Brian Baskin

Threat researcher, malware analysis, RE, incident response, with some old school forensics and CTFing. Apologetic ginger. These are my personal opinions

[Cannibal 🎃 @Cannibal]

This is all just a very aggressive Cybersecurity Awareness Month campaign

[Brian Baskin @bbaskin]

@0xTriboulet You gotta back up regardless. May as well back up knowing you won't crash into someone else.

[Socket @SocketSecurity]

🚨 New investigation: Socket found malicious LiteLLM workflows running 11 days before the attack, targeting 20 secrets including GitHub, cloud, and AI credentials.

After our disclosure, LiteLLM linked a stolen token to approval of the malicious release.

https://t.co/wcVsEPiRxf

[Unix @Unixsystem13]

Imagine trying to brute force 1 out of 394,020,061,963,944,792,122,790,401,001,436,138,050,797,392,704,654,466,679,482,934,042,457,217,714,972,106,114,142,662,548,849,156,408,066,279,903,068,160 possible values and getting it on the 5th try.

[tuckner @tuckner]

Just used LiteLLM to create my first PHP website. The AI even suggested getting a certificate from eMudhra for HTTPS to protect my login page. The future looks really bright 🥳

[Socket @SocketSecurity]

🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline.

Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.

[Socket @SocketSecurity]

🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.

Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.

[Dmitrii Eeeekimov @Ekimko]

Лучшее, что я видел за последнее время — чел пилит ASCII MMORPG, в которой вся графика состоит из букв и символов.

Да, буквально весь мир, персонажи, окружение и спецэффекты нарисованы разноцветным текстом.

Автор сейчас экспериментирует с магией, визуалом и боссами. Я прям залип на то, как из нескольких десятков символов получается такая красота.

Буквально сны при температуре 37,2.

Via: https://t.co/vtYXAaEioi

[Arika @Arikalabs]

In 2004, a German demoscene group released a game called .kkrieger.

It was a full 3D first-person shooter with dynamic lighting, textures, sound effects, music, and monster AI.

The entire executable was 96 kilobytes. Instead of storing images and audio files, they wrote C++ and Assembly that generated the 3D meshes, textures, and sound waves mathematically in RAM when the game booted.
Today, a single website's "Accept Cookies" banner is 10x larger than that entire 3D game.

[Jason Koebler @jason_koebler]

I pulled the Character bankruptcy docs. They show:

- They were spending $14 million/month on compute alone at a time their revenue was around ~$1 million/month
- Currently losing $9 million a month
- They admitted they enshittified & that it didnt work

https://t.co/LiJLikYGtt

[Brian Baskin @bbaskin]

@Myrtus0x0 I feel honored to be a victim in the same scam campaign as you

[Brian Baskin @bbaskin]

Received unsolicited job offer at address I rarely use, where they misspelled my name as Brain

Then a LinkedIn invite

30 seconds later, a phone call from a call center to my unlisted cell phone about the same role

I could not hang up fast enough

This method _does not work_

[Brian Baskin @bbaskin]

No context but can breathe easy again

Some feel good tunes

https://t.co/c73yLwpe3a

[Brian Baskin @bbaskin]

@greglesnewich @SocketSecurity Thank you! This is going to be some fun challenges

[Brian Baskin @bbaskin]

I'm excited that next week I'll be joining the awesome threat research team at @SocketSecurity, focusing on threats in supply chain attacks.

An awesome new challenge and opportunity to join a stellar team.

[Brian Baskin @bbaskin]

@InkyCyber Thank you!

[Brian Baskin @bbaskin]

@cci_forensics Thank you! It's going to be some fun work, and I hope you have just as exciting work for your future.

[Brian Baskin @bbaskin]

@Myrtus0x0 @SocketSecurity Thank you. Agreed! This is an area that's going to get more sophisticated attacks, and I'm here for it 😄

[Brian Baskin @bbaskin]

@PandaRE__ @SocketSecurity Thank you! ❤️

Looking forward to the exciting new work. A complete shift from many things I've done in the past

[Brian Baskin @bbaskin]

@bugfireIO Thank you. Going to be some exciting times here