🚨#Opendir #Malware🚨 hxxp://172.245.123.24/530/ hxxp://172.245.123.24/380/ ⚠️#FormBook #Stealer ☣️cosses.exe➡️c338c9cdccb21a6f023987865b4a6269 📦#AutoIt 📡hxxp://www.temecula.deals/📸⤵️ 📡hxxp://www.agistaking.xyz

I find myself repeating this a bit, so fuck it, here's how to get into an unprivileged namespace on Ubuntu 24.04/24.10. PSA: linux is stupid and for nerds, and Canonical/Ubuntu suck at security. $ busybox sh -c "unshare -Urmin" too embarassing to even call it a bypass

roddux Canonical Ubuntu 🤔

live.micsrosoftonline(.)com also used by them, but not mentioned. 06a5bd9cb3038e3eec1c68cb34fc3f64933dba2983e39a0b1125af8af32c8ddb (email attachment) is still wanted.

Oh yes this definitely sounds like a good use of public money. telegraph.co.uk/news/2025/05/2…

Many thanks everyone who came to my talk on the OWASP Nettacker project at the #OWASP Global AppSec 2025 Conference in Barcelona! Several attendees will be joining us to collaborate and contribute! 🚀 👉 github.com/OWASP/Nettacker

The Windows malware is signed "LISTERA LLC" 🇷🇺 Currently clean on VirusTotal 190MB installer to drop a 22MB installer. Downloads a 10GB test file and then their decoy files for "windgame" off of dropbox.

Threat Hunting Playbook: Deanonymizing APTs in the Deep/Dark Web (FOFA) FofaBot 🔍 Objective Identify APT infrastructure (C2 servers, repositories, mirrors, exfil nodes) that unintentionally expose .onion services or operational links to the surface web via: - HTTP references

I vibe coded and shipped an app in three days. It got hacked. Twice. Here’s what I learned. 🧵

Chinese spying on Dutch industries 'intensifying': Dutch defence minister reuters.com/business/aeros…

Remote Code Execution via Use-After-Free in JScript.dll (CVE-2025-30397) github.com/mbanyamer/CVE-…

🤔

ac1ef49f8bad2011c753c7ad9cf5d09a layer224[.]xyz mebuceiop[.]xyz triv[.]website thought-hop[.]app #Formbook abuse.ch

#Tycoon2FA #Phishing 🐟66 Domains related to Tycoon2FA Phishing with Low Hits on vt: pastebin.com/Yaf4HY73 Tool used: Validin CC: WatchingRac Who said what? Mikhail Kasimov

ܛܔܔܔܛܔܛܔܛ That sample also fetches a PowerShell script from silentclickteam[.]co ⤵️ urlhaus.abuse.ch/url/3556231/

Added an acquisition script for Chromium artifacts in the IR PowerShell repository. The script collects the Preferences and History (and can also collect all) files from one or all users' profiles. github.com/Bert-JanP/Inci…

I notice that at times a laptop will change the colour temperature from ~6500K to nearer 5000K making the image look more yellowish. Is this some standard OS feature somewhere, and does anybody know how to turn it off?