The hit list was published on a website called Enemies of the People. One of the websites associated with it was registered through MonoVM. https://twitter.com/kyleehmke/status/1337415369657610242
This is not the first time MonoVM is spotted in an Iranian information operation.

In a paper yet to be published, we investigate MonoVM's connection to one of the earliest Iran-linked international info ops from mid 2010s (more details on this later).

cc @RidT
MonoVM is a web hosting company with a questionable past.

It has previously provided infrastructure to Russian hacking ops, accepts crypto currencies for payment, and has been intermittently linked to Iranian individuals.

No surprise that it's resurfaced in this latest event.
More on the Enemies of the People website: https://twitter.com/arawnsley/status/1341548820426072064
and technical details: https://twitter.com/jfslowik/status/1336905268379045888
You can follow @SiminK_.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled:

By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.