Tokiade retweeted
THE OTD JOGGERS, SHORTS AND JORTS AVAILABLE!!! @Supphardy store.
Dm to place an order!
Tokiade retweeted
October in a nutshell:
- PHP got hacked
- Railway got hacked
- OpenCode got hacked
- Binance got hacked
- Polymarket got hacked
- GitHub Actions got hacked
- SoftBank got hacked
- Cursor marketplace got hacked
- Coinbase vendor got hacked
- Fireworks AI got hacked
- LiteLLM got hacked
- Capcom got hacked
- npm packages got hacked
- TiDB Cloud got hacked
- Warp's vendor got hacked
happy cybersecurity awareness month
Tokiade retweeted
Best performance in the history of headies
He almost propose to Wizkid that night 😂
Tokiade retweeted
The employee cleared the browser history before handing the Windows laptop to the investigation team.
At first glance, there was nothing useful left. No suspicious download entry. No obvious website in the browser.
Then we checked the Windows DNS client cache.
Windows temporarily stores recently resolved domain names so it does not have to query a DNS server repeatedly. In the image, the cache still contains sync-gateway.example.net, its A record, the resolved IP address and the remaining time-to-live.
This does not prove that the employee visited the domain in a browser. Another application, background service or security tool could have requested the same DNS resolution. The cache also does not identify exactly when the lookup occurred.
But it gives an investigator a valuable lead that can be correlated with firewall logs, proxy records, process telemetry and DNS server logs.
Browser history belongs to the browser. DNS evidence can exist elsewhere in the operating system.
Useful PowerShell command:
Get-DnsClientCache
Tokiade retweeted
Hey, my Nigerian tech friends 🇳🇬🇳🇱 Winter time just started in the Netherlands, so we’re both on UTC+1 now, officially the same clock. Which means you currently should be sleeping, not coding! 😂
Tokiade retweeted
Lazarus Group Updated Resume:
Their Resume:
• Bybit: $1.5B
• Drift: $285M
• Bitget: $350M
• WazirX: $235M
• Binance: ~$5.8B
• KelpDAO: $292M
• Ronin Bridge: $625M
• DMM Bitcoin: $308M
Sorry to say,
Lazarus Group might be the hardest working security researchers in Web3.
Other security auditors charge $70K+ to find vulnerabilities.
Lazarus finds them for free by compromising the people, keys, multisigs and interfaces around the contracts.
Their Resume:
• Bybit: $1.5B
• Drift: $285M
• Bitget: $350M
• WazirX: $235M
• KelpDAO: $292M
• Ronin Bridge: $625M
• DMM Bitcoin: $308M
And many more.
Tokiade retweeted
Halo para mutual, sekedar mengingatkan meski hal ini sudah lama terjadi mungkin ada yg belum tau. bagi yg suka share link post x dengan link asli, perhatikan linknya dulu ya. Jika di link tsb ada kode lain setelah "?" Segera hapus semua kode itu sebelum mengirimnya ke siapapun.
Tokiade retweeted
Claude Code just caught a North Korean virus called "CRIMSON-9" that takes full control of iPhones, iPads, and MacBooks, and it is spreading faster than anything Apple has ever dealt with…
it jumps between Apple devices that are simply near each other, and the owner does not have to tap anything. More than 1.7 million devices already have it.
Two days ago it got onto my iPhone, and I still do not know when or how. I never opened a strange link or accepted a file from anyone.
The phone stopped reacting to my fingers and to every button, so I could not even turn it off. I connected it to my MacBook with a cable and asked Claude Code to find out what was going on.
Claude Code found that CRIMSON-9 had:
→ come in over Bluetooth from a device near me, without asking
→ been sending my data to a computer in North Korea since the moment it got in
→ copied my photos, my saved passwords, and the codes my bank texts me
→ started looking for the next Apple device near me to jump to
Then Claude Code cleaned the phone in twenty minutes.
→ cut the link to the computer in North Korea
→ found every CRIMSON-9 file and deleted it
→ turned off the setting that lets nearby devices connect to my phone without asking
→ signed me out of my accounts on every phone and computer I do not know, so the stolen passwords stopped working
The phone works normally again, and now Claude Code blocks any device that tries to connect without my permission.
The exact setup is in the first comment and takes ten minutes. Save this and send it to anyone with an iPhone.
Tokiade retweeted
copying a tweet's link from the share window now also puts a source identifier in it!!!! delete anything after '?a='!!! or just copy the link from the address bar if you use the website (weirdo,,,) kthxbai






































