Prashant Uniyal 🇮🇳 (@prashant_92) header
Prashant Uniyal 🇮🇳 (@prashant_92) profile picture

#InfoSec n00b @garage4hackers from the Himalayas | CTI enthusiast decoding cyber puzzles | SOF watchdog, #OSINTforGood | Hiker, Bikepacker on Cycle

127.0.0.1
Joined June 2009
Photo by Prashant Uniyal 🇮🇳 (@prashant_92)Photo by Prashant Uniyal 🇮🇳 (@prashant_92)Photo by Prashant Uniyal 🇮🇳 (@prashant_92)Photo by Prashant Uniyal 🇮🇳 (@prashant_92)Photo by Prashant Uniyal 🇮🇳 (@prashant_92)Photo by Prashant Uniyal 🇮🇳 (@prashant_92)Photo by Prashant Uniyal 🇮🇳 (@prashant_92)Photo by Prashant Uniyal 🇮🇳 (@prashant_92)Photo by Prashant Uniyal 🇮🇳 (@prashant_92)
Prashant Uniyal 🇮🇳 retweeted
The Binance hacker might have just executed one of the most brilliant moves in crypto. First, Tether froze $1.5 billion worth of USDT. Then Circle followed by freezing another $800 million in USDC. At that point, it seemed like the hacker’s funds were completely trapped. But apparently, he had already thought several steps ahead. Rather than keeping the stolen USDT in a wallet, he allegedly deposited it into Aave and used it as collateral to borrow ETH. Then he walked away. And this is where things get really interesting. Tether can freeze the USDT sitting in that wallet. But it can’t freeze the ETH that was already borrowed. So now, Aave is left with frozen collateral, while the hacker is holding liquid ETH. And unless the protocol finds a way to recover those funds, he might not even have to repay the loan. Two companies froze billions of dollars in seconds. Yet someone who understood how DeFi works may have found a way to bypass both restrictions. Pretty wild when you think about it.
222
767
95
6,455
1,044,567
4 fake “Challan” APKs, 3 unrelated #malware kits. Same costume (fake Play updates, a VPN that blinds Play Protect), different code. One asks an LLM to size up victim's bank balances. Another pairs your phone with itself over wireless ADB. #CTI medium.com/@threatdiary/same…
1
159
8 compromised TLS certs. Global security alert. And where’s CERT-In? What exactly does “Emergency Response” mean if there’s no timely public alert? #CERTIn #CyberSecurity #TLS #InfoSec #IncidentResponse
57
Reported countless shopping,trading & crypto scam ads on @Meta platforms like @facebook @instagram . Not ONE taken down. “No violation found,”every time. 🥲Scam ads pay,so who cares? And GOI’s task forces?Where are the hefty fines & real legal action #CybersecurityAwarenessMonth
The National Cybercrime Threat Analytics Unit (NCTAU) of Ministry of Home Affairs has issued an advisory after observing a rise in financial fraud through deceptive advertisements on Facebook and Instagram. These advertisements impersonate well known public and political figures, including the Prime Minster of India, the Finance Minister, Chief Ministers of States, to promote fake Government welfare schemes and promise financial assistance. Victims are asked to pay purported fees or taxes to receive the benefits. In some cases, advertisements offer fake cashback rewards through scratch-card or pin-and-win contests, tricking victims into approving UPI collect requests from fraud merchants and transferring money to fraudsters.
68
Got a ₹1,500 traffic fine by SMS? Don’t tap the link. We traced one to a 3-stage #Android banking #trojan posing as mParivahan. The final stage reads every SMS, forwards your calls and grabs #UPI PINs in 60 apps. Full write-up: medium.com/@threatdiary/your… #ThreatIntelligence
+91 86583 30943 Plz be aware of this number He is a financial scammer Jio Alert : SPAM Violation of Traffic INR.1500 has been issued against Vehicle Number ********* View challan: mparivahan.dnet.hu/631208 Why should @JioCare send a msg by a mobile No Has a apk file
1
2
109
Prashant Uniyal 🇮🇳 retweeted
Interesting London is quiet & Brussles is taking in refiend Diesel from India of Russian crude. While Big Tech lobby in America is fuming as India stands non committal to its agenda as dictated by the White House. Time is of the essence as Midterms are approaching. Thus pressure being ratched up on India to fall in line allow American Corporates to be East India Company 2.0 in form of Tech Czars as new corporate raiders. The Agro-chemical lobby in Cargill, Monsanto is equally pissed off protection of Indian agriculture and hurting the GOP in farm belt. Soybeans, GM Corn big thorn in the flesh apart from other Non Trade Barriers and energy trade in non dollar terms with Russia. Detente with China, Chinese FDI in Manufacturing is another sore point as India seeks to make its strategic autonomy as corner stone of its Foreign policy. The tech overlords in DC are squaring up with Banking & Financial Oligarchy in City of London. Tech Oligarchs in DC are really pissed with India's neutrality and protectionism when Bessent himself talks of going back to that era of Hamilton economics. Bessent & Co will target Indian financial markets & currency, they did it to Iran as well, Venezuela too and Bessent was with Soros play on Bank of England and pound sterling in 1992. Be wary and careful in times ahead !
28
385
17
1,301
93,991
Driving in Dehradun sometimes feels like a live-action GTA server. 🚗 Wrong side? ✔️ Red light jump? ✔️ Random U-turn? ✔️ Traffic police? ❓ Just asking for a friend: Is there even traffic police in Dehradun these days? @DehradunPolice @Anoopnautiyal1
थार खरीदने के बाद आखिर इनके दिमाग में क्या भर जाता है? 🤔 देहरादून में घंटाघर से प्रेमनगर के बीच सड़क पर नियमों की खुलेआम धज्जियां उड़ती नजर आईं। थार के पीछे अवैध तरीके से लगाई गई हाई-इंटेंसिटी लाइट इतनी तेज है कि पीछे चल रहे वाहन चालकों की आंखें चौंधिया रही हैं और सड़क कुछ पल के लिए साफ दिखाई देना मुश्किल हो रहा है।
69
My brother, a veteran,started a hospitality business with full compliance. Yet GST/FSSAI processes felt like ehsaan while hinting at extra tips with delays. @narendramodi PM sir, on paper things may have changed, but on ground? Our support to you remains, but for how long?
1
40
Prashant Uniyal 🇮🇳 retweeted
Poland lost hundreds of millions trying to buy Venezuelan oil with crypto to circumvent American sanctions. The head of a division of Polish Orlen met a 25-year-old founder of a Dubai firm, and five days later the state-owned company transferred a $230 million advance to this person. The scheme involved settlement in USDT because ordinary bank payments to Venezuela do not go through. Then comes something that is hard to believe: access to the wallets was handed over to intermediaries on flash drives (!!!) during personal meetings in Caracas. One of them was given the keys to 110 million USDT and disappeared. Another $50 million vanished during conversion through another Dubai firm; a court case is now underway there. The intermediaries from PDVSA never received the rights to specific oil cargoes. Three tankers arrived for 6 million barrels, stood idle at the berth for months and left empty. The demurrage of one of them alone cost $72 million. The result: a small shipment of petroleum products instead of six million barrels and at least $424 million in losses.
17
15
7
97
19,588
#Dehradun Balliwala Flyover: where dividers retire early & wrong side riders never do. Dear Doonites,get a dashcam. Some people treat the wrong side as the right side! The divider poles installed to stop this barely last a few weeks cc @DehradunPolice @ukcmo @Anoopnautiyal1
1
54
Prashant Uniyal 🇮🇳 retweeted
❤️‍🔥❤️‍🔥❤️‍🔥Hi threat hunters and malware analysts! The weaponized web version of Matkap is now open source! Level up your hunt for malicious Telegram bots! -View reports and tweets about Telegram bots being used as C2 infrastructure directly in the panel, and extract IOCs. -Use JADX MCP to extract Telegram bot tokens and chat IDs from Android malware. -Scrape bot tokens from web addresses indexed by urlscan, ThreatFox, and ZoomEye. -Pull malware samples that use Telegram bots directly from MalwareBazaar. All in one panel. Happy hunting!
5
54
1
304
26,017
Looks like Sir’s account may have been compromised by crypto scammers. The old golden rule still stands: never click links inside X blindly. You never know what vulnerability or phishing trick could be triggered. Stay cautious and verify everything before interacting.
unavailable
1
2
355
Prashant Uniyal 🇮🇳 retweeted
🚨 OFFICIAL ANNOUNCEMENT 🚨 Follow @MythbusterXX for verified updates, swift rebuttals, Misinformation, Disinformation, Malinformation and Deepfakes pertaining to Indian Army. Official Fact Check Account of Indian Army. @MythbusterXX Be Aware and Stay Alert. ✅ Verify before you amplify. ✅ Trust only official sources. ✅ Stand with truth. 👉 xitter.cf/MythbusterXX #IndianArmyFactCheck #CounterDisinformation
147
1,362
104
5,105
984,193
Prashant Uniyal 🇮🇳 retweeted
This a pretty weak from @MEAIndia 3 Indian sailors have lost their lives. Instead of unequivocally holding the US responsible for this daylight murder, the MEA is giving an exit route to US by shifting blame to the victims. The MEA by referring to the OFAC sanctions has provided legitimacy to US Treasury Department sanction list. By calling a ship non-compliant it indirectly justifies US actions. Notably the Shipping Company of the deceased Indian sailors has clarified that the attacked ship was not given any warning and was stationary for last 10 days. The Company has asked for an independent investigation into this attack. The least @MEAIndia can do is standby Indian sailors instead of making weak statements. @DrSJaishankar
MEA Spox Randhir Jaiswal says "attacks are coming from US side"; Points, "2 of the vessels are sanctioned ship, one of them non compliant ships"
13
56
111
3,502
Today, asking a reasonable question can attract more outrage than proposing a flawed policy. That should concern everyone, regardless of political preference. Whn experts start hesitating to speak & citizens stop asking questions, bad policies go unchallenged #EthanolBlending
Replying to @NarinderMudii
Bhai, mujhe andar nahi jaana, mere bache hein People deserve this belt treatment
34
Step 1: Buy Amazon Prime. Step 2: Discover Prime Video wants more money. Step 3: Discover Amazon Music wants more money. Step 4: Wonder what exactly the Prime membership was for.
1
1
84
Amazon Prime: the membership that keeps introducing you to memberships. Every time you think you’ve paid, there’s a new premium tier waiting around the corner. @amazon @amazonIN @amazonmusic
1
41
Prashant Uniyal 🇮🇳 retweeted
While the photograph of crash of GOC 3 Div’s helicopter has gathered lot of praise and good wishes, I can tell you this photograph is as true a depiction of mindset of army officers as it gets. - Pilots continue flying this autorickshaw with rotors blades and hope for a better bird that replaces it. Day after day. Transporting, rescue, ops etc. - An adversity like a crash will not be met as a crybaby, but survival will be celebrated with a selfie and victory sign. - Get up, brush off your dust and fly again next day. Same helicopters. Both pilots and the senior officers. With the hope that someone sitting in Def Min will finally replace them. The reason that conversations around equipment and material in media and social media is mostly led by enthusiasts and not professionals is mostly because right from training days, one idea that’s drilled into you is not to complaint, and do your best with what’s available. And mind you, this is a critical part of training that has ensured success, motivation and cohesiveness of fauj. Not to say that a million things can’t be improved, right from rifles to houses. But complaining doesn’t come naturally to faujis. And somehow while that’s a principle that creates excellent soldiers for war, it also gives leeway to the decision makers to take things for granted as long as they want. Because Army will keep serving and fighting inspite of lack of even basics. You can’t get a bureaucrat or politician to land in high altitude without all luxuries and comfort ensured for few hours. And army soldiers will spend their months and years deployed and fighting inspite same altitude and terrain with walking stick called INSAS and snow boots of wrong size. Yes, things are changing but there’s a long way to go. Comfort is taken as detrimental to soldier’s toughness even within army. And this gives rise or stems from the same thought of never to compliant. Safe to say, creates an environment where problems go unnoticed, and continue to fester. A true tribute and support to soldier is not laying flowers on his coffin after he passed away fighting terrorists without a light and sturdy bullet proof jacket, and s rifle that was missing a scope which could’ve helped him fight better and kill his enemy. The true tribute would be giving him all this so you don’t have to throw flowers on his coffin. Jai Hind. 🫡
23
138
2
564
23,280
Prashant Uniyal 🇮🇳 retweeted
Proud to support civic bodies & citizen forums in deploying the right tech for real impact. With #Dehradun Citizens Forum, we’ve launched Safai Mitra to enable smarter waste reporting, accountability and a step toward zero waste & zero burning. #CleanDehradun #CivicTech
Say no to waste burning; hold Mayor, Commissioner & System Responsible: Today, Dehradun Citizens Forum (DCF) held a press conference raising strong concerns about the city’s waste crisis, clearly calling for no waste accumulation and zero waste burning. We also launched the Safai Mitra mobile solution to strengthen citizen reporting and improve accountability in waste management systems. The solution has been launched in collaboration with Convergent Defence Foundation. Sharing a short reel from the interaction with DCF members including Jagmohan Mendiratta Ji, Retu Chatterjee, Nitin Shah, Bharti Jain, Ramana Kumar and others. #Dehradum #Uttarakhand
2
73
Prashant Uniyal 🇮🇳 retweeted
Lets start a threat hunting thread where we reveal some of our secret hunting methods. I will start first. Check SSL info on IP webscans. This way you can find configured domains from threat actors on confirmed malicious IP infrastructure. Also you can pivot beyond cloudflare
11
37
369
27,258