Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

HatedOne: This is how they caught Luigi Mangione

Video von HatedOne auf YouTube: Author: The Hated One - Bewertung: 139x - Views:928 Support independent research and analysis by joining my Patreon page…

0
↗ Quelle (youtube.com)
Reagiere als Erste:r — dein Feedback zählt!

Author: The Hated One - Bewertung: 139x - Views:928

Support independent research and analysis by joining my Patreon page: https://www.patreon.com/thehatedone



When the footage of the deed first came out, it was very quick and cold. It almost looked it was done by a professional. The target is Brian Thompson, CEO of UnitedHealth, a major health insurance company set on a path of multiple strategic mergers and acquisitions.



The images show his face in difficult lighting conditions from a very unnatural high angle in both images and smiling ear to ear in one of them. He is still wearing his hoodie, which is obfuscating a good portion of his visage, including his hairstyle, ears and neck. Despite some popular misconceptions, facial recognition AI is going to have a hard time ID’ing someone from such pics alone. It’s a very imprecise tool that is prone to error and can’t be relied upon as much as the hype would have you believe.



So to help identify him, the police publicize the images in hopes to get the public to provide more information. But not even his family or friends could recognize him from these images. Now the only hope is that there will be a crucial tip based on his profile that will lead to his arrest.



What’s more important than a suspect’s face? It is their profile. Their general height, build, skin tone, types of clothes they’re wearing, accessories, hats, glasses, bags… Similar manhunts in the past were relying on the same tactic – not advanced algorithms, but combing through every surveillance camera available and good old fashioned profiling.



In this particular instance, even though he seems to have been going for a gray man outfit, I find a couple of things that make him stand out even in New York City.



The first thing that sticks out the most is the backpack. He chose the most unique looking backpack imaginable, although I might understand a few reasons why. The bag seems to be the gray variant of PeakDesign Everyday Backpack. This is a $300 bag that is marketed primarily to influencers, photographers and techies. It’s usually featured as a camera bag.





SOURCES

[0] https://www.unitedhealthgroup.com/newsroom/2024/2024-11-26-uhg-to-host-2024-investor-conference.html

[1] https://projects.iq.harvard.edu/sciencepolicy/blog/racial-discrimination-face-recognition-technology

[2] https://www.peakdesign.com/products/everyday-backpack?Size=20L&Color=Charcoal

[3] https://6abc.com/post/unitedhealthcare-ceo-shooting-update-manhunt-goes-nationwide-police-learn-suspect-murder-brian-thompson-left-nyc-bus/15626563/

[4] https://apnews.com/article/unitedhealthcare-suspect-ceo-assassin-shooter-b5ff640798d799271ddd8db9f3d2a20e

[5] https://6abc.com/post/unitedhealthcare-ceo-shooting-nypd-checking-suspected-shooter-brian-thompson-left-nyc-bus/15625340/

[6] https://6abc.com/post/unitedhealthcare-ceo-killed-timeline-events-led-fatal-shooting-brian-thompson-outside-midtown-hilton-hotel/15630118/

[7] https://abcnews.go.com/US/unitedhealthcare-ceo-shooting-suspect/story?id=116460289

[8] https://www.foxnews.com/us/nypd-believes-unitedhealthcare-ceo-assassin-left-new-york-city-bus-morning-shooting

[9] https://abc7ny.com/post/unitedhealthcare-ceo-shot-what-know-masked-gunman-killed-brian-thompson-outside-new-york-hilton/15622866/

[10] https://www.msn.com/en-us/news/crime/new-video-shows-unitedhealthcare-ceo-brian-thompson-s-assassin-on-phone-moments-before-murder/ar-AA1vkeyo

[11] https://6abc.com/post/unitedhealthcare-ceo-killer-update-nypd-detectives-follow-leads-atlanta-amid-manhunt-murder-brian-thompson/15629943/

[12] https://www.theguardian.com/us-news/2024/dec/09/brian-thompson-shooting-suspect-mayor

[13] https://apnews.com/article/unitedhealthcare-suspect-ceo-assassin-shooter-eaee0b7d31b319f42e0cf7f2f7badfb1

[14] https://abcnews.go.com/US/hearts-broken-unitedhealth-group-speaks-after-ceo-brian/story?id=116515711

[15] https://www.msn.com/en-us/crime/general/unitedhealthcare-ceo-s-assassin-had-monopoly-money-stuffed-in-backpack-in-latest-clue/ar-AA1vuxAg#

[16] https://apnews.com/live/unitedhealthcare-ceo-brian-thompson-updates-day-6

[17] https://6abc.com/shooting-man-shot-midtown-manhattan/15622871/



CREDITS

Music by @co.agmusic



Follow me:

https://twitter.com/The_HatedOne_

https://www.reddit.com/r/thehatedone/



The footage and images featured in the video were for critical analysis, commentary and parody, which are protected under the Fair Use laws of the United States Copyright act of 1976.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - HatedOne: This is how they caught Luigi Mangione
id: 0a4fa1ff-9997-4db5-a39d-c71c602e9b03
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "HatedOne: This is how they cau" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("HatedOne This is how they caught Luigi M")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*HatedOne This is how they caught Luigi M*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "HatedOne This is how they caught Luigi M"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

IoC Intelligence (2 Indikatoren)
b5ff640798d799271ddd8db9f3d2a20eeaee0b7d31b319f42e0cf7f2f7badfb1
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich HatedOne: This is how they caught Luigi .... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten This is how they caught Luigi Mangione

Thematisch verwandte Begriffe: This, they, caught, Luigi · 6 Treffer

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-88003 | InvoicePlane is a self-hosted open source application for managing invoi…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag