digital desperado | [email protected]
Joined September 2014
- Tweets2.4K
- Following555
- Followers378
- Likes356
@CoreyTaylor @Perpared Yes. I'm sitting at the Pentagon right now reading your DMs. Brb
O_o retweeted
They’re kidnapping niggas off the streets of Atlanta and putting them in computers and shi
O_o retweeted
CLAUDE FOUND THE SEEDS
anthropic.com/research/ecdsa…
I myself have seen 5-6 UFO’s in my lifetime, all displaying similar characteristics that defy the laws of physics or otherwise unknown capabilities. The question is no longer if they exist but is it a tiny green man operating them or casper the ghost on crack . @ageofdisclosure
O_o retweeted
Actual message I received today:
Hey Nikita, I run an elaborate username hacking and reselling operation. I hold basically every dictionary-word username.
I noticed that you seized all of my hacked accounts. Some of them were worth a lot. I was wondering if you could give them back.
O_o retweeted
it's been long enough now that i feel like i can break my silence on this:
samsungs (allegedly) $200-$200K bug bounty program paid me just $5000 for the "High Severity" vulnerability that would've allowed me to supply chain attack their whole cloud environment.
“The com” LMAO
X has exposed and is taking strong action against a bribery network targeting our platform. Suspended accounts involved in crypto scams and platform manipulation paid middlemen to attempt to bribe employees to reinstate their suspended accounts. These perpetrators exploit social media platforms like Instagram, TikTok, YouTube, Minecraft, and Roblox and are linked to wider criminal organizations, including “The Com.” Legal proceedings are underway against participants, and we're fully supporting law enforcement. Our commitment to ensuring our platform’s integrity is absolute.
O_o retweeted
So, these threat actors successfully phished an author of multiple open source NPM packages with a total of 2 billion weekly downloads – including debug, chalk, and ansi-styles.
Since most companies run at least one React or Angular app, they had the opportunity to execute code on millions of systems across thousands of orgs.
And they used it to drop an amateurishly obfuscated crypto stealer, got caught by basic detection rules, and the issue was remediated after 2 hours.
I hope everyone understands how close this was – and can imagine what would’ve happened if someone with real skills had done it.
#NPM #Compromise #SupplyChain
