OSINT Investigation Exposes Fraudulent Russian Garlic Investment Scheme Masquerading as Local Production
An extensive OSINT investigation has dismantled an investment project that promoted itself as a patriotic effort to grow Russian garlic and challenge Asian imports. The scheme promised investors 50-70% annual returns, payback within a single seven-month season, and minimum investments as low as 50,000 rubles, while claiming more than 300 hectares of its own fields and guaranteed placement in major retail chains.
Public corporate records revealed a network of affiliated legal entities sharing the same director, identical OKVED codes limited to agricultural production and sales, and no licenses for financial activities or capital management. One cooperative within the group reported only 327,000 rubles in profit on 14.3 million rubles of revenue, yielding a 2.2% margin, while carrying 55.9 million rubles in loans—nearly four times its yearly turnover.
Further checks on the Federal Service for Accreditation showed one entity registered serial production of imported industrial garlic-processing equipment, while another declared repeated large shipments of Chinese and Uzbek garlic exceeding 20 tons each, arriving after the domestic harvest season had ended. These findings indicate the operation likely functions as a year-round repackaging and distribution hub rather than a domestic producer.
Retail audits confirmed the absence of the advertised Russian garlic on shelves or in online catalogs of Magnit, Perekrestok, Pyaterochka, and Svetofor. Instead, private-label products from Tander were traced to Asian origins. Cadastral data showed at most 203 hectares of land near the legal address, none registered to the project, and the Rosselkhozcenter registry listed no seed-breeding status for the entities involved.
The holding group behind the project has been added to the Bank of Russia blacklist. While most associated websites and communities were blocked by Roskomnadzor, one Telegram channel with inflated subscriber counts continues active promotion. The investigation notes that thousands of duplicate franchise advertisements were mass-posted on Avito before being replaced with unrelated listings after negative coverage appeared.
Related articles
OSINT for the Lazy Part 18: Extracting Value from Wayback Machine Archives for Bug Bounty and Security Research
The article explores passive reconnaissance techniques using web archive tools to uncover forgotten endpoints, configuration files, and sensitive parameters without directly interacting with target systems. It highlights three command-line utilities—waybackurls, gau, and waymore—that query public archives such as Wayback Machine, Common Crawl, AlienVault OTX, and URLScan to retrieve historical URLs. These tools help bug bounty hunters and penetration testers discover old API endpoints, admin panels, backup files, and JavaScript with hardcoded secrets that may still be exploitable. Installation instructions, usage examples, and filtering options are provided for each tool to maximize efficiency and reduce noise in results. The piece emphasizes that all methods remain fully passive, minimizing detection risk while requiring proper authorization before any active testing. Advanced users are advised to combine the tools for broader coverage and deeper analysis of archived responses.
Deploying Self-Hosted Hysteria 2 Proxy on Debian-Based Linux VPS via Terminal
A detailed guide explains how to set up a personal Hysteria 2 proxy server on a KVM VPS running Debian or Ubuntu without any web panels. The process begins with generating ed25519 SSH keys, hardening the sshd_config file, and restricting access with ufw to only TCP port 22 and UDP port 443. Hysteria 2 is downloaded from GitHub, made executable, and configured using a TOML file that enables salamander obfuscation and a self-signed TLS certificate. A custom systemd unit ensures the service restarts on failure. The client configuration includes SHA256 pinning of the server certificate to prevent MITM attacks. The guide emphasizes manual CLI operations that apply equally to other services such as Nginx and stresses checking local laws before deployment.
Rostec Scales PCAT Platform Nationwide as Russia's First Industrial Marketplace
Rostec has expanded its PCAT platform to every organization within the state corporation that manufactures civilian products. Operating since 2025 and upgraded in September 2026, the platform now unites more than 180 enterprises and research organizations. Its catalog contains over 1,250 finished products along with 370 technological and manufacturing competencies. Visitors can locate not only equipment and components but also partners able to design, test, or produce required solutions. The portal receives more than 23,000 weekly visits, 60 percent of them from corporations and large enterprises. Rostec is extending the network into the regions through supply-chain agreements already signed with Krasnodar Krai and the oblasts of Tver, Tula, and Ryazan. In parallel the corporation launched the Robot Management System in November 2025 for centralized control of robots, sensors, and related IT services.
Kate Mobile Loses VK API Access After New Request Limits Exhaust Quota in 1.5 Days
Popular third-party Android client Kate Mobile has been cut off from VK services following the introduction of strict monthly API request caps. VK implemented the new limits on September 7, offering verified partners up to 100 million requests per month while requiring payment for additional access by third-party services. Kate Mobile developers had requested pricing details in advance but received no response from VK. Calculations showed that the app's real user base would consume the entire 100-million-request allowance in roughly 36 hours, with the messages.send method alone generating twice the allowed volume. Caching optimizations cannot mitigate the issue because message sending cannot be cached. Developers view the change as an effort to eliminate alternative clients rather than a genuine monetization strategy. Users expressed disappointment, praising the app's long-term support and criticizing the official VK client for excessive features and advertising.