fraksken
fraksken@infosec.pub
Joined
1 posts • 32 comments
Do not trust anything I write down. I have this horrible habit of not checking sources.
Praise the camera man
Like being gay and not overpopulating the world like a virus is a bad thing.
I found dating apps may be helpful. I’m personally partial to romeo as I trust it most in terms of privacy over grindr.
I’m not a person who goes out a lot to parties or dancing.
Key Points
GitHub search manipulation: Attackers create malicious repositories with popular names and topics, using techniques like automated updates and fake stars to boost search rankings and deceive users.
Malicious code is often hidden within Visual Studio project files (.csproj or .vcxproj) to evade detection, automatically executing when the project is built.
The attacker had set up the stage to modify the payload based on the victim's origin, checking specifically if the victim is based in Russia. At this point, we don't see this ability activated.
The recent malware campaign involves a large, padded executable file that shares similarities with the "Keyzetsu clipper" malware, targeting cryptocurrency wallets.
The malware establishes persistence on infected Windows machines by creating a scheduled task that runs the malicious executable daily at 4AM without user confirmation.
Developers should be cautious when using code from public repositories and watch for suspicious repository properties, such as high commit frequencies and stargazers with recently created accounts.
edit: formatting
I installed droid-ify, an alternative front-end for F-Droid, it comes with a whole bunch of repo’s by default.
What’s the crowd funding site for Yuzu legal fees?
Lists Brave as a privacy respecting browser?
So, cancer becomes a work related illness now?