Jesse William McGraw, also known as GhostExodus, is a former insider threat and threat actor. He became the first person in recent U.S. history to be convicted of corrupting industrial control systems. Today he focuses on threat intelligence, OSINT, and public speaking, using his knowledge to bring awareness to the security risks that organisations and individuals face.

Dancho Danchev is a Bulgarian threat intelligence researcher who has spent more than two decades tracking cybercrime, malware campaigns, and the infrastructure behind the criminal underground. His research covers botnets, including Koobface, exploit kits, blackhat SEO, scareware, and large-scale domain abuse, with a focus on OSINT work that maps campaigns back to the operators running them. He has published through ZDNet Zero Day, Webroot, GroupSense, and WhoisXML API, and has run his own cybercrime research blog since the early 2000s.

Celeste — also known online as har00ga — is a Technical Content Strategist and Writer specializing in open source, Web3, and digital privacy. With a background in Information Security and anonymity technologies, including previous work with the Tor Project, she brings over a decade of experience creating and curating content for highly specialized audiences across a broad range of media and platforms.

Martynas Vareikis is the AI Editor at Ransomnews. He covers the intersection of artificial intelligence and information security — from machine-learning models in defensive tooling to the adversarial use of LLMs by ransomware operators, deepfake-driven social engineering, and the rise of agentic threats. His reporting focuses on translating fast-moving AI research into practical guidance for defenders, journalists, and the broader security community. Reach Martynas via [email protected].

Neringa Macijauskaitė is an information security researcher covering threat intelligence and cybercrime for Ransomnews. She has worked as an information security researcher, conducting threat intelligence investigations, tracking emerging cyber threats, and monitoring for exposed systems and online vulnerabilities. She is also part of the crew behind BSides Vilnius, the community-run security conference in Lithuania.

The Ransomnews Research Team is the collective byline used for collaborative pieces, editorial briefings, and articles drawing on contributions from multiple researchers. Coverage spans ransomware operations, breach economics, threat actor profiling, OSINT methodology, and emerging risks across security, privacy, and AI.

Donata Damijonaitytė is the public-relations manager at Ransomnews. She leads press and partnership communications — handling incident-response media requests, conference outreach, source coordination, and the editorial team's external profile. For press matters, partnerships, or speaking engagements, reach Donata via [email protected].