Maresy

Discord invalidated my integration on this app

[retrodev⌨ @NewAgeRetroNerd]

Arch Linux users are now "I use malware btw"

[Alexa @alexa__meme]

Elon Musk became a millionaire in 1999

He became a billionaire in 2012

He became a trillionaire in 2026

Hey @grok according to these statistics when will he become a quadrillionaire?

[x_x @3vA]

ALERT: There is a Glitch going on where users are able to claim 1 Letter Usernames on playstation

[Maresy @Mvresy]

@pixiestick05 It’s been patched, and they’ve found a new vulnerability for InfoStealers

[Maresy @Mvresy]

Discord malware skids are taking advantage of cookie and token vulnerabilities using infostealer malware that grabs browser cookies, passwords, auto-fills, and more from infected PCs.

Cayte/CT has recently reported that the controversial game Roblox continues to host and facilitate criminal activity, with Discord serving as the main middleman for messaging and coordinating scams. Users are being targeted through hoax .exe files and forwarded messages that spread InfoStealer malware, which grabs browser cookies, passwords, auto-fills, and more from infected PCs.

A prime example involves the Discord user “EddyKane,” who first contacts victims on Roblox claiming to have insider info and big investment opportunities, then sends malicious files or links (sometimes hidden in embeds). These logs show attackers stealing session cookies, like the 7 shown here, plus hundreds of auto-fills, allowing them to hijack Discord, wallets, and other accounts instantly. Avoid random exes, cracked software, and shady downloads. Stay safe by enabling 2FA and using a good password manager.

[Maresy @Mvresy]

Life doesn’t go on and on anymore 😢

[vx-underground @vxunderground]

Literally the worst cable management I've ever seen in my life

[Maresy @Mvresy]

That’s true, and social engineering is indeed the most popular technique; social engineering plays a role in almost every single attack. Nonetheless, it is not the sole means attackers employ. An attacker may hack a genuine website, or malvertize, and then force the user to automatically download files when he/she visits that website; such techniques are known as drive-by downloads. It could very well happen that visiting the web page is achieved due to social engineering, while the downloading process does not involve any social engineering at all.

[Maresy @Mvresy]

Social engineering is not the only way to get someone to download a malicious file. Attackers can also redirect users to a specially crafted URL that automatically triggers an immediate file download. Once the download starts, it can usually be canceled through the browser’s downloads manager, though rapid action is required to limit the amount of data transferred.

[Maresy @Mvresy]

So... EddyKane is trying to get me to click an image. Should I click it?

[Maresy @Mvresy]

🚨 BREAKING: Oleksii Oleksiyovych Lytvynenko, a 44-year-old Ukrainian national and former #Conti ransomware operative, has pleaded guilty in U.S. federal court to conspiracy to commit wire fraud.

Lytvynenko joined the notorious group in 2021, developed malware, and maintained stolen data from 12 victims, including 8 in the United States. Conti devastated over 1,000 organizations worldwide, extorting more than $150 million.

Conti’s infamous ransom note attached. Facing up to 20 years in prison. Sentencing set for September 10.

[Maresy @Mvresy]

@metoprolel Trust me, I've seen lots of people larping CNCs from 764.

[Maresy @Mvresy]

@metoprolel No idea tbh, Batman is called Admin on the site, but he’s not active on it anymore for some reason.

[Maresy @Mvresy]

@skeiwy That is why I’m posting about this cookie/token logging exploit.

[Maresy @Mvresy]

@whystruck This simple malware is too hard for 764 skidiots, TRUST me.

[Matthew @OswaldsTopGuy]

"White people are starting to be comfortable being called a racist"

[Maresy @Mvresy]

‼️UPDATE: Over 1,500 packages have been backdoored, going from 400 to 1,500+ in just 3 days.

Credits to @thecybersecguru for the update.

[Maresy @Mvresy]

🚨 Arch Linux AUR Supply Chain Attack: Hundreds to ~1,250 Packages Compromised

Attacker posed as maintainer, adopted orphaned packages, and added malicious code to PKGBUILD/.install scripts (npm/Bun deps).
Rust infostealer targets creds (SSH, browser, GitHub, Discord etc.). Optional eBPF rootkit if run as root.

Actions: Audit recent AUR installs (since ~June 9), review PKGBUILDs, rotate creds if affected. Verify all AUR packages.

Credits to @IntCyberDigest

[Maresy @Mvresy]

@metoprolel happy late birthday 🎉🥳!! Soz for being a day late, did not know it was your birthday until now 😔😅