https://hecavex.com/en/HECAVEX — Cyber Threat Intelligence & Digital InvestigationsResearching the infrastructure, behaviour and people behind digital threats.2026-08-01T20:41:14+03:00Hecavexhttps://hecavex.comConfidence Is a Field, Not a Feelinghttps://hecavex.com/en/research/confidence-is-a-field/2026-08-01T13:00:00+03:002026-08-01T13:00:00+03:00A short note on how HECAVEX will communicate analytical confidence and distinguish evidence from inference.Introducing HECAVEXhttps://hecavex.com/en/research/introducing-hecavex/2026-08-01T12:00:00+03:002026-08-01T12:00:00+03:00Why HECAVEX exists and how this independent threat intelligence publication will approach evidence, uncertainty and digital investigations.Information Factories on Lithuania's Border: How Russian and Belarusian Information Operations Target Lithuania, NATO, and Europehttps://hecavex.com/en/research/information-factories-on-lithuanias-border/2026-06-21T17:02:43+03:002026-06-21T17:02:43+03:00How Russian and Belarusian information operations manufacture, localise, and distribute narratives targeting Lithuania, NATO, and Europe.When Fake News, Scams, and Cloaking All Meet in One Placehttps://hecavex.com/en/research/when-fake-news-scams-and-cloaking-meet/2026-06-15T17:21:51+03:002026-06-15T17:21:51+03:00An investigation into how fake news, investment fraud, and cloaking combine into a single victim-selection and monetisation infrastructure.ClickFix: Why Modern Threat Actors No Longer Look for Vulnerabilities—they Look for Peoplehttps://hecavex.com/en/research/clickfix-why-modern-threat-actors-hunt-people/2026-06-05T23:56:58+03:002026-06-05T23:56:58+03:00The anatomy of ClickFix campaigns: how fake verification prompts turn users into the execution mechanism and what SOC and CTI teams should detect.One Scam Domain Is Rarely Alone: Using Pivoting to Trace Fraud Infrastructurehttps://hecavex.com/en/research/one-scam-domain-is-rarely-alone/2026-06-03T18:09:38+03:002026-06-03T18:09:38+03:00A practical infrastructure-pivoting method for moving from one scam domain to related hosts, templates, and backend systems.MFA Is Not a Panacea, and It's Time We Stopped Pretending It Ishttps://hecavex.com/en/research/mfa-is-not-a-panacea/2026-06-02T10:30:41+03:002026-06-02T10:30:41+03:00Why MFA is essential but insufficient against session theft, AiTM, token replay, OAuth abuse, and modern account takeover.The Centre of Registers Data Theft — Part 2https://hecavex.com/en/research/centre-of-registers-data-theft-part-2/2026-06-02T10:23:26+03:002026-06-02T10:23:26+03:00Part two of the Centre of Registers data-theft analysis, examining stolen identity, legitimate access, and gaps in behavioural detection.The Centre of Registers Data Theft: When “It’s Just Data” Suddenly Becomes a National Security Issuehttps://hecavex.com/en/research/centre-of-registers-data-theft-national-security/2026-06-02T10:12:36+03:002026-06-02T10:12:36+03:00Why large-scale theft from Lithuania's Centre of Registers is not merely a privacy incident but a potential intelligence and national-security issue.MISP for Cyber Threat Intelligence: Installation, Integration, and Automation. [Part 1]https://hecavex.com/en/research/misp-for-cti-part-1/2025-03-02T13:00:00+02:002026-08-01T12:00:00+03:00A practical guide to installing MISP with Docker, understanding its threat-intelligence data model, integrations and automation options.Unveiling Hidden Dangers on GitHub: Malicious Python Scripts Sending Your Data to Hackershttps://hecavex.com/en/research/github-and-malware/2024-11-10T13:00:00+02:002026-08-01T12:00:00+03:00A technical investigation of malicious Python code hidden in a GitHub project, its obfuscation and the remote infrastructure receiving stolen data.Unleashing the Dynamic Duo: OSINT and CTI for Proactive Defense against Cyber Threats.https://hecavex.com/en/research/cti-osint-duo/2023-10-18T14:00:00+03:002026-08-01T12:00:00+03:00How OSINT and cyber threat intelligence work together to reveal threat activity, improve context and support proactive security decisions.Unleashing the Power of OSINT. Google Dorking: Unveiling Hidden Treasures of the Web.https://hecavex.com/en/research/google-dorking/2023-10-12T14:00:00+03:002026-08-01T12:00:00+03:00Learn how advanced Google search operators support OSINT investigations, cybersecurity research and the discovery of hard-to-find public information.