John Hammond

John Hammond

Mastodon @johnhammond@infosec.exchange
⚔ Compare ☆ Watch Own this channel?
🤝

Make a deal with John Hammond

🔒 Paid proposals held safely in escrow — released only when the work's approved.

📣Sponsored postOne disclosed post (toot) with your link and message. $41→ 🧵Sponsored threadA multi-post explainer or story — the fediverse rewards dept… $103→ 📦Product seeding / honest reviewSend me your product — I post a disclosed, honest take. Auth… $53→ 📌Pinned sponsored postA disclosed post pinned to the top of my profile for the mon… $123/mo→ 🔗Profile link (bio field)Your link in one of my profile metadata fields for the month… $62/mo→ 🔁Boost packageI boost (repost) your account's toots through the month — di… $82/mo→ 🏛️Instance / community sponsorshipSponsor the server I run — a sponsor line in the About/rules… $103/mo→ 🤝Mutual boost collabWe boost each other across instances — a value swap between … Swap→

Every booking is a normal escrow-protected deal.

Followers
6.8K
Account age
3 yrs

Known for

Yesterday I received an email to notify me of a case that looked like a malicious Google sponsored ad result. I tried to make sense of it, unraveling some obfuscated JavaScript, then stages of Batch and PowerShell (with some interesting code comments), leading to an InnoSetup installer of an unexpected SVN application -- a bundle pre-packaging the legitimate software, but with a modified malicious4 views Yesterday I received an email to notify me of a case that looked like a malicious Google sponsored ad result. I tried to make sense of it, unraveling some obfuscated JavaScript, then stages of Batch and PowerShell (with some interesting code comments), leading to an InnoSetup installer of an unexpected SVN application -- a bundle pre-packaging the legitimate software, but with a modified malicious Wild story on a big AI-powered social engineering campaign, leveraging Device Code phishing to steal Entra ID/Microsoft accounts -- all with entirely unique and personalized per-victim lures from vibecode-crafted infrastructure 🤯 Video: https://youtu.be/9b3kirR8s2U4 views Wild story on a big AI-powered social engineering campaign, leveraging Device Code phishing to steal Entra ID/Microsoft accounts -- all with entirely unique and personalized per-victim lures from vibecode-crafted infrastructure 🤯 Video: https://youtu.be/9b3kirR8s2U More ConsentFix -- a "V3" some might say, shared amongst a dark web/cybercrime forum, and a treasure trove of tradecraft to see how bad actors leverage third-party sites and services to do their dirty work. 👀 Video: https://youtu.be/T3oVdPCMDJw3 views More ConsentFix -- a "V3" some might say, shared amongst a dark web/cybercrime forum, and a treasure trove of tradecraft to see how bad actors leverage third-party sites and services to do their dirty work. 👀 Video: https://youtu.be/T3oVdPCMDJw A Linux backdoor is being sold on the dark web for $1,600 USD. The developer called it "PamDOORa", while it abuses the Linux PAM stack for persistent SSH access, credential harvesting, and wiping logs. YouTube Video: https://youtu.be/3YB4XGy8xwE2 views A Linux backdoor is being sold on the dark web for $1,600 USD. The developer called it "PamDOORa", while it abuses the Linux PAM stack for persistent SSH access, credential harvesting, and wiping logs. YouTube Video: https://youtu.be/3YB4XGy8xwE

📊 Post engagement

2
Avg engagement / post
0%
Engagement vs followers
Nov 2022
On Mastodon since

🔥 Top post: Yesterday I received an email to notify me of a case that looked · 4 likes + reposts

📊 Activity & format

Posting cadence
0.82 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly images
Recent: 1 text · 11 image · 0 video.
Follower / following
72×
Follows 95 back. A strong ratio — an audience that follows them, not a follow-for-follow network.

Recent posts

View on Mastodon ↗
🔥 Top post Yesterday I received an email to notify me of a case that looked like a malicious Google sponsored ad result. I tried to make sense of it, unraveling some obfuscated JavaScript, then stages of Batch and PowerShell (with some interesting code comments), leading to an InnoSetup in… ★ 4
"AI powered botnet" sounds like a goofy alarmist news headline, but it's interesting it's pretty feasible now -- say on top of usual RAT effects, malware steals your Claude or Codex account or uses resources for local models to run a whole… A Linux backdoor is being sold on the dark web for $1,600 USD. The developer called it "PamDOORa", while it abuses the Linux PAM stack for persistent SSH access, credential harvesting, and wiping logs. YouTube Video: https://youtu.be/3YB4X… ★ 2 Turns out to be what seems like an endpoint-specific derivative of a something seen as a browser-based phishing kit... that I don't know if I have seen many folks talk about before? 👀 I really had fun recording this one and poking through … ★ 2 "I Built an AI Cybersecurity Research Factory (for CTFs & Vulnerabilities)!" ... long-form video demonstration that doubles as "how I personally use AI lately," and some playground experiments setting it in motion to go hack away on wargam… Hey-o, I'm jumping in to host a show to demystify the dark web alongside Women in Cybersecurity (WiCyS) (huge thanks to Lynn Dohm for letting me join the party) this Thursday, April 30 at 12pm CT! Should be fun, hope to see you there too 😊… ★ 1 During tax season I got a notification that my tax documents are ready, from... uh... Zoom 😂 Phishing email leveraging their legitimate document sharing functionality, pointing to a link and a domain that _looks like_ an IRS website, but, … ★ 2 hELLO the tIME HAS cOME oNCE AGAIN on my cONTENT cALENDAR for me to continue to scream and shout about oUR VIRTUAL EVENT ContinuumCon 2026 jUNE 12 - 14 https://continuumcon.com livestream run of show is free & public but all workshop sessi… ★ 2 A funny slew of phishing emails I've seen flying around: a legitimate Facebook Business invite notification, but bad actors stuffing threatening urgency into their "name" values that get inserted into the real email. And the phishing landi… ★ 1 More ConsentFix -- a "V3" some might say, shared amongst a dark web/cybercrime forum, and a treasure trove of tradecraft to see how bad actors leverage third-party sites and services to do their dirty work. 👀 Video: https://youtu.be/T3oVdP… ★ 3 Joined by Katrina Manson to hear all about her latest book release: Project Maven & the Dawn of AI Warfare 👀 We talk AI usage at the Pentagon, drone intel, AI enabled targeting, and the ethical tipping point of autonomous weapons. Super f… ★ 2 Wild story on a big AI-powered social engineering campaign, leveraging Device Code phishing to steal Entra ID/Microsoft accounts -- all with entirely unique and personalized per-victim lures from vibecode-crafted infrastructure 🤯 Video: ht… ★ 4

🐘 Community & instance

Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 2 views per post.
📤Posts about 0.8× per week.

🛡️ Audience credibility

49/100 Fair
  • Est. 78% real, active audience · Medium fake-follower risk.
  • Low engagement (~0.0% of followers engage each post) — a sign of an inflated or inactive audience.
  • Organic base — far more followers than accounts it follows.
  • Established account (3+ years old).
Est. authentic audience
78%
Fake-follower risk
Medium
Data confidence
High

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

Hacker. Friends. Cybersecurity Researcher.

📸 Gallery

"AI powered botnet" sounds like a goofy alarmist news headline, but it's interesting it's pretty feasible now -- say on top of usual RAT effects, malware steals your Claude or Codex account or uses resources for local models to run a whole AI farm off infected hosts. Video: https://youtu.be/XZ4E2sHtNuw A Linux backdoor is being sold on the dark web for $1,600 USD. The developer called it "PamDOORa", while it abuses the Linux PAM stack for persistent SSH access, credential harvesting, and wiping logs. YouTube Video: https://youtu.be/3YB4XGy8xwE Yesterday I received an email to notify me of a case that looked like a malicious Google sponsored ad result. I tried to make sense of it, unraveling some obfuscated JavaScript, then stages of Batch and PowerShell (with some interesting code comments), leading to an InnoSetup installer of an unexpected SVN application -- a bundle pre-packaging the legitimate software, but with a modified malicious "I Built an AI Cybersecurity Research Factory (for CTFs & Vulnerabilities)!" ... long-form video demonstration that doubles as "how I personally use AI lately," and some playground experiments setting it in motion to go hack away on wargames and potential software applications 🤖 Video link: https://youtu.be/j7GpjcyJYtU Hey-o, I'm jumping in to host a show to demystify the dark web alongside Women in Cybersecurity (WiCyS) (huge thanks to Lynn Dohm for letting me join the party) this Thursday, April 30 at 12pm CT! Should be fun, hope to see you there too 😊 Link: https://jh.live/wicys-webinar During tax season I got a notification that my tax documents are ready, from... uh... Zoom 😂 Phishing email leveraging their legitimate document sharing functionality, pointing to a link and a domain that _looks like_ an IRS website, but, infects your computer. Video link: https://youtu.be/p6ySQ94GZsA hELLO the tIME HAS cOME oNCE AGAIN on my cONTENT cALENDAR for me to continue to scream and shout about oUR VIRTUAL EVENT ContinuumCon 2026 jUNE 12 - 14 https://continuumcon.com livestream run of show is free & public but all workshop sessions get into hands-on labs see u there ✌️ A funny slew of phishing emails I've seen flying around: a legitimate Facebook Business invite notification, but bad actors stuffing threatening urgency into their "name" values that get inserted into the real email. And the phishing landing page is hysterical. 🤣 Video link: https://youtu.be/QRN3t1_paTY

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Laurent Chemla 🍺 Laurent Chemla 🍺 18% brad_frost brad_frost 17% blvefo9 blvefo9 15% Natasha :mastodon:🇪🇺🇮🇪 Natasha :mastodon:🇪🇺🇮🇪 14% NixOS NixOS 11% Steven T. Dennis Steven T. Dennis 10%

More like this

Find more →
Mastodon
brad_frost
brad_frost ✓
@brad_frost@mastodon.social
6.8K Followers
Mastodon
Natasha :mastodon:🇪🇺🇮🇪
Natasha :mastodon:🇪🇺🇮🇪
@natasha_jay@tech.lgbt
6.8K Followers
Mastodon
Laurent Chemla 🍺
Laurent Chemla 🍺
@laurentchemla@piaille.fr
6.8K Followers
Mastodon
NixOS
NixOS ✓
@nixos_org@chaos.social
6.8K Followers
Mastodon
Steven T. Dennis
Steven T. Dennis
@steventdennis@journa.host
6.8K Followers
Mastodon
blvefo9
blvefo9
@aoi_tsunami@pawoo.net
6.9K Followers

✉ Message John Hammond

Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.

  • ✓ Message any influencer from their listing
  • ✓ The influencer gets notified by email
  • ✓ Manage every conversation in one inbox
See Pro $9.95/mo →

Already Pro? Log in.

🎤 Event / appearance with John Hammond

Booking an event / appearance is a Pro feature. Upgrade to book John Hammond for an in-person or virtual appearance — payment held safely in escrow until the event is done.

  • ✓ Book them for events, livestreams, panels & more
  • ✓ John Hammond gets notified by email
  • ✓ Fee held in escrow, released after the appearance
See Pro $9.95/mo →

Already Pro? Log in.