Data-SKUP 2026

How do you get from a regular webpage to exposing worldwide Russian cybercrime? Between September 2025 and February 2026, Have I Been Squatted and Ctrl-Alt-Intel uncovered Diesel Vortex, a Russian-linked cybercrime operation targeting freight and logistics companies across the United States and Europe. This talk tells the story of that investigation, from the first domain to coordinated takedown, and shows how domain abuse, phishing infrastructure, and freight fraud came together inside a highly organised criminal enterprise.

Much of modern life is mediated through phones and apps. To investigate anything they touch, you need to understand where these apps' data comes from, what they're sharing, and with whom. But while network forensics & scraping for the web have received plenty of attention, the same isn't true for mobile, where techniques can be more challenging and clear guides are harder to find. In this talk, we'll take a hands-on look at how HTTP Toolkit and other tools make it possible to easily capture, inspect & modify network traffic on mobile. We'll explore real-world examples of these techniques in data journalism, and you'll learn how you can use this to extract the datasets that power mobile apps, expose privacy leaks & security issues, and investigate exactly how apps do what they do.

Some of the biggest data revelations of recent years originated not from a journalist, but from a security researcher. Without Harrison Sand, Telia customers could still be tracked on a map, and Norwegians would still be scammed by Darcula. At Data-SKUP, he shares for the first time how he selects the right cases in a borderless digital landscape.