of hidden markov chains with classical or slightly novel algorithms? I could believe that, given the quality of the Google Predict results. Plus Google buying http://recordedfuture.com undermines that their Prediction algo's aren't top notch (mildly expressed).
Comment linking /
on “The Grok prediction engine from Numenta announced” Submitted Abusing GitHub for Malicious Infrastructure as a story · 2 points
HN discussionApparently enough phishers/spammers are actually dumb enough to not use whoisguard https://www.recordedfuture.com/whois-gdpr-icann/ The reason that security researchers have had success with using WHOIS data is twofold. The first is that many attackers, even sophisticated attackers, have had poor OPSEC (operational security) when it comes to registering domains. A surprisingly large number of attackers simply didn’t…
Comment linking /whois-gdpr-icann/
on “European regulators reject latest proposal by ICANN over its Whois data service”Submitted Counterfeit Wine, Spirits, and Cheese as a story · 2 points
HN discussion"Google Cred" sounds a lot like what Recorded Future is up to (a company which, it turns out, Google has invested in). https://www.recordedfuture.com/
Comment linking /
on “Hey Google”Submitted China-Linked Group RedEcho Targets the Indian Power Sector Amid Heightened as a story · 2 points
HN discussion
