Avatar

fraksken

fraksken@infosec.pub
Joined
1 posts • 32 comments

Do not trust anything I write down. I have this horrible habit of not checking sources.

Direct message

Praise the camera man

permalink
report
reply

Like being gay and not overpopulating the world like a virus is a bad thing.

permalink
report
reply

I found dating apps may be helpful. I’m personally partial to romeo as I trust it most in terms of privacy over grindr.

I’m not a person who goes out a lot to parties or dancing.

permalink
report
reply

Key Points

GitHub search manipulation: Attackers create malicious repositories with popular names and topics, using techniques like automated updates and fake stars to boost search rankings and deceive users.


Malicious code is often hidden within Visual Studio project files (.csproj or .vcxproj) to evade detection, automatically executing when the project is built.
The attacker had set up the stage to modify the payload based on the victim's origin, checking specifically if the victim is based in Russia. At this point, we don't see this ability activated.



The recent malware campaign involves a large, padded executable file that shares similarities with the "Keyzetsu clipper" malware, targeting cryptocurrency wallets.
The malware establishes persistence on infected Windows machines by creating a scheduled task that runs the malicious executable daily at 4AM without user confirmation.



Developers should be cautious when using code from public repositories and watch for suspicious repository properties, such as high commit frequencies and stargazers with recently created accounts.

edit: formatting

permalink
report
reply

Yes, it’s called droid-ify. It’s on the official F-droid repo and is fully FOSS.

permalink
report
parent
reply

I installed droid-ify, an alternative front-end for F-Droid, it comes with a whole bunch of repo’s by default.

permalink
report
reply

What’s the crowd funding site for Yuzu legal fees?

permalink
report
reply

Lists Brave as a privacy respecting browser?

permalink
report
reply

Like… my boss actively gave me cancer?

permalink
report
parent
reply

So, cancer becomes a work related illness now?

permalink
report
reply