nartv
@nartv.bsky.social
www.bleepingcomputer.com/news/securit... #clickfix via TikTok heh
TikTok videos continue to push infostealers in ClickFix attacks
Cybercriminals are using TikTok videos disguised as free activation guides for popular software like Windows, Spotify, and Netflix to spread information-stealing malware.
www.bleepingcomputer.com
October 20, 2025 at 6:37 PM
www.bleepingcomputer.com/news/securit... #clickfix via TikTok heh
Reposted by nartv
Researchers pointed a satellite dish at the sky for 3 years and monitored what unencrypted data it picked up. The results were shocking: They obtained thousands of T-Mobile users' phone calls and texts, military and law enforcement secrets, much more: www.wired.com/story/satell... 🧵👇
Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data
With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites unencrypte...
www.wired.com
October 14, 2025 at 1:03 AM
Researchers pointed a satellite dish at the sky for 3 years and monitored what unencrypted data it picked up. The results were shocking: They obtained thousands of T-Mobile users' phone calls and texts, military and law enforcement secrets, much more: www.wired.com/story/satell... 🧵👇
Reposted by nartv
NEW: Since October 2023, the IDF Spokesperson's Unit has released dozens of 3D animations illustrating alleged Hamas, Hezbollah, and Iranian sites
The style is now unmistakable: satellite zoom-ins, black & white wireframes, and red-textured houses - a new visual language of war
The style is now unmistakable: satellite zoom-ins, black & white wireframes, and red-textured houses - a new visual language of war
October 8, 2025 at 4:58 PM
NEW: Since October 2023, the IDF Spokesperson's Unit has released dozens of 3D animations illustrating alleged Hamas, Hezbollah, and Iranian sites
The style is now unmistakable: satellite zoom-ins, black & white wireframes, and red-textured houses - a new visual language of war
The style is now unmistakable: satellite zoom-ins, black & white wireframes, and red-textured houses - a new visual language of war
Reposted by nartv
Now we're seeing confirmation of the NSO acquisition.
Mark my words, this is the path through which Pegasus gets put on Americans iPhones & Androids.
This dictatorship-in-a-box belongs nowhere near our constitutional rights.
Mark my words, this is the path through which Pegasus gets put on Americans iPhones & Androids.
This dictatorship-in-a-box belongs nowhere near our constitutional rights.
SCOOP: Spyware maker NSO Group confirmed to us that the company has been acquired by a U.S. investment group.
NSO's spokesperson said the group "has invested tens of millions of dollars in the company and has acquired controlling ownership," but declined to say who is behind the investment.
NSO's spokesperson said the group "has invested tens of millions of dollars in the company and has acquired controlling ownership," but declined to say who is behind the investment.
Spyware maker NSO Group confirms acquisition by US investors | TechCrunch
NSO Group confirmed to TechCrunch that an unnamed group of American investors has taken “controlling ownership” of the surveillance tech maker.
techcrunch.com
October 10, 2025 at 3:58 PM
Now we're seeing confirmation of the NSO acquisition.
Mark my words, this is the path through which Pegasus gets put on Americans iPhones & Androids.
This dictatorship-in-a-box belongs nowhere near our constitutional rights.
Mark my words, this is the path through which Pegasus gets put on Americans iPhones & Androids.
This dictatorship-in-a-box belongs nowhere near our constitutional rights.
Reposted by nartv
Just recorded the fiery afterword for the second edition Cult of the Dead Cow audiobook, out in December! Thanks to all the readers and listeners that made the update necessary.
September 24, 2025 at 11:44 PM
Just recorded the fiery afterword for the second edition Cult of the Dead Cow audiobook, out in December! Thanks to all the readers and listeners that made the update necessary.
Reposted by nartv
September 20, 2025 at 11:38 AM
Reposted by nartv
In The Wire they call this “juking the stats.”
Leavitt confirms that monthly jobs reports may be suspended "until they can get the data and methodology in order"
August 13, 2025 at 1:53 AM
In The Wire they call this “juking the stats.”
Reposted by nartv
This is great work! And every scammer caught is a good thing.
But, to show the enormity of the problem, that $100 Million spread over 7 years means they accounted for less than .08% of attacks in the US alone.
We have a long way to go.
via @jgreig.bsky.social & @therecordmedia.bsky.social
But, to show the enormity of the problem, that $100 Million spread over 7 years means they accounted for less than .08% of attacks in the US alone.
We have a long way to go.
via @jgreig.bsky.social & @therecordmedia.bsky.social
Romance scam suspects extradited from Ghana, charged with more than $100 million in thefts
Three Ghanaian men face charges in the U.S. related to a multimillion-dollar operation that defrauded individuals online and ran business email compromise scams.
therecord.media
August 13, 2025 at 11:15 AM
This is great work! And every scammer caught is a good thing.
But, to show the enormity of the problem, that $100 Million spread over 7 years means they accounted for less than .08% of attacks in the US alone.
We have a long way to go.
via @jgreig.bsky.social & @therecordmedia.bsky.social
But, to show the enormity of the problem, that $100 Million spread over 7 years means they accounted for less than .08% of attacks in the US alone.
We have a long way to go.
via @jgreig.bsky.social & @therecordmedia.bsky.social
Reposted by nartv
I am honoured and excited to be delivering a keynote @blackhatevents.bsky.social 🇺🇸 2025
Come hear about the history of @citizenlab.ca, our investigations into mercenary spyware and other abuses, and what keeps me up at night!
www.blackhat.com/us-25/briefi...
Come hear about the history of @citizenlab.ca, our investigations into mercenary spyware and other abuses, and what keeps me up at night!
www.blackhat.com/us-25/briefi...
July 14, 2025 at 5:15 PM
I am honoured and excited to be delivering a keynote @blackhatevents.bsky.social 🇺🇸 2025
Come hear about the history of @citizenlab.ca, our investigations into mercenary spyware and other abuses, and what keeps me up at night!
www.blackhat.com/us-25/briefi...
Come hear about the history of @citizenlab.ca, our investigations into mercenary spyware and other abuses, and what keeps me up at night!
www.blackhat.com/us-25/briefi...
Reposted by nartv
🚨NEW REPORT: exposing clever new hacking tactic.
🇷🇺Russian state-backed hackers used an App-Specific Password attack against prominent Russia expert @keirgiles.bsky.social
It's like they knew what we all expect from 🇷🇺...and then did the opposite 1/
By us @citizenlab.ca & Google's GTIG
🇷🇺Russian state-backed hackers used an App-Specific Password attack against prominent Russia expert @keirgiles.bsky.social
It's like they knew what we all expect from 🇷🇺...and then did the opposite 1/
By us @citizenlab.ca & Google's GTIG
June 18, 2025 at 8:47 PM
🚨NEW REPORT: exposing clever new hacking tactic.
🇷🇺Russian state-backed hackers used an App-Specific Password attack against prominent Russia expert @keirgiles.bsky.social
It's like they knew what we all expect from 🇷🇺...and then did the opposite 1/
By us @citizenlab.ca & Google's GTIG
🇷🇺Russian state-backed hackers used an App-Specific Password attack against prominent Russia expert @keirgiles.bsky.social
It's like they knew what we all expect from 🇷🇺...and then did the opposite 1/
By us @citizenlab.ca & Google's GTIG
Reposted by nartv
We @citizenlab.ca have a new report that dissects a Russian-linked 🇷🇺 phishing operation with some interesting novel techniques
@jsrailton.bsky.social with the details 👇
@jsrailton.bsky.social with the details 👇
🚨NEW REPORT: exposing clever new hacking tactic.
🇷🇺Russian state-backed hackers used an App-Specific Password attack against prominent Russia expert @keirgiles.bsky.social
It's like they knew what we all expect from 🇷🇺...and then did the opposite 1/
By us @citizenlab.ca & Google's GTIG
🇷🇺Russian state-backed hackers used an App-Specific Password attack against prominent Russia expert @keirgiles.bsky.social
It's like they knew what we all expect from 🇷🇺...and then did the opposite 1/
By us @citizenlab.ca & Google's GTIG
June 18, 2025 at 9:08 PM
We @citizenlab.ca have a new report that dissects a Russian-linked 🇷🇺 phishing operation with some interesting novel techniques
@jsrailton.bsky.social with the details 👇
@jsrailton.bsky.social with the details 👇
Reposted by nartv
Singapore leads multinational operation to shutter scam centers tied to $225 million in thefts
via @jgreig.bsky.social & @therecordmedia.bsky.social
via @jgreig.bsky.social & @therecordmedia.bsky.social
Singapore leads multinational operation to shutter scam centers tied to $225 million in thefts
Nearly 2,000 people were arrested and millions of dollars in illicit funds were seized in an operation coordinated by Singapore police against Asian scam operations.
therecord.media
June 12, 2025 at 6:59 AM
Singapore leads multinational operation to shutter scam centers tied to $225 million in thefts
via @jgreig.bsky.social & @therecordmedia.bsky.social
via @jgreig.bsky.social & @therecordmedia.bsky.social
Reposted by nartv
DanaBot had a HeartBleed-like bug for three years
Leaked all the juicy stuff, such as threat actor usernames, IP addresses, private keys, and loads more
www.zscaler.com/blogs/securi...
Leaked all the juicy stuff, such as threat actor usernames, IP addresses, private keys, and loads more
www.zscaler.com/blogs/securi...
DanaBleed: DanaBot C2 Server Memory Leak Bug | ThreatLabz
A flaw in DanaBot's C2 server code caused a memory leak that we named "DanaBleed", exposing sensitive data and offering researchers a look into DanaBot’s operations.
www.zscaler.com
June 10, 2025 at 11:40 AM
DanaBot had a HeartBleed-like bug for three years
Leaked all the juicy stuff, such as threat actor usernames, IP addresses, private keys, and loads more
www.zscaler.com/blogs/securi...
Leaked all the juicy stuff, such as threat actor usernames, IP addresses, private keys, and loads more
www.zscaler.com/blogs/securi...
Beautiful in it’s own post-apocalyptic way, #LeslieSpit is great for a bike ride and it always reminds me of this song: youtu.be/68G3Yfb6PSE #Gojira #ToxicGarbageIsland
June 9, 2025 at 3:07 PM
Beautiful in it’s own post-apocalyptic way, #LeslieSpit is great for a bike ride and it always reminds me of this song: youtu.be/68G3Yfb6PSE #Gojira #ToxicGarbageIsland
Reposted by nartv
Residential proxies are a key enabler of cybercrime today. This creates a growing need for connection and session-based access control. We used Ja4T fingerprinting that successfully tagged incoming connections from residential proxies to 1,500 IDS systems. www.trendmicro.com/vinfo/us/sec...
The Rise of Residential Proxies as a Cybercrime Enabler
This research discusses how residential proxies help cybercriminals bypass antifraud and IT security systems, and how vulnerabilities in the IoT supply chain are exploited where Android-based devices ...
www.trendmicro.com
June 4, 2025 at 8:15 AM
Residential proxies are a key enabler of cybercrime today. This creates a growing need for connection and session-based access control. We used Ja4T fingerprinting that successfully tagged incoming connections from residential proxies to 1,500 IDS systems. www.trendmicro.com/vinfo/us/sec...