ComSec LLC @comsec

Need to Detect Electronics in Active, Deep-Sleep & Standby-off Modes, Even Through Metal Shielding & Enclosures? ✔️✔️ You Need the Lockhart Magnetometer. Get Info: buff.ly/6HSIMrf #TSCM #Government #Military #ExecutiveProtection

Defeating Spies in the Sky Espionage on corporate aircraft presents a threat ainonline.com/aviation-news/…

SOLUTION ALERT: Detect Cellular 2G / 3G / 4G / #5G , 2.4 GHz/5 GHz Wi-Fi / Bluetooth & Wideband 0-14 GHz with the WAM-X25 Wireless Activity: dld.bz/j9htM #TSCM #businesssecurity #privateinvestigator #ExecutiveProtection

Thomas Weir Pauken II, 50, an American citizen who lived and worked in the People’s Republic of China (PRC), pleaded guilty today to acting as an agent of a foreign government within the U.S. “Pauken admitted to being part of a conspiracy to obtain sensitive information from the U.S. government for the PRC,” said Assistant Attorney General John A. Eisenberg. “His actions are a betrayal of this Nation and pose an unacceptable risk to our national security. NSD remains committed to safeguarding information essential to our national security, including through appropriate prosecution.” Read more: justice.gov/opa/pr/america…

NEW: MI5 and Five Eyes partner agencies have just issued what they say is an unprecedented joint warning about attempts by Chinese spies to use LinkedIn to recruit Western assets

keyboard_arrow_left Previous keyboard_arrow_right Next

🚨 Weaponized ChatGPT Download Site Delivers Malware Via Sponsored Search Results Source: cybersecuritynews.com/weaponized-cha… A new malvertising campaign is exploiting ChatGPT’s popularity by promoting a weaponized fake download site via sponsored search results, delivering malware to both Windows and macOS users. The operation which leverages convincing OpenAI branding and search engine ads to lure users actively seeking legitimate AI tools. The campaign centers around a malicious domain, openew[.]An app designed to mimic an official ChatGPT download page closely. Victims are presented with multiple download options, including Windows, macOS, and a Chrome extension. #cybersecuritynews

Phishing and social engineering are getting more sophisticated at an exponential rate due to AI. Proton just let a phishing email go through to my inbox that I think will compromise tens of thousands of folks. How it seems to work: someone added my email to a real Google Group. They then sent out a message to all members of the group with subject line "Your Google data has been exported." Obviously this will cause many people to panic. The email went through to my inbox because it came from a legit google group from a legit Google URL. All links in the email look totally normal – unless you look at the link for "Cancel request" button. But amazingly this one also seems to come from a genuine Google URL – a URL shortener from Google! goo[dot]gl/XXXXX (not putting the real URL here). Then it takes you to (1) a Recaptcha screen and then (2) a genuine looking Google account login screen. It's hosted on a Google site (sites[dot]google[dot]com) so everything looks legit. Because all links are technically hosted by Google, this is very very bad.

keyboard_arrow_left Previous keyboard_arrow_right Next

June 4: Thomas Weir Pauken II, an American citizen who lived and worked in China, pleaded guilty to acting as an agent of a foreign government within the US. From at least 2019 until Feb 2026, Pauken worked at the direction and control of people he knew worked for China, including a person he met in 2017 identified as “Cathy.” Cathy provided Pauken with taskings, including meeting with potential intelligence assets, providing them with devices such as a laptop and cellphone to communicate with Cathy, providing taskings for the assets on what information was required, and providing Cathy with reports from the assets. Pauken received at least $100,000 for his work with Cathy. Cathy also paid for Pauken to travel several times between 2019 through 2025 from China to meet with individuals in the US who could provide Pauken, and ultimately Cathy and 🇨🇳 Ministry of State Security (MSS), with information. Pauken worked for two other people in China whom he met in 2017 and knew as “Richard” and “William.” They told Pauken that reports he wrote for them went to Japan, but Pauken believed they worked for the 🇨🇳 government. Pauken also sold reports to a group of Chinese individuals from Wuhan who sought information about technology and the 🇺🇸 Department of Justice. The Wuhan clients wanted Pauken to find an expert to help them engage in cyber espionage. Pauken is scheduled to be sentenced on Sep 1 and faces a maximum penalty of 10 years in prison. justice.gov/opa/pr/america…

Byron Wan @Byron_Wan

2 weeks ago

🚨 American journalist and political commentator Thomas Pauken II, who has lived in China for more than a decade, is facing a criminal charge in the US of acting as an agent for the 🇨🇳 government. Pauken allegedly prepared confidential reports that his Chinese handler told him

8 103 251 44K 52

🚨 Teams and Google Drive Leveraged to Compromise Systems Within 20 Minutes Source: cybersecuritynews.com/microsoft-team… Hackers are increasingly abusing trusted enterprise platforms such as Microsoft Teams and Google Drive to deploy stealthy remote access malware, with a newly observed campaign leveraging social engineering and cloud-based command-and-control to evade detection. Within minutes, the threat actor delivered a Java-based remote access trojan known as Nimbus RAT, completing the compromise in under 20 minutes. The attack followed a structured, repeatable kill chain, highlighting the growing operational maturity of these campaigns. #cybersecuritynews

Serious About Signal Analysis? ⁉️ Kestrel SCOUT RF Locator Kits Are A Mobile, Field Ready RF Signal Intelligence Solution Featuring KESTREL TSCM PRO Software. 6 GHz, 20 GHz & 44 GHz Kits. #TSCM #SIGINT #Military #LE #RF dld.bz/jCamV

Are There Electronic Eavesdropping Devices In Your C-Suite? They Can Cause Catastrophic Harm to Your Business. Learn How ComSec LLC's Professional #TSCM Bug Sweep Services Help Protect Your Info ➡️ buff.ly/3PsfXYb #Corporate #Surveillance #Business #TSCM

Need Actionable Intelligence From Your Spectrum Analyzer? MEFF M2-PRO 100 Hz – 24 GHz AI Enhanced #TSCM Spectrum Analyzer Is the Solution. Mobile Tablet. Direction Finding Capability. Budget Friendly. buff.ly/pMCfIJZ #Security #Military #TSCM

Need to Detect #malware, Spyware, Trojans, and System Anomalies on #Android & #IoS Mobile Devices? MEFF M3-PRO AI Enhanced Professional Malware Scanner is the Tool You Need! ▶️ buff.ly/7yMBfsa #CyberSecurity #Corporate #AI

Need A Signal Detector That Will Detect & Locate the Very Latest Covert Listening, Tracking, Cellular and Video Devices? Check Out the JJN PRO-W12DX RF Detector. 0-12 GHz Range ⏩️ buff.ly/NGNeUlO #TSCM #Security #ExecutiveProtection

Have Private Meetings Become Office Gossip? It's Time for a Bug Sweep! ComSec LLC Is A Trusted Partner in Detecting Exposures and Securing Valuable Corporate Info from Electronic Surveillance > buff.ly/3PsfXYb #Security #Privacy #Surveillance

BREAKING: NIH ebola expert ARRESTED by the FBI for smuggling deadly pathogens into America from the Congo Vincent Munster was BUSTED at an airport with 113 vials containing monkeypox, chickenpox, and human DNA. 93 of the vials haven't even been tested yet......

If you are a victim of the FISA 702 illegal surveillance, this is everything they access in your phone. When the government has this information about you, they can easily target you, psychologically attack you, and do plausible deniability tactics (Zersetzung) which is what they have done to me for the last 9 years!

🚨 Fake Claude Code Installer Via Google Sites Delivers Credential-Stealing Malware Source: cybersecuritynews.com/fake-claude-co… A recently identified campaign uses fake pages mimicking Claude Code and OpenAI Codex, hosted on trusted Google Sites infrastructure, to trick users into running commands that quietly steal their credentials and other sensitive personal data from their devices. The attack follows a technique known as ClickFix, where victims are shown what looks like a legitimate setup page and told to execute a short command. There is no file downloaded in the traditional sense. Instead, the entire malicious operation runs silently in memory, making it much harder for standard security tools to catch it in the act. #cybersecuritynews

That corporate headhunter sliding into your LinkedIn DMs might actually be a Chinese intelligence officer trying to recruit you to steal state secrets. In an unprecedented, coordinated alert, the United States and its Five Eyes intelligence partners, including the UK, Australia, Canada, and New Zealand, have issued a massive warning. Chinese military intelligence services are aggressively weaponizing LinkedIn and other professional networking sites to recruit assets. This digital dragnet targets far more than just high-level politicians, actively stalking government employees, military personnel, and anyone with access to classified or privileged information. The scale of this online espionage campaign is staggering, escalating prior individual agency warnings like the thousands of suspected recruitment attempts tracked by the UK intelligence agency MI5 in recent years. Operatives leverage open professional platforms where public job details and affiliations make it incredibly easy to identify and approach potential sources of sensitive data. What begins as a harmless networking message or a corporate opportunity can quickly evolve into a severe espionage risk amid rising intelligence tensions. While Beijing routinely rejects these claims as political manipulation, intelligence agencies warn that professional networking has become an active battlefield. Your online resume makes you a prime target, and a single careless connection could compromise national security. #NationalSecurity #Espionage #FiveEyes #LinkedIn #CyberSecurity #China #Geopolitics

Bloomberg @business

2 days ago

The US and its “Five Eyes” intelligence partners issued what they said was an unprecedented joint notice warning about attempts by Chinese spies to use websites such as LinkedIn to recruit assets bloomberg.com/news/articles/…

12 59 114 44K 36

Breaking news: The U.S. and other nations in the Five Eyes intelligence partnership — the U.K., Canada, Australia and New Zealand — jointly warned that China is using LinkedIn and other platforms to pry secret information from security professionals. wapo.st/4vqEpmv