A first-person look at how money mule recruitment threads on Telegram actually operate — the pitch, the vetting, the cash-out workflow, and the legal jeopardy facing recruits who don’t fully understand what they’re signing up for.
Jesse William McGraw
Jesse William McGraw
Jesse William McGraw, also known as GhostExodus, is a former insider threat and threat actor. He became the first person in recent U.S. history to be convicted of corrupting industrial control systems. Today he focuses on threat intelligence, OSINT, and public speaking, using his knowledge to bring awareness to the security risks that organisations and individuals face.
MFA fatigue attacks keep working because the people approving the prompts are tired, distracted, and trained to tap “approve” by default. Here’s the 2026 playbook attackers use, and the four controls that actually shut it down.
A walk-through of how data brokers stitch your real identity back together from public records, breach datasets, and behavioural signals — and the four steps that make their job harder.
Browser extensions are the soft underbelly of personal privacy in 2026. Here’s how the malicious ones operate, the warning signs that catch most of them, and the audit you should run today.
A repeatable, low-effort monthly privacy audit you can finish in half an hour. No threat model required, no specialist tools — just the six checks that catch most of what matters.
A practical OPSEC checklist for indie security researchers, journalists, and bug-bounty hunters working from home. Network segmentation, hardware separation, identity hygiene, and the small habits that make the difference.
A practitioner’s OSINT methodology for tracking ransomware infrastructure in 2026 — the seven sources to monitor, how to correlate them, and the operational hygiene that keeps your work credible.
Ten geolocation sources that never let me down on an OSINT investigation, ranked by how often they crack the case. Free where possible, paid where necessary.
A practitioner’s playbook for Telegram OSINT in 2026 — how to discover channels, fingerprint admins, archive content, and build defensible attribution without burning your access.
The five-stage workflow that separates an OSINT analyst from someone with a bookmarks bar full of tools.