Markus Weingärtner @markusblogde

**The New Oil** @thenewoil@mastodon.thenewoil.org · 6 Std.

6 Std.

The New Oil @thenewoil@mastodon.thenewoil.org

#SystemBC #malware turns infected #VPS systems into proxy highway

https://www.bleepingcomputer.com/news/security/systembc-malware-turns-infected-vps-systems-into-proxy-highway/

#cybersecurity

**ManiabelChris** @maniabel@mastodon.de · 8 Std.

8 Std.

ManiabelChris @maniabel@mastodon.de

An die MACis da draußen:
Sie haben gerade z. B.

1Password, 
Adobe After Effects, 
Audacity, 
Confluence, 
Dropbox, 
Fidelity, 
Gemini, 
LastPass,
Notion, 
Robinhood, 
SentinelOne
Thunderbird
bummelig 100 Produkte ...installiert? Aus sicherer Quelle? Oder hat Ihnen das Böse da was untergeschoben?LastPass warnt gerade vor einer Kampagne, die MAC-Nutzende im Visier hat: Die gefälschten Apps liefern die Informations‑Stealer‑Malware Atomic (AMOS) in sogenannten ClickFix‑Angriffen. Diese werden durch Suchmaschinenoptimierung (SEO) auf Google und Bing beworben.AMOS ist ein Malware‑as‑a‑Service‑Angebot, das für 1 000 US‑Dollar pro Monat verfügbar ist und typischerweise Daten auf infizierten Rechnern anvisiert.Bonus: Jetzt auch mit Backdoor für dauerhaften Zugriff auf die Endsysteme.

Und nun? Prävention durch Wissen:
Führen Sie keine Befehle auf Ihren Systemen aus, die Sie nicht verstehen!
Nutzen Sie die offiziellen Seiten des Anbieters oder Projekts. Da gibt es keine MAC-Version? Dann gibt es auch keine.

https://blog.lastpass.com/posts/attack-targeting-macs-via-github-pages

blog.lastpass.comLarge-Scale Attack Targeting Macs via GitHub Pages Impersonating Companies to Attempt to Deliver Stealer Malware - The LastPass BlogWere tracking an ongoing, widespread infostealer campaign targeting Mac users through fraudulent GitHub repositories.

#infosec #malware #amos

**Marcus "MajorLinux" Summers** @majorlinux@toot.majorshouse.com · 9 Std.

9 Std.

Marcus "MajorLinux" Summers @majorlinux@toot.majorshouse.com

Sneaking malicious code into a game is one thing.

It's another to steal from someone dying from cancer!

Steam Game Update Reportedly Distributed Malware And Stole Money From Cancer Victim

https://www.gamespot.com/articles/steam-game-update-reportedly-distributed-malware-and-stole-money-from-cancer-victim/1100-6534915/?ftag=CAD-01-10abi2f

#Steam #Valve #Malware

AA @AAKL@infosec.exchange · 10 Std.

10 Std.

AA @AAKL@infosec.exchange

"The game is no longer on Steam, but this isn't the first time malware has been distributed through a Steam game."

"The 2D side-scrolling game BlockBlasters had an update on August 30 that included malware that can steal personal information from any PC that the game is running on. More insidiously, this malware can empty crypto wallet data, and it reportedly did so to streamer rastalandTV, who is currently battling stage 4 cancer and was hosting a charity livestream."

Gamespot: Steam Game Update Reportedly Distributed Malware And Stole Money From Cancer Victim https://www.gamespot.com/articles/steam-game-update-reportedly-distributed-malware-and-stole-money-from-cancer-victim/1100-6534915/ @Gamespot #Steam #malware #cybersecurity #infosec

GameSpotSteam Game Update Reportedly Distributed Malware And Stole Money From Cancer VictimThe game is no longer on Steam, but this isn't the first time malware has been distributed through a Steam game.

AA @AAKL@infosec.exchange · 12 Std.

12 Std.

AA @AAKL@infosec.exchange

ESET: Watch out for SVG files booby-trapped with malware https://www.welivesecurity.com/en/malware/svg-files-spreading-malware/ @ESETresearch #cybersecurity #infosec #malware

www.welivesecurity.comWatch out for SVG files booby-trapped with malwareWhat you see is not always what you get as cybercriminals increasingly weaponize SVG files as delivery vectors for stealthy malware.

AA @AAKL@infosec.exchange · 12 Std.

12 Std.

AA @AAKL@infosec.exchange

"The threat actor uses tailored spear‑phishing from alleged HR recruters directing victims to fake career portals. Each target receives a unique URL and credentials, enabling tracking and controlled access of each victim."

Check Point: Nimbus Manticore Deploys New Malware Targeting Europe https://research.checkpoint.com/2025/nimbus-manticore-deploys-new-malware-targeting-europe/ #cybersecurity #infosec #malware

Check Point Research · 14 Std.Nimbus Manticore Deploys New Malware Targeting Europe - Check Point ResearchNimbus Manticore continuously attacks defense, manufacturing, telecommunications, and aviation targets aligned with the IRGC

**Brian Fagioli** @brianfagioli@mastodon.xyz · 13 Std.

13 Std.

Brian Fagioli @brianfagioli@mastodon.xyz

LastPass uncovers fake #GitHub repos spreading Atomic Stealer #malware to #Mac users https://nerds.xyz/2025/09/lastpass-uncovers-fake-github-repos-spreading-atomic-stealer-malware-to-mac-users/

NERDS.xyz · 13 Std.LastPass uncovers fake GitHub repos spreading Atomic Stealer malware to Mac usersLastPass has uncovered fake GitHub repositories pushing Atomic Stealer malware to Mac users using SEO tricks and impersonation tactics.

**TugaTech** @tugatech@masto.pt · 14 Std.

14 Std.

TugaTech @tugatech@masto.pt

Jogo verificado na Steam rouba 32.000€ a streamer em tratamento de cancro
https://tugatech.com.pt/t71961-jogo-verificado-na-steam-rouba-32-000eur-a-streamer-em-tratamento-de-cancro

TugaTechJogo verificado na Steam rouba 32.000€ a streamer em tratamento de cancro Um jogo aparentemente inofensivo e verificado na Steam revelou-se uma armadilha maliciosa, resultando no roubo de dezenas de milhares de euros em criptomoedas

#backdoor #computador #criptoativos

**The TechBull** @thetechbull@mastodon.social · 16 Std.

16 Std.

The TechBull @thetechbull@mastodon.social

A video call from your CEO asks for a wire transfer. But it's not them.

It's an AI deepfake. This is the new reality of cyberattacks. See what's coming and how to prepare.

Read the full article: https://thetechbull.short.gy/inuURC

#Cybersecurity #AI #Deepfake

**securityaffairs** @securityaffairs@infosec.exchange · 18 Std.

18 Std.

securityaffairs @securityaffairs@infosec.exchange

Researchers expose #MalTerminal, an #LLM-enabled #malware pioneer
https://securityaffairs.com/182433/malware/researchers-expose-malterminal-an-llm-enabled-malware-pioneer.html
#securityaffairs #hacking #malware #AI

Security Affairs · 18 Std.Researchers expose MalTerminal, an LLM-enabled malware pioneerSentinelOne uncovered MalTerminal, the earliest known malware with built-in LLM capabilities, and presented it at LABScon 2025.

**securityaffairs** @securityaffairs@infosec.exchange · 20 Std.

20 Std.

securityaffairs @securityaffairs@infosec.exchange

Beware: #GitHub repos distributing #Atomic #Infostealer on #macOS
https://securityaffairs.com/182419/malware/beware-github-repos-distributing-atomic-infostealer-on-macos.html
#securityaffairs #hacking #malware

Security Affairs · 20 Std.Beware: GitHub repos distributing Atomic Infostealer on macOSLastPass warns macOS users of fake GitHub repos distributing Atomic infostealer malware disguised as legitimate tools.

**Redhotcyber** @redhotcyber@mastodon.bida.im · 22 Std.

22 Std.

Redhotcyber @redhotcyber@mastodon.bida.im

Sicurezza Matematica: Dalla teoria dei numeri all’hacking e al pentesting

Link all'articolo : https://www.redhotcyber.com/post/sicurezza-matematica-dalla-teoria-dei-numeri-allhacking-e-al-pentesting/

Quando parliamo di #cybersecurity, pensiamo subito a firewall, #malware, #exploit #zero-day. Ma c’è un livello più profondo, che non si vede e che nessuno può aggirare, le leggi della matematica.

Perché se i #software si possono #hackerare, i #protocolli si possono bypassare, le configurazioni si possono sbagliare ma la matematica non la si può corrompere. Ed è proprio su questo pilastro che si regge la #sicurezza #informatica moderna.

A cura di Diego Bentivoglio

#redhotcyber #hacking #cti

Fortgeführter Thread

**⚯ Michel de Cryptadamus ⚯** @cryptadamist@universeodon.com · 1 T.

1 T.

⚯ Michel de Cryptadamus ⚯ @cryptadamist@universeodon.com

2/ it gets better (by which i mean "worse"). this malware game was used to steal $30,000 from a guy who is dying of cancer and was livestreaming playing the malware game to raise money for treatment.

as i often say, "that's so #crypto"

https://x.com/vxunderground/status/1969786282831130872

X (formerly Twitter)vx-underground (@vxunderground) auf XYesterday a video game streamer named @rastalandTV inadvertently livestreamed themselves being a victim of a cryptodraining campaign. This particular spearphishing campaign is extraordinarily heinous because RastaLand is suffering from Stage-4 Sarcoma and is actively seeking

#malware #BlockBlasters #cryptocurrency