Avito

MITRE ATT&CK in Detective Settings: Avito Launches Cyberdetective Game for Security Awareness Training

Avito security awareness specialist Ilya Nikiforov has developed Cyberdetective, a browser-based detective game that trains employees against real-world attack techniques mapped to MITRE ATT&CK. The game places players in the fictional company Lumi where they control mascot Spock the honey badger, investigate six cases involving voice cloning, MFA fatigue, lookalike domains, and physical tailgating. Each scenario trains specific defensive habits such as callback verification and evidence preservation rather than simple rule recall. Development took 74 days with AI agents handling code, tests, art generation, voice synthesis, and video while the creator focused on scenario design and methodology. The project includes 21 additional training tasks on a firing range covering phishing, AI misuse, and supply-chain risks, supported by 2,200 automated tests and an editor system for future content updates. The initiative demonstrates how non-developers can build production-grade security tools using modern AI tooling while maintaining strict data-protection controls.

Avito and BI.ZONE Launch Cyberdetective CTF for Non-Technical Employees Focused on Phishing and Social Engineering

Avito's Security Awareness team, in partnership with BI.ZONE, created the Cyberdetective jeopardy-style CTF competition specifically for non-technical staff who do not write code. The three-day event targeted 104 registered participants, with 44 completing tasks and 16 achieving maximum scores across scenarios involving phishing, OAuth consent abuse, file metadata analysis, and prompt injection. Tasks awarded flags not only for investigation but also for refusing risky actions such as granting excessive application permissions or clicking suspicious links. The design incorporated MITRE ATT&CK techniques including T1566.002 Spearphishing Link, T1528 Steal Application Access Token, and T1204.004 Malicious Copy and Paste. Organizers emphasized indirect hints to help participants recognize when an object required action, avoiding the common barrier where employees fail to understand that a strange string or domain needs examination. Feedback highlighted the value of hands-on decision-making over passive lectures, though some technical employees completed the set rapidly.

rkn-block-checker 0.6.0 Adds Local Web UI and Reduces False Positives on Anti-Bot Responses

The open-source tool rkn-block-checker received a major update in version 0.6.0 that improves accuracy when detecting Russian ISP censorship blocks. The previous version incorrectly flagged sites protected by anti-bot systems as blocked by Roskomnadzor because it searched for common stub-page strings without checking HTTP status codes. A new logic layer now separates rate-limit responses such as HTTP 429 from genuine provider stub pages that typically return 200 OK or 451. The release also introduces a fully local Web UI built with Python’s standard-library HTTP server and vanilla JavaScript, eliminating the need for heavy frameworks. Results stream in real time via NDJSON so users can watch checks complete without polling or WebSocket connections. The project remains available on PyPI and GitHub under the MIT license.

Avito Details Security Gates Implementation to Enforce Vulnerability Remediation Without Disrupting Developers

Alexander Trifanov, head of Application Security at Avito, shares a detailed case study on building security gates that block risky deployments while preserving developer experience. The approach relies on asynchronous scanning pipelines using SAST, SCA, secret detection, and YAML Security tools aggregated in ASOC or SOAR systems. Gates are placed at multiple lifecycle points including pre-receive hooks, CI/CD deployment stages, and manual unit-level overrides via a red-button mechanism. Strict false-positive management, deduplication, and emergency bypass controls are highlighted as essential for scalability across thousands of developers. The article covers pre-receive gating limited to ten-second scans, separate library update flows, and Kubernetes integration attempts with Kyverno. Avito reports that even unused red-button capabilities significantly improve SLA compliance without frequent enforcement actions.

How to Detect and Remove Stolen Photos from Fake Profiles, Listings and Ads

Photos are frequently stolen from social networks, old listings, building chats and review sites, then reused in fake profiles, advertisements and rental scams. Russian law under Article 152.1 of the Civil Code protects the right to one's image, while separate copyright rules protect the photographer. Victims are advised to gather strong evidence including full-page screenshots, PDF copies and original files before contacting platforms. Search tools such as Yandex Images, Google Lens and TinEye help locate copies across multiple services. Complaints can be filed directly with site administrators on VKontakte, Odnoklassniki, Avito and Telegram, or escalated to Roskomnadzor and police when personal data or fraud is involved. Preventive steps include lowering image resolution, adding watermarks and restricting album visibility through privacy settings.