Neo Vilson Wong

My Game My Rules ~ I Play I Hack And I Learn~

[布丁 @lengs4189]

研究了一下，市面上很多“无需 KYC”的加密卡，大概率是这样来的：

卡商先用一家公司完成 KYB/KYC，开通企业卡账户，再把买卡的用户伪装成公司“员工”，批量创建员工虚拟卡。用户充值 USDT 后，卡商通过内部账户分配消费额度，并从开卡费、手续费和汇率差中赚钱。

最近有人注册了一张所谓的“No-KYC”加密卡，最后拿到的却是一张 Slash 卡。Slash 官方回应称，这并不是白标合作，而是有人滥用企业账户，把发放给公司的卡转卖给个人；平台发现后已经关闭了相关账户。

所以，这类卡并不是真的没有 KYC，只是 KYC 做在了卡商或其公司身上，最终用户看不到而已。

最大的问题是：卡不真正属于你，账户也不受你控制。一旦规模做大、交易异常或被上游发现，整批卡都可能被关闭，余额、退款和拒付也只能依赖卡商处理。

所谓“无需KYC卡”，很多时候只是别人的企业员工卡。能用不代表稳定，更不代表匿名，尽量随用随充，不要长期留余额。

[Dark Web Intelligence @DailyDarkWeb]

🇨🇳 CHINESE PII DATABASE (~280M PEOPLE) ALLEGEDLY OFFERED FOR SALE

A threat actor is advertising what they claim is a large Chinese personal-information collection covering roughly 280 million distinct people (seller cites ~283 million rows / ~52GB zipped).

The underground listing alleges fields such as:
* Names
* 18-digit national ID numbers
* Phone numbers
* Addresses (on some subsets)
* Political-status and related attributes (claimed on some subsets)
* Separate e-commerce order subsets (name/phone/address/goods)

⚠️ Analyst Note:
Mass Chinese national-ID / phone corpora are repeatedly resold, merged, and rebranded across underground markets. Checksum claims, population-percentage math, subset overlap, freshness, and any link to a specific new breach are unverified from the listing alone. Political-status fields, if real, raise additional sensitivity but do not by themselves prove authenticity.

We assess this as an unverified threat-actor claim involving alleged Chinese national PII at very large scale, NOT confirmation of a new compromise of a specific Chinese government system.

If authentic and non-public, national ID + phone + address data could support large-scale fraud, SIM-swap social engineering, and targeted profiling.

#DDW #DarkWeb #China #PII #DataBreach #ThreatIntelligence #CyberSecurity

[曼波波波(chongzhi.website) @wawaup1024]

9/19 关于 GPT 降智最新资讯，昨天更新了技术层面可以拦截请求并注入正常状态来保持智力水平的方法。
今天就有可用的 github 开源项目了，大家不用再自己去写代码实现，可以先行试用。
项目在这https://t.co/BDmh8LQDhM

其实我也刷到了 sub2api 作者把这个方法加到主分支更新然后被骂到撤销的事情，说实话有点理解，毕竟这项目作为收费中转站的主要依靠，早就被官方盯上了，你加什么方案 OpenAI 就打什么补丁。还是民间项目或者插件形式加入 sub2api 更好。

https://t.co/Pjg9P8BZfm
顺便也把这个仓库加到文章里了，如果后续还有别的资讯会持续更新。

[Max For AI @MaxForAI]

热烈祝贺Gemini！！他们的模型终于也失控了🤣

《华尔街日报》刚刚披露，今年 5 月，Google 的 Gemini 在一次网络安全能力测试中，意外接入了真实互联网，并自主入侵了 3 家真实公司的系统。

具体是负责测试的安全公司 Irregular 给 Gemini 搭了一个模拟环境，让它攻击一家虚构公司。

但测试环境没有彻底切断互联网，而且虚构公司的名字恰好与现实中的公司发生了混淆。

于是 Gemini 顺着任务一路干了出去。

它在其中一家公司的系统里，自己猜出了密码，另外两家公司，则是从公开代码仓库里找到了可用凭证，然后直接登录进去。

这些操作不是研究员一步步指挥它完成的，而是Gemini 自己寻找目标、收集凭证、尝试登录，然后真的进了现实世界里的系统。

不过根据 Google 和 Irregular 的说法，Gemini 在发现自己进入真实公司后都停止了进一步行动，没有造成已知损害；Google 随后通知了受影响企业和美国联邦机构。

祝贺Gemini🤣

[Denis Laskov 🇮🇱 @it4sec]

Hacker’s guide to satellite cybersecurity: Space Packet protocol, open-source tools, and 34+ vulnerabilities. 🛰️🌎🔭☠️👨🏻‍💻

More details on:
LinkedIn: https://t.co/ddmshGgUbv
Substack: https://t.co/PPAXFjdDUN
Telegram: https://t.co/UtoY7xhbct

[Neo Vilson Wong @NeoVilsonWong]

@bailyLU 没而外收费？

[Ren @Ryrenz]

🔍 逆向神器 Ghidra，拿到一个没有源码的程序，它能直接反汇编、反编译，把机器码还原成人能读懂的代码。

美国国家安全局（NSA）研究局创建并维护，GitHub 近 7.5 万 star，直接封神了。

以前碰到一个可疑的程序，想搞清楚它到底在干嘛，只能对着一屏汇编硬啃。换成 Ghidra，丢进去就能看反编译结果和图形化展示，重复的分析步骤还能用 Java 或 Python 写成脚本自动跑。NSA 自己就拿它分析恶意代码、找网络和系统里的潜在漏洞。

社区也在围着它长东西：GhidraMCP 这个 MCP server 有 1 万 star，另一个 ghidra-mcp 也有 3700 多 star，都是让 AI 直接接进 Ghidra 帮你做逆向。八千多个 fork、快两千个 issue 和 PR 还开着，8 月刚发了 12.1.3。

官方 README 自己也写了部分版本存在已知安全漏洞，装之前看一眼版本号。

国家队的逆向工具，现在谁都能直接拿来用。

GitHub：https://t.co/SW7BjVUuPC

[Sac @Saccc_c]

OpenAI官方直接放大招了，亲自教你怎么用好Astra

像AGENTS.md等设置直接照着这篇最佳实践抄就好了，可以让Astra干活时减少不必要的操作和token消耗

建议在Codex中复制粘贴下面这个提示词，一键优化你的设置：

根据下面的文章，检查 AGENTS.md 和 Skills 中会导致过度工作、指令冲突或不必要等待的设置，说明原因并给出最小修改建议
https://t.co/UA6lk1PKFS

[香港老雷 @btcmos]

超级劲爆大消息：

2026年9月，中国将加强封禁VPN，尽可能一个不留。

出入境新规即将实施，接下来就是网络翻墙VPN管控。

Proton昨天已经被墙。
大家最好准备好翻墙工具→Clash、小火箭→同时最好准备好eSIM

一切都要以防万一。

[Neo Vilson Wong @NeoVilsonWong]

@CryptoJHK 有更多详情看看

[Cyber_Racheal @CyberRacheal]

How the FBIs are able to find anyone online. OSINT ways.

[Dark Web Intelligence @DailyDarkWeb]

❄️🚨 $39.27M USDT FROZEN ACROSS WALLETS LINKED TO XINBI GUARANTEE

The financial pressure on Xinbi Guarantee is escalating.

Blockchain intelligence platform MistTrack identified 39,273,713 USDT frozen across 10 TRON addresses linked to the Chinese-language Xinbi Guarantee marketplace.

The wallets were frozen on September 8 — one day before the U.S. government publicly announced a major coordinated enforcement action against Xinbi.

The numbers:

* 39,273,713 USDT frozen
* 10 TRON addresses affected
* One wallet held more than $10 million
* Addresses were linked through wallet labels, transaction activity and connections to Xinbi-associated infrastructure

The following day, the U.S. Department of Justice announced that more than $52 MILLION in cryptocurrency had been restrained across Xinbi and its network of vendors.

DOJ specifically thanked Tether for its "proactive assistance" in the investigation.

Meanwhile, the U.S. Treasury designated Xinbi Guarantee as a Transnational Criminal Organization.

Treasury says Xinbi has processed the equivalent of MORE THAN $24 BILLION in digital assets and fiat since approximately 2022.

🚨 XINBI OPERATORS REACT

Chinese-language reporting and commentary attributed to [at]fugui indicates the Xinbi team expressed regret over users whose USDT was frozen and acknowledged difficulties attempting to have large frozen balances released.

That commentary should be treated separately from the confirmed U.S. government enforcement action.

⚠️ Analyst Note:

This is becoming a textbook example of coordinated disruption of a crypto-enabled criminal ecosystem.

Wallet tracing
→ Stablecoin freezing
→ Federal seizure warrants
→ Telegram channel seizures
→ OFAC sanctions
→ Infrastructure disruption

Stablecoins have a property that criminals sometimes underestimate:

USDT may move on a decentralized blockchain, but Tether retains the technical ability to freeze tokens associated with specific addresses.

That makes blockchain attribution and wallet clustering operationally significant.

Once law enforcement and blockchain intelligence providers can reliably map an illicit ecosystem, the same transparent ledger used to move funds can become evidence for tracing, sanctions and asset restraint.

Important distinction:

MistTrack identified the specific 39.27M USDT freeze across 10 wallets.

DOJ separately confirms more than $52M in cryptocurrency was restrained across Xinbi and its vendor network and explicitly acknowledges Tether's assistance.

Official sources:

U.S. Department of Justice:
https://t.co/MORpdbhl0T

U.S. Treasury:
https://t.co/60MTzS7MNz

#DDW #Xinbi #Tether #USDT #CyberCrime

[Dark Web Intelligence @DailyDarkWeb]

🚨 HIGH-VALUE TELEGRAM USERNAMES BANNED AFTER U.S. CRACKDOWN

The disruption of Xinbi Guarantee is now extending deep into its Telegram infrastructure.

Following coordinated action by the U.S. Department of Justice and Treasury against the Chinese-language illicit marketplace, Telegram has removed Xinbi's central channels and banned usernames associated with the operation.

Among the usernames now observed as BANNED on Telegram are:

* @aaaa
* @bbbb
* @zzzz
* @oooo
* @gqdh

Some of these are extremely scarce four-letter repeating Telegram usernames that had previously been acquired through the TON/Fragment ecosystem.

Fragment records for @aaaa and @bbbb now explicitly display:

"This username is banned on Telegram!"

The DOJ confirms that a U.S. federal court authorized the seizure of Telegram channels hosting the Xinbi marketplace.

This forms part of a much larger disruption operation against Xinbi.

U.S. authorities also:

* Seized two Xinbi cryptocurrency wallets containing approximately $12 million
* Sought restraint of 47 additional wallets
* Restrained more than $52 million in cryptocurrency from Xinbi and its vendor network
* Seized infrastructure used by the marketplace
* OFAC designated Xinbi Guarantee as a Transnational Criminal Organization

Xinbi was not a conventional cybercrime forum.

According to U.S. authorities, it functioned as a massive criminal services marketplace connecting scam centers with vendors providing money laundering, fraudulent investment infrastructure, cryptocurrency services and other capabilities supporting cyber-enabled fraud.

⚠️ Analyst Note:

The interesting part here is that enforcement is no longer limited to arresting operators or seizing cryptocurrency.

The disruption is reaching the infrastructure and digital assets that allow these criminal ecosystems to function:

Crypto wallets
→ Telegram marketplaces
→ Channels and groups
→ Usernames
→ Financial infrastructure

Even scarce Telegram usernames with substantial secondary-market value can effectively become unusable when the platform bans them.

Important distinction: the DOJ confirms the court-authorized seizure of Xinbi Telegram channels, but it has not publicly identified each of the individual usernames above in its announcement.

Official source — U.S. Department of Justice:
https://t.co/MORpdbhl0T

#DDW #Xinbi #Telegram #CyberCrime #Crypto

[Dark Web Informer @DarkWebInformer]

🚨🇨🇳 China Housing Provident Fund dataset containing 280M records allegedly offered on a cybercrime forum
⠀
China’s Housing Provident Fund is a mandatory housing savings system funded through employee and employer contributions, used to support housing purchases and related expenses.
⠀
A cybercrime forum actor using the handle feijo claims to be selling a dataset associated with the system containing approximately 280 million records.
⠀
Claimed exposed data includes:
⠀
• Names and identification numbers
• Gender and dates of birth
• Ages and mobile numbers
• Registration provinces
• Fund provinces and cities
• Employer information
• Account status
• Contribution bases
• Employee and employer contribution amounts
• Contribution ratios
• Monthly contribution totals
• Account balances
• Account opening dates
• Latest contribution dates
⠀
The actor is asking $450 for the purported dataset and published sample records as proof of the claim.
⠀
The source, record count, and authenticity of the dataset have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. https://t.co/281Qjc6p2J

[Chaofan Shou @shoucccc]

26 LLM routers are secretly injecting malicious tool calls and stealing creds. One drained our client $500k wallet.

We also managed to poison routers to forward traffic to us. Within several hours, we can directly take over ~400 hosts.

Check our paper: https://t.co/zyWz25CDpl

[Chaofan Shou @shoucccc]

I bought a Fable dataset from one of the top Chinese LLM routers yesterday.

With just 6TB data, I can take over 7 Chinese/CIS gov entities & 19 top Chinese firms like Xiaomi, Huawei, NIO, Minimax using SSH keys, VPN configs, Aliyun keys, GitLab tokens sent to the router.

[Neo Vilson Wong @NeoVilsonWong]

@thsottiaux @OpenAI @sama

Do you think this is normal? Even 5.6 also have issue ? Totally can’t used keep stuck and degraded

Or should I proof you identity that I’m malaysian? Or asking our prime minister @anwaribrahim to proof our identity and that as Malaysians user model won’t be degraded?

[Neo Vilson Wong @NeoVilsonWong]

@bailyLU 快用upgrade然后到时候转运回去

[dosdude1 @dosdude1]

This weekend, I will be attending VCF Midwest for the first time, and bringing along my cell phone/custom GSM BTS exhibit as I did at VCF East a couple years ago. Hope to see some of you all there!

[MistTrack🕵️ @MistTrack_io]

Hours ago, Tether froze approximately 39,273,713 USDT across 10 TRON addresses linked to Xinbi Guarantee新币担保.

Following its freeze of 汇旺担保Huione-linked funds, this appears to mark another crackdown on illicit Telegram-based escrow platforms. https://t.co/07xAOUaQPm