ivan

basic malware analysis; threat intelligence

[rona @rqda_A]

Linux kernelで19年以上見過ごされていた0-day脆弱性を報告しました
悪用されると一般ユーザーからの権限昇格が可能になる脆弱性です

詳しくはこちら
https://t.co/MRYYg2LrSx

[Kristian Csepcsar @KristianCsep]

More than 10 of my bitcoin friends got hacked in the past month. All had 2FA enabled. It didn’t help. Here’s how they almost got me too 👇

HOW THEY FOOL YOU

1️⃣ Someone from your contacts messages you to schedule a call. This is already a stolen account. A friend who got scammed before you.

2️⃣ They send you a calendar invite first. Then, right before the call, they send a Zoom link. At a quick glance it looks legit. The preview looks identical to real Zoom. The trick is subtle: the hostname and subdomain are swapped.

This is the fake Zoom link they sent me. A real Zoom link would have those two words around the dot swapped.

👀 https:// zoom (DOT) webus05. us/j/47369507762?pwd=7kiAzRm6PNBvNFdBBEY04cr6LLzHPk.1

Easy to miss, even if you know what to look for. Especially when it comes from someone you trust.

3️⃣ The fake Zoom app looks flawless. Perfect copy of the real Zoom UI. No red flags.

4️⃣ You immediately see your friend on video. This is NOT A DEEPFAKE. It’s a recording of your friend from seconds before they got scammed in the previous session. That’s why it looks perfect and trustworthy.

HOW THEY GAIN CONTROL

5️⃣ The fake Zoom app says your audio is broken and asks you to update.

6️⃣ The update “fails” and you’re shown a command line troubleshooting guide.

⚠️7️⃣ If you paste that command into your terminal, it’s over. You just gave the attacker remote access to your computer.

HOW THEY ROB YOU

8️⃣ The malware they install remotely is simple and runs fast. It takes one or two seconds.

It usually does two things:

A) Scans your computer for bitcoin wallets and steals access.

⚠️B) Steals session cookies from chat apps. This is how they bypass your 2FA later.

ELI5 SESSION COOKIES

When you log into Telegram on your laptop, you enter your password and 2FA once. Telegram then saves a session token on your computer so you don’t have to do it every time. That token is basically: “Yes, this is the same person who gave you the password and 2FA earlier.” When attackers steal it, they present it to Telegram, which sees it as a valid session and lets them in.

So they don’t need your password or your 2FA code. THEY ARE YOU.

If someone gets access to your computer, you’re done. At that point, it’s just damage control.

MY GOLDEN RULE

Life is short and beautiful. No client call is important enough to mess with command line troubleshooting.

Be lazy. Be safe.

PS: unrelated, but we just launched Braiins Hashpower. On-demand bitcoin hashrate. Try it. It’s awesome. Like ice cream when you’re 12 😁

[ivan @mojihelp]

终究还是归零了，永远要敬畏风险啊😢
#ETHUSDT #合约 #CryptoTrading

[ivan @mojihelp]

@tyw1984 约出来聊聊🐶

[ivan @mojihelp]

@adspowercn @CryptoCrafter_L 我不是在这时间段内安装的插件，也被攻击了😭

[Bitlayer @BitlayerLabs]

🎯Binance Wallet x Bitlayer BTCFI Carnival | Week4

Cygnus Finance & Lorenzo project interactive tasks are now live on Binance Wallet! 🎉 @BinanceWallet @CygnusFi @LorenzoProtocol

⌛️Duration: 2025.1.15-2025.2.12

💰Complete the project tasks this week to be eligible for a chance to share in a $780,000 token prize pool!

Don’t miss out on your chance to participate and earn amazing New Year rewards. 🎁✨
(Please update your Binance app to the latest version)

👉Binance Wallet Entry || Binance Wallet App-Discover-Airdrop-Bitlayer

📌Reminder: Week1 & Week2 & Week3 tasks are still valid and can be interacted with in Binance Wallet.

⚒️Event Entry(Mobile device only): https://t.co/0LgiKf8VeS
🪡Tutorial: https://t.co/ptTdPypVh1

#BitlayerBTCFI #BinanceWallet #BitlayerCarnival

[T.Z. @XuanzhenZ]

1/ WTF is @verio_story?

Verio is Story's Trust engine, decentralizing IP governance @StoryProtocol. By aligning incentives, Verio leverages liquid staking and IP asset staking to curate the right IPs. High stake weight = trusted, legitimate IP. No stake weight = flagged as spam.

[Plume @plumenetwork]

RWAfi made simple, convenient, and secure, all through @BinanceWallet, our first official mainnet wallet partner! 🔐

Starting now, complete all season 1️⃣ tasks of the Plume x Binance Wallet RWAfi Carnival for a chance to win a part of our $100K prize pool.

Here's how 👇

[Plume Foundation @plumefndn]

Today marks a milestone in Plume’s journey with the establishment of the Plume Foundation - an independent organization dedicated to the mission of bringing the real world onchain.

The Plume Foundation will manage the development and governance of the Plume RWA Chain and ecosystem - purpose-built to bring a trillion-dollar real-world asset market onchain, enabling Real World Asset Finance (RWAfi) for everyone.

The growing ecosystem of contributors unites builders, community members, asset issuers, private credit funds, custodians, and neobanks to create a full-stack solution for institutional-grade products accessible to anyone onchain.

The Foundation's immediate priority is establishing a robust governance model that empowers the community with true ownership and shared responsibility in advancing the Plume mission.

This is just the beginning.

[Axlflops Network @Axlflops]

🚀 Axlflops is launching Axldrop Rewards Program – an incentive program designed to accelerate #GPU network growth and build the Axlflops community! 🌐

GPU contributors and community members can earn rewards for all their activities starting from 1/22. Community engagement is powered by @Galxe and @taskonxyz, and will run through 3/22.

Get ready to earn points based on GPU contributions—factors like uptime, bandwidth, and GPU model will all be considered! Points earned will be converted into $AIGT tokens, expected to launch in Q1 2025. 🎉

[ivan @mojihelp]

attack

[吴说区块链 @wublockchain12]

吴说获悉，据 X 用户 @retardmode，古巴外交部官方 X 账号或在遭黑客攻击后推广 Pumpfun 发行的代币 CUBA，原帖现已删除。https://t.co/8c4Fl71dZy

[The DATA Foundation @datafdn]

Ippy cook

[The DATA Foundation @datafdn]

IP is the intersection where AI and blockchains will collide.

[The DATA Foundation @datafdn]

Step into the Story IP x AI Carnival on @BinanceWallet 🎡

From Jan 13 – Feb 5, explore the Story ecosystem and complete quests on Binance Wallet for a chance to unlock rewards from a pool of 444,444 $IP.

New quests announced weekly.

First up: Story & Stability AI ↴

[ivan @mojihelp]

@evilcos 慢雾还招人吗

[ivan @mojihelp]

@chain00x dddd

[Bitlayer @BitlayerLabs]

🎉Bitlayer BTCFI Carnival is officially live on Binance Wallet! 🚀 @Web3WithBinance

✅Get ready for a 6-week non-stop $BTR giveaway with $1.2M in rewards!

💫We’ll partner with 11 top-tier ecosystem BTCFI projects to bring you immersive and enjoyable interactive experiences every week.

🗓️This week, complete social & on-chain tasks, including daily check-ins, to grab your share of $600,000 $BTR Week 1 rewards.

🧡Don’t miss out on the ultimate BTCFI carnival—join us now and unlock exclusive rewards! 🎁🔥

👉Binance Wallet Entry || Binance Wallet App-Discover-Airdrop-Bitlayer
https://t.co/2N2AFvG5Uc
🕹️For more: https://t.co/GdWySbhabu
🏵️Tutorial: https://t.co/1vq5YvsxPb

#BitlayerBTCFI #BinanceWallet #BitlayerCarnival

[DeepLink @DeepLinkGlobal]

What a merry Christmas
🚀 DLC rewards at your fingertips this festive season!✨ @DeepLinkGlobal $300,000 airdrop is live on, @BinanceWallet 📲 Update the app, complete tasks and secure your share now! 🌍

Highlights

👉 Where: https://t.co/SMrok6V7Dy
📅 When: Dec 24, 2024 - Jan 6, 2025 23:59
🎁 Pool: 100,000,000 $DLC worth 300,000 USDT

⭐️Complete a few tasks and claim your share.

#DeepLink $DLC #BinanceWallet #airdrop

[Bitlayer @BitlayerLabs]

Binance Wallet x Bitlayer BTCFI Carnival | Week2

🔥Pell & Bedrock interactive tasks are now live on Binance Wallet! 🎉 @BinanceWallet @Pell_Network @Bedrock_DeFi

🌿Duration: 2024.12.17-2025.1.24

🧡Complete the project tasks this week to be eligible for a chance to share in a $190,000 token prize pool! 💰
(Please update your Binance app to the latest version)

⏭️Binance Wallet Entry || Binance Wallet App-Discover-Airdrop-Bitlayer

📍Reminder: Week1 tasks are still valid and can be interacted with in Binance Wallet.
#BitlayerBTCFI #BinanceWallet #BitlayerCarnival

🔸Event Entry:https://t.co/EedeECF0Bk
🔸For more: https://t.co/nI4LcvGwPQ
🔸Tutorial:https://t.co/WRd50bXa5o

[Orderly @OrderlyNetwork]

Everything in ORDER for the month of November 💜

Here's a recap of everything that went down over the last month

🧵 👇