βοΈ The FBI says Jonathan Kramer, 21, secretly ran a pro-ISIS SimpleX account that talked about attacks, then got hold of a rifle.
The account told its SimpleX group the app was "100% anonymous".
The FBI says it unmasked him anyway, using Reddit and Amazon records, a stakeout and a paid informant.
Agents seized his rifle and about 190 rounds from his Pennsylvania hotel room and bags on 12 September.
He hid behind the name "Hamza Al Rashid" on SimpleX, a messenger that needs no phone number or email.
Separately, Discord flagged "alternate" accounts that shared IP addresses or browser cookies with Kramer's known accounts.
One of them, last used from his home internet connection, sent users to a Discord profile showing a masked man in front of the ISIS flag.
Hamza Al Rashid had also called SimpleX "the most secure messenger available".
Weeks later, a Reddit account registered to Kramer's email wrote "simplex is where its at".
Hamza Al Rashid offered to chat at "7PM mecca time", noon in Pennsylvania, which the FBI says fits Kramer's night shifts.
Agents watched Kramer being driven to work at 9:41PM and home at 6:31AM.
The paid informant chatted with Hamza Al Rashid, who laid out a plan to blind a crowd with pepper grenades.
Amazon records show Kramer had bought pepper spray.
A federal grand jury indicted him on 6 October for receiving the rifle to commit terrorism for ISIS.
He has pleaded not guilty.
https://www.justice.gov/usao-wdpa/media/1461241/dl
The account told its SimpleX group the app was "100% anonymous".
The FBI says it unmasked him anyway, using Reddit and Amazon records, a stakeout and a paid informant.
Agents seized his rifle and about 190 rounds from his Pennsylvania hotel room and bags on 12 September.
He hid behind the name "Hamza Al Rashid" on SimpleX, a messenger that needs no phone number or email.
Separately, Discord flagged "alternate" accounts that shared IP addresses or browser cookies with Kramer's known accounts.
One of them, last used from his home internet connection, sent users to a Discord profile showing a masked man in front of the ISIS flag.
Hamza Al Rashid had also called SimpleX "the most secure messenger available".
Weeks later, a Reddit account registered to Kramer's email wrote "simplex is where its at".
Hamza Al Rashid offered to chat at "7PM mecca time", noon in Pennsylvania, which the FBI says fits Kramer's night shifts.
Agents watched Kramer being driven to work at 9:41PM and home at 6:31AM.
The paid informant chatted with Hamza Al Rashid, who laid out a plan to blind a crowd with pepper grenades.
Amazon records show Kramer had bought pepper spray.
A federal grand jury indicted him on 6 October for receiving the rifle to commit terrorism for ISIS.
He has pleaded not guilty.
https://www.justice.gov/usao-wdpa/media/1461241/dl
π€£14β€3π2π©1
βΌοΈ BREAKING: The man charged with bugging an OpenAI executive meeting room frequently messaged a Saudi royal on WhatsApp.
The royal wrote "Saudi needs you more then the US!"
After his arrest, a Saudi military member paid to fly his wife and baby son to Doha.
https://www.cnbc.com/2026/10/19/openai-bugging-suspect-alfozan-saudi-royal-family.html
The royal wrote "Saudi needs you more then the US!"
After his arrest, a Saudi military member paid to fly his wife and baby son to Doha.
https://www.cnbc.com/2026/10/19/openai-bugging-suspect-alfozan-saudi-royal-family.html
π©18π5π€£3π1
βΌοΈBREAKING: A leak site published 421.179 internal emails from Germany's far-right AfD, including the mailbox of ex-leader Alexander Gauland.
ICD found it shows AI-written summaries, not the emails. The newest is from 12 September.
Its own index file names a server "afd_exfil".
https://hexane.cc/
ICD found it shows AI-written summaries, not the emails. The newest is from 12 September.
Its own index file names a server "afd_exfil".
https://hexane.cc/
π€£14π9
βοΈ The AfD leak site's thousands of emails shows nazism from party members and staff labeled under racism/antisemitism.
We went through the worst:
1. A 2018 email forwarded by Alexander Gauland concerns a "Hitler-Wallfahrt", a Hitler pilgrimage, by a former judge at the party's Thuringia arbitration court.
2. A member joked in a district WhatsApp group about turning refugees into handbags and boots, an allusion to the Nazi camps.
3. A district chairman quit, saying a board member sent a "Heil Hitler" Christmas card with a swastika and it was laughed off.
4. A Bavarian official urged party leaders to chant "Merkel verrecke", roughly "Merkel, croak", every day.
5. Federal party staff discussed luring a photographer to an event to remove him by force. The thread signs off "Heil und Sieg".
6. A 2025 NRW email is titled "Sale of swastika flags and drugs at the info stand".
7. This year alone, branches moved against members over a Nazi banner with a swastika, a Hitler impression and a call for machine guns against Arab clans.
We went through the worst:
1. A 2018 email forwarded by Alexander Gauland concerns a "Hitler-Wallfahrt", a Hitler pilgrimage, by a former judge at the party's Thuringia arbitration court.
2. A member joked in a district WhatsApp group about turning refugees into handbags and boots, an allusion to the Nazi camps.
3. A district chairman quit, saying a board member sent a "Heil Hitler" Christmas card with a swastika and it was laughed off.
4. A Bavarian official urged party leaders to chant "Merkel verrecke", roughly "Merkel, croak", every day.
5. Federal party staff discussed luring a photographer to an event to remove him by force. The thread signs off "Heil und Sieg".
6. A 2025 NRW email is titled "Sale of swastika flags and drugs at the info stand".
7. This year alone, branches moved against members over a Nazi banner with a swastika, a Hitler impression and a call for machine guns against Arab clans.
π16π₯8π€¬4β€1π©1π₯΄1
βΌοΈ DHS political appointees asked CISA to secretly obtain a voting machine and hack it
The findings were only to be shared with the White House, and the vendor was not to be told of any flaws
CISA employees feared they were being asked to participate in political interference
The findings were only to be shared with the White House, and the vendor was not to be told of any flaws
CISA employees feared they were being asked to participate in political interference
π€15π€£4π₯΄3β€2π©1
International Cyber Digest
βΌοΈBREAKING: A leak site published 421.179 internal emails from Germany's far-right AfD, including the mailbox of ex-leader Alexander Gauland. ICD found it shows AI-written summaries, not the emails. The newest is from 12 September. Its own index file namesβ¦
βΌοΈ UPDATE: The hacker behind the AfD email leak told us they got in through a single unpatched party website.
They also say a 302GB torrent holds the full mailboxes.
The hacker told us "the goal was not destruction, we could've brought cluster and its backups down". They just wanted to expose the "degeneracy and hypocrisy" of the AfD.
They say all AfD sites run on one shared hosting cluster, so one outdated site let them escalate privileges, reach the rest and mount a mail backup.
The leak site is down, which the hacker blames on a DDoS attack. Cloudflare shows an error saying the site's own server is not connected.
They also say a 302GB torrent holds the full mailboxes.
The hacker told us "the goal was not destruction, we could've brought cluster and its backups down". They just wanted to expose the "degeneracy and hypocrisy" of the AfD.
They say all AfD sites run on one shared hosting cluster, so one outdated site let them escalate privileges, reach the rest and mount a mail backup.
The leak site is down, which the hacker blames on a DDoS attack. Cloudflare shows an error saying the site's own server is not connected.
π₯14π©5
βΌοΈUPDATE: Someone offered the hacker behind the AfD email leak β¬100,000 to take the leak site offline, the hacker told us.
An anonymous Proton Mail user wrote "How can we get in touch? We would pay you money to take the site offline."
The hacker is keeping the website online.
The hackers has been reading the AI comments online, and would like you to know that they've used AI, because reading 400,000 mails is impossible without it.
An anonymous Proton Mail user wrote "How can we get in touch? We would pay you money to take the site offline."
The hacker is keeping the website online.
The hackers has been reading the AI comments online, and would like you to know that they've used AI, because reading 400,000 mails is impossible without it.
π₯22π©4π3
We will be releasing our first analysis of the AfD files shortly. Please bear with us.
β€14π€¬1
While you are waiting, be sure to subscribe to our FREE newsletter: https://www.internationalcyberdigest.com/newsletter/
If you like our work, you can support us check https://www.internationalcyberdigest.com/donate/
If you like our work, you can support us check https://www.internationalcyberdigest.com/donate/
International Cyber Digest
Newsletter
Subscribe to the International Cyber Digest Brief for cybersecurity stories, sources, and analysis.
β€3
βΌοΈBREAKING: The hacker behind the AfD email leak told us they targeted the party to expose what they call its greed and financial misuse.
"Hacktivism is often the only answer to populism of this magnitude."
"The AFD takes a legitimate frustration and uses it to rob the poorest 20% of this country," they wrote.
"The amount of financial misuse in these documents is appalling, regardless of what you think of immigrants."
"Hacktivism is often the only answer to populism of this magnitude."
"The AFD takes a legitimate frustration and uses it to rob the poorest 20% of this country," they wrote.
"The amount of financial misuse in these documents is appalling, regardless of what you think of immigrants."
6β€21π€£2π€1π€¬1
βοΈ AfD Berlin leader Georg Pazderski pitched a campaign songbook of children's songs with their "original lyrics", a 2017 email attributed to him shows.
Examples include "10 kleine Negerlein" and "Lustig ist das Zigeunerleben".
"We would be assured of a media frenzy," it says.
Examples include "10 kleine Negerlein" and "Lustig ist das Zigeunerleben".
"We would be assured of a media frenzy," it says.
5π3
βοΈ The AfD's Bundestag group invited Rafi Eitan, the Mossad operations chief behind Adolf Eichmann's capture, to speak at a February 2018 event, an invitation shows.
A Likud judge and Berlin's former chief rabbi were also listed.
It said an official from Russia might join too.
A Likud judge and Berlin's former chief rabbi were also listed.
It said an official from Russia might join too.
2π©6π±5
βοΈ Alice Weidel passed AfD board member Dirk Driesang an allegation that a Saarland party professor wanted to "use the NPD as foot soldiers" and used a racial slur, a 2016 email attributed to Driesang says.
He weighed questioning the man or throwing him off party bodies.
He weighed questioning the man or throwing him off party bodies.
1