// What to read next
What to read after American Kingpin
Where to go after American Kingpin, picked from our catalog. The next step up from beginner level, weighted toward the topics this book covers.
01 · 2010
Cybercriminalité
A practitioner's treatment of cybercrime law — offences, procedure, and the application of criminal law to digital crime — by a French magistrate specialised in the field.
Intermediate3/5Myriam Quéméner, Yves Charpenel02 · 2011
Kingpin
Kevin Poulsen's reconstruction of Max Butler's career — from white-hat consultant to running CardersMarket, the carding forum that consolidated the early-2000s underground — and the FBI investigation that finally took him down.
Beginner5/5Kevin Poulsen03 · 2022
Tracers in the Dark
Andy Greenberg's investigative narrative of how Bitcoin's allegedly-anonymous public ledger became, in the hands of researchers and federal investigators, the most powerful OSINT tool of the last decade.
Beginner5/5Andy Greenberg04 · 2022
Cyberattaques
A clear, journalistic decoding of the cyberattack ecosystem — ransomware gangs, state actors, and the economics and geopolitics behind the headlines — by one of France's best-known cyber experts.
Beginner4/5Gérôme Billois, Nicolas Cougot05 · 2024
Dark Wire
Journalist Joseph Cox's account of Anom, the encrypted phone company secretly run by the FBI from 2018 to 2021, and of the global wave of arrests that followed Operation Trojan Shield.
Beginner4/5Joseph Cox06 · 2014
Spam Nation
Brian Krebs's investigative deep-dive into the Russian-speaking pharma-spam economy of the late 2000s — the affiliate networks, the rivalries, and the people who ran them.
Beginner4/5Brian Krebs07 · 2022
The Ransomware Hunting Team
Investigative journalism on the volunteers who quietly cracked ransomware to free victims for free, while the FBI mostly watched. A people-first look at the early ransomware economy.
Beginner4/5Renee Dudley, Daniel Golden08 · 2024
OSINT Techniques
Michael Bazzell's relentlessly updated technical manual for finding people, accounts, breach data, geolocation evidence, and online identifiers — the de facto reference of the modern OSINT field.
Intermediate5/5Michael Bazzell