@Pix3l_Peeper @AnassAb01

If you add an antenna extender to it, it’ll become a black hole for RFIDs.

Yeah, I know that, but in the context of the post, I don’t think it applies. Even if you have the session key/cookies, you still wouldn’t have permission to transfer funds since you’d need 2FA as well.

Yeah, that’s the closest pattern, I guess. He has a bunch of stealer logs, and he probably runs automated drainer software on them which automatically drains funds from extensions, seed phrases ...

What do you mean by session hijacking?

Yeah, the guardrails were what confused me, because all those circles have them, while the image you posted doesn’t. but glad it was that close!

Do you know the exact location? I was trying to find the exact position by identifying the camera’s location using the road, sun, and mountains. I found these three red circles as possible locations, but the road still doesn’t match any of them.

Those keys can be used to make a bot that watches for any transaction and sweeps the tokens as soon as they land in any of those addresses. I’ve seen a guy who did this in 2017 and swept many bitcoins using this.

this DLL : d265fcf18b14b98e55aa9fffd6b64b39de84304a1796854e72eef35bc6dca2c6 TencentVideoReporterPC.dll

interesting It abuses a ZEON signed program to perform DLL sideloading of a hidden DLL.

besides the csrf style attack with it, you can also chain CSPT with an open redirect to get xss or leak csrf tokens.

The easiest way to get blacklisted on literally every website that uses Akamai is by visiting this page🤣. akamai.com/q=<script>alert("XSS")</script>

🔥🔥

Unfortunately, you can’t!

You need to check the certificate details to see if you can use it to dump PPL processes.

what do you mean by help disable PPL/PP by manipulating links ?

We can go even lower kfta dyal djaj : 300dh lma dyal bir : free internet : 50dh mchrok m3a bzf nas khbz karm: 10dh ( 7to f ma bach yrtab ) srdine : laknti 9rib b7ar sydo kra : camping tent

beside that i also found that it was used by several cybercriminal groups, including BlackBasta, as early as 2022.

No idea, but from my point of view, a threat actor can easily deploy it stealthily, while other remote desktop apps are harder due to the message box that appears when someone tries to connect.

I published a blog post explaining the features of Chaos-Rootkit and how each one works internally. hackandhide.com/chaos-rootki…