OSINT Investigation Exposes Fraudulent Russian Garlic Investment Scheme Masquerading as Local Production
An extensive OSINT investigation has dismantled an investment project that promoted itself as a patriotic effort to grow Russian garlic and challenge Asian imports. The scheme promised investors 50-70% annual returns, payback within a single seven-month season, and minimum investments as low as 50,000 rubles, while claiming more than 300 hectares of its own fields and guaranteed placement in major retail chains.
Public corporate records revealed a network of affiliated legal entities sharing the same director, identical OKVED codes limited to agricultural production and sales, and no licenses for financial activities or capital management. One cooperative within the group reported only 327,000 rubles in profit on 14.3 million rubles of revenue, yielding a 2.2% margin, while carrying 55.9 million rubles in loans—nearly four times its yearly turnover.
Further checks on the Federal Service for Accreditation showed one entity registered serial production of imported industrial garlic-processing equipment, while another declared repeated large shipments of Chinese and Uzbek garlic exceeding 20 tons each, arriving after the domestic harvest season had ended. These findings indicate the operation likely functions as a year-round repackaging and distribution hub rather than a domestic producer.
Retail audits confirmed the absence of the advertised Russian garlic on shelves or in online catalogs of Magnit, Perekrestok, Pyaterochka, and Svetofor. Instead, private-label products from Tander were traced to Asian origins. Cadastral data showed at most 203 hectares of land near the legal address, none registered to the project, and the Rosselkhozcenter registry listed no seed-breeding status for the entities involved.
The holding group behind the project has been added to the Bank of Russia blacklist. While most associated websites and communities were blocked by Roskomnadzor, one Telegram channel with inflated subscriber counts continues active promotion. The investigation notes that thousands of duplicate franchise advertisements were mass-posted on Avito before being replaced with unrelated listings after negative coverage appeared.
Related articles
Telegram macOS Developer Says 99.9% of Client Code Is Now Written by AI and Suggests Firing Manual Coders
Mike, the developer of the official Telegram client for macOS, stated that artificial intelligence now generates 99.9 percent of the messenger's client code. He argued that programmers who continue writing code manually should be dismissed. In a Telegram discussion, Mike cited the gram.org website as an example created entirely with AI assistance in a single day, with domain support from Pavel Durov. He also described adapting the iOS client for a foldable iPhone Duo overnight using Claude. According to Mike, even designers are now contributing to client code, and 80 to 90 percent of Telegram developers share his positive view of AI tools. When participants raised questions about code quality and security, Mike replied that AI also identifies and fixes vulnerabilities, claiming the resulting code is superior to human-written equivalents. He further announced plans to open a new GitHub repository for the macOS client source code, as the previous repository had not been updated for over a year.
Secure Boot on Arch Linux: Enabling Protection for UKI Without Replacing Factory Keys
A detailed guide explains how to configure Secure Boot on Arch Linux for Unified Kernel Images without replacing the motherboard's factory keys or relying on Microsoft certificates. The author chose the minimal-intervention approach of adding a custom key to the existing DB section via the UEFI interface instead of using sbctl enroll-keys or shim. The process begins with backing up existing keys to a FAT-formatted USB drive directly from the BIOS menu. New keys are then generated using sbsigntools and openssl, converted to DER format, and enrolled through the ASUS Prime 790-P UEFI interface. A post-hook script for mkinitcpio automatically signs the UKI after every kernel update, ensuring the entire unified image remains protected. The method preserves the original Microsoft and vendor certificates while adding only the user's own signing key.
What Server Logs Reveal About Attackers: Analyzing Suspicious Requests on Linux
Server logs provide critical insights into potential intrusions by recording events from the operating system, SSH authentication, and web applications. The guide explains how to examine Linux system journals with journalctl, review authentication logs on Debian and RHEL systems, and inspect Nginx access logs for unusual HTTP requests. Analysts learn to identify patterns such as rapid failed login attempts using multiple usernames from a single IP address, which may indicate brute-force or automated scanning activity. The article also covers counting the most active IP addresses with awk and sort commands while stressing the need to compare findings against normal traffic baselines. Additional recommendations include logging structured security events in JSON format with fields for timestamp, user ID, resource, and outcome, following OWASP guidelines. The text warns against storing sensitive data like passwords in logs and highlights limitations such as possible log tampering or unsynchronized server clocks. A practical seven-step investigation plan helps responders preserve evidence and verify hypotheses before taking action.
UserGate Details FPGA Acceleration to Turbocharge Next-Generation Firewalls
UserGate product manager Pavel Molodan explains why adding security features like IDS/IPS, SSL/TLS inspection, and application control turns a high-performance NGFW into a bottleneck. The company outlines four groups of acceleration methods, with a focus on FPGA-based hardware offloading for packet parsing, firewall rules, NAT, and encryption tasks. Research from 254 respondents shows strong demand for these functions in data center B2E segments at 50-200 Gbit/s. Experimental platforms including Katun-2 PCIe cards and the FG system demonstrate concrete gains, such as scaling IDPS from 5 to 90 Gbit/s and achieving 85 Gbit/s firewall throughput on EMIX profiles. FPGA delivers microsecond latency and better energy efficiency compared with CPU-only designs while preserving full NGFW functionality for elephant flows.