---
title: "Beyond Usernames"
url: https://daily.dev/posts/beyond-usernames-eadznq63e
source_url: https://www.youtube.com/watch?v=DSHIF3GHR9Y
type: video:youtube
source: "John Hammond"
published: 2026-07-01T14:15:15.261Z
updated: 2026-07-01T14:15:31.557Z
tags: ["malware"]
reading_time: 1
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Beyond Usernames

**[John Hammond](https://daily.dev/sources/johnhammond)** · 1 min read · 0 upvotes · 0 comments

## Summary

An analysis of the Pamora Linux backdoor sold by a threat actor known as Darkworm, written in C. The investigation goes beyond the malware itself to examine the actor's presence across dark web forums including Spy Hackers, Nulb, Anti-Chat, and Cracked. OSINT techniques using username tracking are discussed, with the caveat that identical usernames across platforms may indicate separate individuals rather than the same actor.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.youtube.com/watch?v=DSHIF3GHR9Y>

## Similar posts on daily.dev

- [Chinese hackers hijack auth flow, spy on isolated network for a decade](https://daily.dev/posts/chinese-hackers-hijack-auth-flow-spy-on-isolated-network-for-a-decade-yeupuqtg0) · BleepingComputer · 0 upvotes · 0 comments
- [OctLurk and SilkLurk: new Backdoors in Central Asia](https://daily.dev/posts/octlurk-and-silklurk-new-backdoors-in-central-asia-gibuex51u) · Securelist · 0 upvotes · 0 comments

---

Tags: [#malware](https://daily.dev/tags/malware)

[View this post on daily.dev](https://daily.dev/posts/beyond-usernames-eadznq63e)