Marcel SK 🇧🇷🇮🇱

Technology enthusiast, CyberSecurity Engineer, DJ and passionate about music and gadgets.

[Stephen Sims @Steph3nSims]

I asked ChatGPT to create a graphic depicting Adversarial AI. 😂

[Eylon Levy @EylonALevy]

Have you voted #3 for Israel yet?🇮🇱

let me know in the replies 👇

[SPFC Info @spfcinfoss]

Despeja seu #ForaRogerMachado nos comentários.

[Johnk3r @johnk3r]

For my Brazilian ThreaHunting/DFIR friends:

Been reversing a malware called “#CNABHunter” (NUikita), and this thing is way more interesting than a regular banking trojan.

At first I had to figure out what “CNAB240/400” even was — apparently it’s a financial file standard heavily used by Brazilian ERP/banking integrations.

The malware hunts for those files in environments running TOTVS, SAP, RM, Senior, Sankhya, etc., extracts transaction data, and waits for remote commands to modify payments.

Most interesting part: it doesn’t do dumb string replacement.

The malware appears to rebuild the entire financial record using the correct field positions to keep the file structurally valid for banking processing.

Maybe my interpretation of this behavior is wrong, but that’s what I’ve understood so far from reversing it.

C2: 104.245.245[.]50:5000

[International Cyber Digest @IntCyberDigest]

‼️🚨 Microsoft calls this "intended behaviour," so here we go.

How to dump the credentials of every user stored in Microsoft Edge:

1. Open Edge. Don't browse anywhere, just open it.
2. Flip to Task Manager, find Edge, expand the task.
3. Highlight the "browser" sub-task, right-click, and choose "Create Memory Dump."
4. Open the dump file and look for credentials.

The logged-in Windows user can dump every stored Edge credential with no additional rights. Which means any malware that user executes has those credentials for the asking.

Thanks to Rob VandenBrink at SANS: https://t.co/ebtVZxne4L

[Anlık Haber Analiz @Anlik_Analiz]

#SONDAKİKA
Çernobil patlaması ilk defa yayınlandı

[kayin. @hyaluronicc__]

can see until the end, is it all accurate? 😅

[Clandestine @akaclandestine]

Automatic PIX Bot (ATS) & FaaS Model

Technical analysis of recent videos circulating in fraud groups, cross-referenced with intelligence data, reveals a sophisticated Android malware being sold as a service (FaaS) to drain bank accounts in seconds.

Critical Intelligence Insights:

1️⃣ ATS (Automatic Transfer System) Capability: This malware is not just a screen-mirroring tool; it operates as an “Automatic PIX Thief.” Once active, it autonomously scans and executes transfers of the entire available balance, exploiting Accessibility Services and Screen Overlay permissions.

2️⃣ Advanced Evasion: The artifact is promoted as “100% undetectable,” claiming to bypass defenses like Google Play Protect and Kaspersky. It adapts to various social engineering flows (Fake Support/0800) to trick victims into granting critical permissions.

3️⃣ C2 Infrastructure: The “Art the Clown” panel (seen in the video) allows operators to swap destination PIX keys in real-time and monitor successful transfers. Major Brazilian fintechs and banks like PagSeguro, MercadoPago, Iti, C6, PicPay, and Neon are direct targets.

4️⃣ Cybercrime Economy: The business model is structured around rentals ranging from R 1,000 (weekly), with additional social engineering modules sold separately for R$ 200.

⚠️ Note: This analysis is based on the visual context of the videos and collected marketing materials, without inferring actual effectiveness against all banking security layers.

Recommendation: Financial institutions should strengthen detection of Accessibility Service abuse and monitor rapid transaction patterns via ATS.

#ThreatIntel #CyberSecurity #PIX #FraudPrevention #AndroidMalware #CyberCrime #CTI #FaaS

[MarcoFigueroa @MarcoFigueroa]

He said in this video that finding 0-days with Claude wasn’t possible 3–4 months ago but at @0dinai we were already doing it back in Feb/March 2025.

We called the technique “OH LAWWWD.” We talked about it multiple times on podcasts and even demoed it live at @ekoparty last October.

We asked the crowd to pick any target someone said Discord.

We found 10 zero days in under 15 minutes.

1k retweets and I will release the monolithic prompt!

[Não Intendo @blognaointendo]

Vai Brasa / Vai Brasil
Vida Longa E Próspera / Oré Samba

[Oliver Prompts @oliviscusAI]

🚨 BREAKING: Someone just open-sourced a tool that turns the real world into a playable Minecraft map.

It pulls data directly from OpenStreetMap and generates your exact neighborhood, city, or street block by block.

100% Open Source.

[Hollywood Horror Museum @horrormuseum]

Spice Girls completely redubbed by a dude, is one of the most hilarious things we've ever seen!

[vx-underground @vxunderground]

Meanwhile in Brazil: Arch Linux has to suspend access from Brazil because kids could use Arch Linux, or something, and something about pedophiles.

I actually have no idea what the politicians are even saying anymore. It's all bullshit and it's fucking over FOSS.

[Byanu @Byanu]

"E se o Wagner Moura ganhasse o Oscar"

Seu filho da puta, 24% dos brasileiros não têm saneamento básico adequado, 49 milhões de pessoas cagam em um buraco

[O Pinto Marcando ® @opintomarcand0]

Eu com os de verdade quando o careca finalmente for preso:

[Nicolas Krassas @Dinosn]

Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets https://t.co/H7JEzglqpd

[Stephen Sims @Steph3nSims]

I want to share a quick thought for people in cyber security. This will be my longest tweet ever.

I’ve spoken to many lately who are having an existential crisis from the constant posts about “the end of cybersecurity jobs.”

Yes, things are changing quickly. This is a significant moment for the tech industry. Change can be uncomfortable. But we’ve seen cycles like this before.

• When GitHub and open source took off, people said software engineers would disappear because code was free.
• When AWS and cloud computing emerged, people said infrastructure jobs would vanish.
• When fuzzing and SAST tools improved, people said vulnerability research would disappear.
• Virtualization would eliminate infrastructure jobs.
• Mobile computing was going to end desktop dev.
• Exploit mitigations would end exploitability. It didn't.

Each time automation improved, the amount of software grew faster than the automation. It does feel "different" this time as it's explosive.
Some roles will shrink:
• repetitive pentesting
• basic vulnerability scanning
• tier-1 SOC monitoring

But other areas are expanding rapidly:

• AI system security
• supply chain security
• identity architecture
• autonomous agent security
• critical infrastructure protection

Historically, every time we eliminate one class of bugs, new classes emerge. Right now people are vibe-coding entire systems, giving AI access to their machines, crossing trust boundaries, and deploying autonomous agents with excessive permissions. The legal and regulatory world is nowhere close to ready.

There will absolutely be new failure modes. Humans are amazing and always adapt, finding new ways to do things.

The worst thing you can do right now is fall into a doom loop.

...and I’ll be honest, I too have felt the "psychological paralysis" a few times thinking, “Is this time different?” It's especially impactful when it comes from someone I respect in the community. There are certainly unknowns, in an industry where we've become accustomed to predictability.

But... the majority of those reactions are usually driven by social media, not reality. Platforms like X reward engagement, and sensational doom posts spread faster than measured thinking.
If you see something like:
“Holy #$%^! Opus 66.6 just found every bug in Chrome and replaced 50 startups!”

…mute it and move on.

Instead:

Stay curious.
Learn the new technology.
Adapt your skillsets.
Build things.

We’ll get through this transition the same way we always have. If I'm wrong then Sam Altman better be right about UBI! :) I'm sure that if this tweet gets any engagement that I'll get some heat for it, but a good friend of mine reminds me often to focus on what you have control over. I'll revisit this tweet at DEF CON 40!

[PC Philanthropy @PcPhilanthropy]

The modern laptop designers mind cannot comprehend this much I/O

[Paulo @pauloap]

E aí, quantos pontos você marca nesse bingo?

Só não marquei tudo porque nunca tive fax