rishsec
Home Training Why RishSec Pricing Blog Newsletter Contact

RishSec’s newsletter Threat dispatch

A weekly threat intelligence newsletter by Rishika Desai. Dark web findings, threat actor moves, OSINT techniques and IOCs, written from active research. In your inbox every Sunday at 8 AM IST.

Issue 001 — 052
Issue #001Sunday · 8:00 AM IST
RishSec’s Newsletter
By Rishika Desai · RishSec
Lead story · Dark web

Dark web forums are selling access to Indian BFSI infrastructure

Three separate threat actors listed verified RDP access to banking systems this week. What the listings reveal about current intrusion methods, and what defenders can do right now.

OSINT in the Open

One Shodan query. 2,400 exposed devices.

The exact search syntax, what we found, and the disclosure process that followed.

Not a recap of what Twitter already said. Findings from the research, every week.

01 — Inside every issue

Six sections, every Sunday

Most newsletters summarise what happened. RishSec’s Newsletter is written by someone doing the research every week.

01 · The Lead

One primary investigation: a threat actor, a campaign or a dark web finding. Written from primary research, not secondary sources.

+
02 · OSINT in the Open

One repeatable OSINT technique per issue. Tools, syntax, what we found and how to replicate it.

+
03 · Threat Actor Watch

Movement on tracked APT and financially motivated groups. ATT&CK mapping, new infrastructure, tactical shifts.

+
04 · India Threat Pulse

India-specific intelligence across BFSI, telecom and government. Dark web listings and targeted campaigns.

+
05 · Career Intel

What the cybersecurity job market is actually hiring for. Skills in demand and the certifications that matter.

+
06 · The IOC Drop

Actionable indicators from the week's research. IPs, domains, hashes and YARA snippets.

+
02 — First issues

Launching soon

The first three dispatches, in publishing order. Subscribe now and #001 is the first thing you get.

Dark webIssue #001

What dark web forums are saying about Indian infrastructure

Three verified access listings, two active discussion threads, and what the timing tells us about upcoming campaign cycles.

Week 1Coming soon
OSINTIssue #002

The Shodan query that found 2,400 exposed devices

The syntax, the results, the disclosure, and a replicable method for your own hunting sessions.

Week 2Coming soon
APTIssue #003

APT41 infrastructure shift: what new C2 registrations reveal

Recent domain registrations correlated with known APT41 patterns, what changed, and the techniques to watch.

Week 3Coming soon
Written by

News Letter

Rishika Desai Rishika Desai · threat researcher at BforeAI Quoted in Forbes, Dark Reading & The CyberWire Read her research →
60,000+community members
52issues a year
8 AMevery Sunday, IST
03 — Subscribe

Don't follow the threat landscape. Track it.

Intelligence that doesn't appear anywhere else, because it comes from the research, not from rewriting vendor reports. Free, every Sunday at 8 AM IST.

  1. Mon–TueDark web monitoring, IOC collection
  2. Wed–ThuOSINT investigations, infrastructure mapping
  3. FridayFindings review, lead story picked
  4. SaturdayWriting, editing, scheduled
  5. SundayIn your inbox8:00 AM IST