🎭 Fraud & Identity theater

Covers consumer and enterprise fraud — phishing, account takeover, synthetic identity, BEC, OTP-bot, and card fraud — powered by stealer logs, breach corpora, and phishing kits. Protects identities and brands by mapping fraud infrastructure and the crews that run it.

🏹 Threat Actors

🦠 Malware & Tools

🧭 Intelligence disciplines

📚 Priority sources & datasets

🔄 Live Datasets & APIs (5 key-free · ingestible)

📜 Fraud & Identity Playbook

1. Collect phishing kits, stealer logs, spam feeds, and breach corpora from APWG, PhishTank, and abuse.ch.
2. Normalize and correlate compromised identities, domains, and ATO infrastructure across campaigns.
3. Analyze fraud typologies (phishing, synthetic identity, BEC, OTP-bot, card fraud) and phishing-kit lineage.
4. Attribute operations to fraud crews (Scattered Spider, Black Axe, FIN7) via TTPs and shared infrastructure.
5. Disseminate takedown packages and victim alerts to registrars, brands, and financial institutions.
6. Execute domain takedowns, credential resets, and account-takeover blocks.

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

🔗 Cross-domain pivots