Eric Parker

202k Tech / Cybersecurity YouTuber.

PHD in vibe coding

Security Researcher, Reverse Engineer

[Eric Parker @EricParker]

Victory Royale

[TeamYouTube @TeamYouTube]

Update: we’re walking this back. The video has been reinstated & the strike removed. One of our reviewers mistakenly upheld this strike during the appeal process when it should have been reinstated. Truly so sorry for the experience here, we’ve shared feedback w/ our reviewers, DMing you w/ more

[Eric Parker @EricParker]

Super tower is in fact giant

[Eric Parker @EricParker]

@vxdb I recently upgraded the small nuclear reactor that powers it. I hope the city doesn’t get too mad.

[Eric Parker @EricParker]

@__alula GNU / Windows

[Eric Parker @EricParker]

@vxdb Codex in most cases. Workflow feature on Claude is cool though

[bet3rd @bet3rd]

So instead of shutting down that API for good, they just removed it from the page?
Are meta employees on drugs???

You can read more on https://t.co/He7s7zj5dA

[Eric Parker @EricParker]

@SanduloSandhadi @VadimYuryev Apple are still charging more than it costs for ram and storage even with the price hikes. Would need another doubling to get to breakeven.

[Eric Parker @EricParker]

@msnofficial_on Thea allowed / denied list of hardware was functionally the same besides a version number for windows 11 and sometimes just random (skylake x allowed but desktop not). For apple silicon it is a fundamentally different architecture.

[kalomaze @kalomaze]

i want to not overclaim but afaic this is the single worst security vulnerability in social media history, for any platform, period
i don't think people are giving this the weight it deserves. it's not generically bad. the scope was ~any non-2FA accounts. as in, billions hackable

[Eric Parker @EricParker]

@soft_fox_lad You are absolutely right. Here is your account.

[impulsive @weezerOSINT]

meta gave their AI support agent the ability to modify your instagram account. no identity verification. people figured this out and accounts are being taken over right now

[Eric Parker @EricParker]

@NearestCommit Proprietary / non mesa driver support

[Eric Parker @EricParker]

@ak_1490 @lafaiel @exolabs in the context of openclaw I mean. The local computer for OpenClaw is almost never running the model, the mac mini is just to handle the software + have imessage.

[Eric Parker @EricParker]

@ak_1490 @lafaiel People do not use the Mac for inference they use it so claw can have iMessage. Linux / windows computer is not competitor in this space

[Eric Parker @EricParker]

@KeyTryer If the law is not unconstitutional in theory any publisher with us assets could be hit by the courts

[Eric Parker @EricParker]

@VadimYuryev No anticheat vendor is likely to allow it in vm, maybe for ports but you can’t have kernel ac on Mac.

[Eric Parker @EricParker]

Most disasterous AI 'customer support' rollout yet? I'm honestly shocked this happened in such a broken state.

[ZachXBT @zachxbt]

It’s likely because there was a massive Instagram / Meta exploit over the weekend that was just patched.

Basically the Meta AI support is garbage and has lots of access perms which allowed you to reset passwords to any user without 2FA and did not verify who you are.

Telegram channels on Instagram offering IG black market services made lots of $$$

[Eric Parker @EricParker]

@geerlingguy i only use high quality unleaded ddr

[Eric Parker @EricParker]

@IsaacKing314 @stupidtechtakes

[vx-underground @vxunderground]

Hello,

If you're a person who enjoys malware and/or knows Python and wants to see malware that targets STEAM and GAMERS, I have the source code to a malware I have named "Stealer.Python.GMBA.Manipulator".

This malware was originally noted on Xitter from @GMBA.

In summary, this Python malware kills the Steam process and relaunches it with the "-cef-enable-debugging" flag. Because Steam is a Chromium app, this allows the malware payload to manipulate Steam web pages with web socket gunk and Javascript gunk.

This malware can "modify" user inventories, "block users", etc. It is all a facade designed to trick and social engineer Steam users into giving their expensive Counter Strike stuff to them.

It appears to be written using AI. Regardless of that fact this malware is creative and I like it.

The malware source code to this can be found under the "/Python/" directory. It is named "Stealer.Python.GMBA.Manipulator.7z".

This malware campaign is still active and the C2 is still live. If you execute the __main__.py file you might cook yourself, so be careful. Alternatively, you can run this in a VM and send the malware campaign authors pictures of Goatse.

https://t.co/mphEJjPJkh

[vx-underground @vxunderground]

I got the payload to this malware. It is absurdly silly. This malware is killing me bro. It is so unbelievably silly.

This was 100% written using Claude or ChatGPT. I've never seen a malware payload LEAVE NOTES describing what it's doing.

The malware has a Powershell script that connects to the C2 for stinky malware stuff. This module is responsible for persistence. Thankfully their persistence script documented the entire code base and file locations.

Very cool. Thank you spoopy Russian Counter Strike scammers.

Even more silly, the C2 is hardcoded as a string (seen in attached image). The C2 address shows it has been an active malware campaign since at least January 31st, 2026 based off of data present on VirusTotal. It was initially uploaded as "9lixh".

This persistence script was from a victim machine so I've censored some data. Regardless, the botched cyrillic notes also makes me giggle.

Russian to English translations present in this silly script which documents everything for us:
# Пути для удаления
# Paths for deletion

# Завершаем процессы python и pythonw
# Terminate/finish the python and pythonw processes

# Удаляем автозапуск из реестра
# Remove autorun from the registry

# Завершаем процесс монитора
# Stop the monitoring process

# Новая функция для проверки f.json и убийства процессов
# New function for checking f.json and killing processes

# Проверяем флаг library
# Check the library flag

# Список процессов для убийства
# List of processes to kill

# Проверка флага удаления (каждые 20 секунд)
# Check the deletion flag (every 20 seconds)

# 20 секунд при интервале 2 секунды
# 20 seconds with a 2-second interval

# Проверка f.json и убийство процессов (каждые 4 секунды)
# Check f.json and kill processes (every 4 seconds)