Skip Navigation
Obscure screw added so appliance cannot be disassembled
  • Take a flat screwdriver and moubt it on a vice. Take your angle grinder, mount a disk for metal grinding. Grind away the middle of the flat screwdriver head. Done it before for the exact same purpose.

  • New Technique Detected in an Open Source Supply Chain Attack
  • Key Points

    GitHub search manipulation: Attackers create malicious repositories with popular names and topics, using techniques like automated updates and fake stars to boost search rankings and deceive users.
    
    
    Malicious code is often hidden within Visual Studio project files (.csproj or .vcxproj) to evade detection, automatically executing when the project is built.
    The attacker had set up the stage to modify the payload based on the victim's origin, checking specifically if the victim is based in Russia. At this point, we don't see this ability activated.
    
    
    
    The recent malware campaign involves a large, padded executable file that shares similarities with the "Keyzetsu clipper" malware, targeting cryptocurrency wallets.
    The malware establishes persistence on infected Windows machines by creating a scheduled task that runs the malicious executable daily at 4AM without user confirmation.
    
    
    
    Developers should be cautious when using code from public repositories and watch for suspicious repository properties, such as high commit frequencies and stargazers with recently created accounts.
    

    edit: formatting

  • Lemmy Support @lemmy.ml fraksken @infosec.pub
    typo in markdown text formatting guide

    Just wanted to reach out to mention I think the linked page may be missing an opening ( in the image example: ![Lemmy from Motörhead]https://upload.wikimedia.org/wikipedia/commons/8/84/Lemmy-02.jpg)

    great documentation by the way!

    1
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)FR
    fraksken @infosec.pub

    Do not trust anything I write down. I have this horrible habit of not checking sources.

    Posts 1
    Comments 132