In August 2010, malware researcher/blogger Dancho Danchev disappeared, his last post on ZD Net’s Zero Day blog (a blog covering online security) appearing on August 18th of last year, and the last entry on his personal blog was in September 2010. One of his most recent posts on his personal blog was a summary of three year’s investigation into Cyber Jihad.
In the past few days, ZDNet took to the web with some disconcerting evidence that Danchev, who lived in Bulgaria, was either taken, or forced to flee, against his will. ZDNet, which is owned by CBS Interactive, has made numerous attempts to contact Dancho Danchev via phone, e-mail, and snail mail. They’ve contacted Bulgarian authorities and Danchev’s colleagues to no avail; Dancho Danchev is missing.
In December 2010, the online site received a cryptic message from a Bulgarian source that Danchev was okay, but “in a lot of trouble.” According to the article, this is keeping him away from computers and telephones, which makes contacting him nearly impossible.
Following that, a colleague of Danchev’s reached out to ZDNet concerning a letter received on September 9, 2010. The letter reads:
“As I consider you as a trusted colleague, and someone who understands the big picture of cyber crime and cyber espionage, I’m attaching you photos of the “current situation in my bathroom”, courtesy of Bulgarian Law enforcement+intell services who’ve been building a case trying to damage my reputation, for 1.5 years due to my clear pro-Western views+the fact that a few months ago, the FBI Attache in Sofia, Bulgaria recommended me as an expert to Bulgarian CERT -> clearly you can see how they say “You’re Welcome”. I’m sending you these not with the idea to see them published, but as an insurance in case things get ugly, knowing that a trusted third-party has access to these and can always distribute them to [redacted] mailing list members, and pretty much the entire industry, especially the press. The LEO behind the whole operation: [ NAME REDACTED ] I’m in a process of contacting journalists -> just in case. I hope you’re the trusted industry contact that I think you are, and you’ll basically keep these somewhere safe. Thank you, and please use my PGP key.”
Photos (above and below) of what seem to be bugging devices hidden in the walls of Danchev’s residence accompanied the letter. ZDNet decided to publish the information to help them determine the fate of Dancho Danchev’s disappearance. They are asking for help: If anyone has information on Dancho Danchev’s whereabouts, please contact ZDNet.
