Maxx Syntax @MaxxSyntax

We are seeing a new BIG wave of Telegram accounts takeovers (thousands hacked daily). We are highly suspicious but can not prove it yet, that this is happening because SMS with auth codes sent by Twilio are being intercepted by multiple threat actors at the Tiers level (as we discovered in march 2025). - In the meanwhile, the way to protect from this is very simple: Settings > Privacy and Security > Two-Step verification: turn it on, write it down and configure a secure email. - If your Telegram account is hacked, you are NOT gonna get it back and also all your contacts and conversations are gone forever (unless you are a high-profile). Stay safe

keyboard_arrow_left Previous keyboard_arrow_right Next

Where's the pizza? @Pizza_DAO @monad @FlexaHQ @standwithcrypto @ownthedoge @Onchainmedia @RaidGuild @zapper_fi rsv.pizza/ethdenver

I'm a Hacker. I attend DEF CON every year. We play a fun game called "Spot the Fed". Last week, the Department of Justice released three million pages of Epstein documents. I read them professionally. Not for the names. For the tradecraft. The tradecraft is immaculate. But here's what made me put down my coffee. An FBI informant told authorities in 2017 that Epstein had a "personal hacker." An Italian. Born in the southern region of Calabria. I've met hackers from Calabria. At DEF CON. At Black Hat. The informant said this hacker developed zero-day exploits. For iOS. For BlackBerry. For Firefox. The informant said this hacker sold the exploits to the United States. To the United Kingdom. To an unnamed central African government. And to Hezbollah. Hezbollah paid with "a trunk of cash." That's not how the US government pays. The US government uses purchase orders. But the exploits were the same. Same zero-days. Different payment methods. Different clients. Same hacker. Speaking of hackers in Epstein's emails. If you've been to Black Hat, you know the name. He's on the Black Hat conference board. He co-founded Trail of Bits. He co-wrote the iOS Hacker's Handbook. On April 14, 2018, the hackersent an email. To [email protected]. That's Epstein's personal email address. Subject line: "New Yorker." Document reference: HOUSE_OVERSIGHT_033280. I don't know what was in the email. The email exists. In the files. In the congressional oversight documents. I've been to Black Hat with the hacker in question. Not personally. In the same room. Watching the same talks. About zero-days. About offensive security. About "responsible disclosure." Epstein had a personal hacker selling zero-days to governments and Hezbollah. Epstein was in contact with a Black Hat board member. Epstein funded MIT Media Lab. Where they research AI. And security. And "the future." I don't know what this means. I know what it looks like. It looks like my industry. But there's more. US security officials say Epstein ran "the world's largest honeytrap operation." For Russian intelligence. The KGB. The documents mention Putin 1,056 times. Moscow 9,629 times. An email from September 2011: "You had an appointment with Putin on September 16th." Scheduled like a dentist visit. Security sources say a Russian oil tycoon introduced Epstein to the Maxwells. Robert Maxwell. Ghislaine's father. Called "Israel's Superspy." Alleged KGB. Alleged Mossad. Alleged MI6. Three agencies. One family. Plus a personal hacker. Plus a network of security researchers. Plus MIT. Plus zero-days sold to multiple governments and terrorist organizations. At DEF CON, we have a saying. "Spot the fed." It's a game. You try to identify the government agents in the crowd. It's funny. Until it isn't. Until you realize the game goes both ways. They're spotting you too. And taking notes. And building networks. And buying exploits. Epstein wasn't just an intelligence asset. He was an intelligence infrastructure. A platform. Multi-tenant. Multi-cloud. Russia. Israel. US. UK. Hezbollah. Everyone got access. Everyone paid differently. Same exploits. Same kompromat. Same network. Different clients. The question everyone asks: Was Epstein an intelligence asset? That's the wrong question. The right question: Was the entire security research community compromised? The answer is in the files. Three million pages. We just haven't read them all yet. Was the entire security research community compromised? Anyway, see you at DEF CON!

So someone contacts you on LinkedIn with a promising job opportunity. Sounds nice, innit? They seem legit (after checking them for 1 min) and after some short convo they send you a GitHub repo with a simple Next.js "recruiting task". You clone it, run it… and 10 mins later, your device is fully compromised as you find out that your hot wallets were drained. Ok, what happened? Given the fact that we (= SEAL 911) have seen this attack over and over again, let me disclose some of the most important details: - first, the most important caveat: do NOT run random code some random dude sent you. Honestly, fucking don't. - check always the _executable_ config files of the repos thoroughly. In this particular case, the `next.config.js` file had a large padding hiding the malicious payload far to the right. - always scroll horizontally - just because you don't see anything malicious when you look at the content doesn't mean it's clean. Important: Malicious code can be hidden within files you trust, just not where you expect it. I really hope this tweet reaches enough people to prevent at least a few future victims from falling for this kind of attack.

keyboard_arrow_left Previous keyboard_arrow_right Next

Stickers!

your home is only as nice as the people in it! my home is a bit less nice today! (not for long but still!) and success is: > Being happy > Having people that care about you (and caring about others) > Having more coming in than going out > Being healthy (as much as life in it's cruel ways allows)

@cqcqcqdx Where's the wifi at?

Hackers Remotely Control Nissan LEAF: Steering, Tracking, and Audio Accessed securityexpress.info/hackers-remote…

The bestest, most goodest #wardriving #warwalking rig to ever exist #WWWD

keyboard_arrow_left Previous keyboard_arrow_right Next

My DefCon RF Village CFP submission about self replicating worms for the ESP32 was accepted! If you buy one of these Evowera Planck Mini Smart Toothbrushes and bring it to the talk, it will be infected and join the botnet! Hack the Planet!

Skeletor is sharing some life changing advice 😂

To celebrate this #TRASHART Solstice

Happy to report that QCSuper works with the Pinephone Pro @thepine64 for realtime radio frame monitoring of 2G/3G/4G, combined with the rooted baseband - this is now my preferred UE for mobility solution assessments. github.com/P1sec/QCSuper

Can confirm, these are absolute monsters!!

m◉nkeydrag❍n🐒🐉 @M0nkeyDrag0n

2 years ago

I've had a couple chances to run @CoD_Segfault new v2 of the mini wardriver and it is PHENOMENAL. Anyone that gets one or builds similar down the road will be stoked with their results and the portability is still awesome. Slick pieces of kit and love how they came out!!!

3 2 44 5K 11

@ImposeCost aren't there like 5 tools that do this already? squil, wireshark, moloch... I'm sure cisco and solarwinds have something. Even pcap monkey from a previous google soc. How is this different?

Microsoft engineer: 500ms lag in liblzma? Something's up. Also Microsoft engineer: 45 minute lag in Microsoft Teams? Perfect.

I should ride the train across the country again

Hi @Shubhamvis98 QQ, Do i need to install tow boot first when installing kali phosh on a pinephone 64?

Flying out to teach a week long class in Georgia! 😎✈️ I got to do some tests on the MiniMeter and worked on a new revision on the plane - updates coming later this week! ⚡

keyboard_arrow_left Previous keyboard_arrow_right Next