All posts by John Doe

■□□□□ Even some computer engineers are jobless to write this: Fake shell saying it is root (as if it was privilege escalation). Waste of time to people who have jobs. Content shared by fellow researcher .

■■■■□ We Smell a (DC)Rat: Revealing a Sophisticated Malware Delivery Chain. The Acronis Threat Research Unit (TRU) was presented with an interesting threat chain and malware sample for analysis that involved a known cyberthreat along with some interesting twists in targeting and obfuscation. https://www.bleepingcomputer.com/news/security/we-smell-a-dcrat-revealing-a-sophisticated-malware-delivery-chain/

■□□□□ GitHub announced updates to its Advanced Security platform after it detected over 39 million leaked secrets in repositories during 2024, including API keys and credentials, exposing users and organizations to serious security risks. https://www.bleepingcomputer.com/news/security/github-expands-security-tools-after-39-million-secrets-leaked-in-2024/

■■□□□ Oracle is being accused of poor incident comms as it reels from two reported data security mishaps over the past fortnight, amid a reluctance to publicly acknowledge all of the events as well as allegedly deleting evidence from the web. https://www.theregister.com/2025/04/02/oracle_breach_disaster_planning/

■■■■□ Cyber-Attack on Israel: Hackers exploit voicemail to hijack Telegram accounts in Israel, experts warn Cyber campaign, traced to Bangladesh and Indonesia, uses fake profiles and social engineering to breach Telegram accounts; Experts urge Israelis to disable voicemail or change default PINs and activate two-step verification for protection. https://www.ynetnews.com/business/article/sya8100kayg

■■■□□ Interesting thread: Malware by Lazarus. 🫥 🔤🅰️🔤🅰️🔤🔤🔤 https://x.com/blackorbird/status/1907393815633445261

■■■■■ Peeko – Browser-based XSS C2 for stealthy internal network exploration via victim’s browser. 🔤🔤🔤🔤🔤 🔠🔠🔠 https://github.com/b3rito/peeko

■■■■□ NetGaze is a tool designed to capture and analyze network traffic on Android devices without requiring root access. 🔤🔤🔤🔤🅰️🔤🔤 https://github.com/ThatNotEasy/NetGaze/

■■■□□ ‘Sim farms’, high heels, zombie knives: what scammers buy with the money they steal. https://www.theguardian.com/money/2025/mar/31/changing-threat-police-hunting-hi-tech-scammers-uk-billions

■■■■□🎲Feberis Pro: 4-in-1 Expansion Board for Flipper Zero. Feberis Pro: The Ultimate 4-in-1 Expansion Board for Flipper Zero