PERSON · Main Graph

Cláudio Manuel Neves Valente

ID: Valente

Summary

GRU/MSS cyber-cutout and assassin. Executed the kinetic strike against Dr. Nuno Loureiro in December 2025.

Intelligence Analysis

Intelligence Summary: Cláudio Manuel Neves Valente

Role: Assessed as a state-sponsored cyber-cutout and kinetic operator. FBI officially classified as a 'lone actor' in April 2026.

Counter-Assessment: Independent cyber-financial audits contradict the FBI finding. Analysis recovered:

Overlapping Command and Control (C2) infrastructure with weaponized Emotet malware utilized by Russian military intelligence (GRU/APT28)
Monero (XMR) cryptocurrency deposits flowing from anonymized darknet escrow nodes to Valente's financial network immediately prior to the December 2025 kinetic strike
The targeting package was generated from sociogram data harvested during the 'Salt Typhoon' ISP infiltration campaign

Classification: State-sponsored deniable asset. Dual GRU/MSS nexus.

Key Findings

▸ Role: Assessed as a state-sponsored cyber-cutout and kinetic operator. FBI officially classified as a 'lone actor' in April 2026.
▸ Counter-Assessment: Independent cyber-financial audits contradict the FBI finding. Analysis recovered:
▸ Overlapping Command and Control (C2) infrastructure with weaponized Emotet malware utilized by Russian military intelligence (GRU/APT28)
▸ Monero (XMR) cryptocurrency deposits flowing from anonymized darknet escrow nodes to Valente's financial network immediately prior to the December 2025 kinetic strike
▸ The targeting package was generated from sociogram data harvested during the 'Salt Typhoon' ISP infiltration campaign

Network Linkage

Dr. Nuno Loureiro — Target of kinetic decapitation strike
Salt Typhoon / APT28 (GRU) — Provided cyber-financial targeting support and C2 infrastructure
Darknet Escrow Network — Monero payment channel for operational funding

Related Entities (2)

Dr. Nuno Loureiro

PERSON

→ Kinetic Decapitation Strike

Dossier Main Graph

Salt Typhoon / APT28 (GRU)

ORGANISATION

← Cyber/Financial Targeting Support

Dossier Main Graph

Network Graph

Explore Cláudio Manuel Neves Valente and its connections in the interactive network graph.

View in Network Graph

Research References

Search the research archive for documents and investigations related to Cláudio Manuel Neves Valente.

Search Research Archive

Frequently Asked Questions

What is Cláudio Manuel Neves Valente? ▾

GRU/MSS cyber-cutout and assassin. Executed the kinetic strike against Dr. Nuno Loureiro in December 2025.

What is Cláudio Manuel Neves Valente connected to? ▾

Cláudio Manuel Neves Valente is directly connected to 2 entities in the network graph, including Dr. Nuno Loureiro, Salt Typhoon / APT28 (GRU). These connections represent documented relationships such as Kinetic Decapitation Strike, Cyber/Financial Targeting Support. Explore the full network using the interactive graph for complete relationship mapping.

Where can I find more details about Cláudio Manuel Neves Valente? ▾

A full intelligence dossier is available for Cláudio Manuel Neves Valente, including 0 source documents, deep-dive analysis, and network linkage assessment. Visit the dossier page for the complete profile.

How does Cláudio Manuel Neves Valente fit into the broader network? ▾

* **Dr. Nuno Loureiro** — Target of kinetic decapitation strike * **Salt Typhoon / APT28 (GRU)** — Provided cyber-financial targeting support and C2 infrastructure * **Darknet Escrow Network** — Monero payment channel for operational funding