Habr•September 12, 2026•🇷🇺Translated from Russian

OSINT Investigation Exposes Fraudulent Russian Garlic Investment Scheme Masquerading as Local Production

An extensive OSINT investigation has dismantled an investment project that promoted itself as a patriotic effort to grow Russian garlic and challenge Asian imports. The scheme promised investors 50-70% annual returns, payback within a single seven-month season, and minimum investments as low as 50,000 rubles, while claiming more than 300 hectares of its own fields and guaranteed placement in major retail chains.

Public corporate records revealed a network of affiliated legal entities sharing the same director, identical OKVED codes limited to agricultural production and sales, and no licenses for financial activities or capital management. One cooperative within the group reported only 327,000 rubles in profit on 14.3 million rubles of revenue, yielding a 2.2% margin, while carrying 55.9 million rubles in loans—nearly four times its yearly turnover.

Further checks on the Federal Service for Accreditation showed one entity registered serial production of imported industrial garlic-processing equipment, while another declared repeated large shipments of Chinese and Uzbek garlic exceeding 20 tons each, arriving after the domestic harvest season had ended. These findings indicate the operation likely functions as a year-round repackaging and distribution hub rather than a domestic producer.

Retail audits confirmed the absence of the advertised Russian garlic on shelves or in online catalogs of Magnit, Perekrestok, Pyaterochka, and Svetofor. Instead, private-label products from Tander were traced to Asian origins. Cadastral data showed at most 203 hectares of land near the legal address, none registered to the project, and the Rosselkhozcenter registry listed no seed-breeding status for the entities involved.

The holding group behind the project has been added to the Bank of Russia blacklist. While most associated websites and communities were blocked by Roskomnadzor, one Telegram channel with inflated subscriber counts continues active promotion. The investigation notes that thousands of duplicate franchise advertisements were mass-posted on Avito before being replaced with unrelated listings after negative coverage appeared.

Related articles

AntiMalware•Other

Rostelecom Suffers Mass Outage Disrupting Website, Mobile App and Personal Account

Rostelecom experienced a significant service disruption that left its official website, mobile application, and customer personal account either unavailable or functioning with errors. The first reports of problems began arriving around 12:40 Moscow time. Over a 24-hour period, the monitoring service Detector404 recorded approximately 2,500 user complaints. The largest share, 59 percent, originated from the Nizhny Novgorod region, followed by 4 percent from Kursk region and 2 percent each from Ryazan and Ivanovo regions. Rostelecom has not issued any official statement regarding the incident, and the root cause along with the timeline for full restoration remain unknown. The outage occurred in the same week that hosting provider ESTT suffered a similar infrastructure failure.

AntiMalware•Other

Russian State Duma Rejects Bill Proposing Fines for Covering Face in Public

On November 11 the State Duma rejected bill No. 1159193-8 that sought to introduce a new article in the Code of Administrative Offenses punishing appearance in public places with a face covered in a way that prevents identification. The draft included exceptions for medical reasons, official duties, weather conditions, and sports or cultural events. Two committees of the Federation Council on defense and security as well as constitutional legislation opposed the measure. The Duma committee on criminal and administrative legislation found the wording too vague and lacking legal certainty. It also noted that new offenses require prior federal-law prohibitions. On the same day lawmakers rejected another bill introducing criminal liability for crimes committed with deepfakes.

AntiMalware•Other

Basis Launches Basis AIR Platform to Optimize Shared GPU Resources for AI Projects

Basis, part of the RTK Data Centers group, has introduced Basis AIR, a platform designed to allocate computing resources across multiple AI initiatives within organizations. The solution targets small, medium, and large enterprises that have invested in expensive GPU hardware but face uneven utilization, with some teams waiting for capacity while others leave accelerators idle. According to the company, Basis AIR can increase accelerator utilization from 30% to 80% by enforcing task priorities, departmental quotas, and dynamic resource sharing. The platform supports running multiple workloads on a single accelerator and allows teams to borrow additional capacity when resources are available. It generates detailed consumption reports by project and division, helping executives decide whether new GPU purchases are truly necessary before approving further hardware acquisitions. Basis AIR is deployed on-premises in the customer’s data center, operates without internet connectivity, and integrates with third-party infrastructure platforms without requiring other Basis products.

Habr•Other

30 Tools for Six Core Information Security Tasks: From Recon to Forensics

The article provides a practical guide for system administrators managing a single website, database, and server setup. It covers 30 specific tools across six categories: reconnaissance, web application testing, infrastructure scanning, incident response, digital forensics, and secure development practices. Each section recommends five tools with explanations of their use cases, such as discovering forgotten assets like test2 or analyzing network traffic during off-hours incidents. Tools include Subfinder for passive subdomain enumeration, Burp Suite for request inspection, Nmap for port scanning, Zeek for structured logging, Autopsy for disk image analysis, and Gitleaks for secret detection in Git history. The guide emphasizes proper documentation of assets, including ownership confirmation by colleagues like Lena, and highlights limitations such as VPN effects on scan results or TLS termination at load balancers. It concludes by stressing the value of maintaining accurate records to simplify future certificate renewals and incident handling.