主に経済や金融についてツイートします。興味があれば日常的なことも話題にします。100％私的興味でのツイートです。ビジネス系のフォローはお断りします。
Tokyo/Japan
Joined November 2010
- Tweets35K
- Following197
- Followers39.5K
- Likes1.4K
Cafe_Forex（テムズ川の流れ） retweeted
【速報】米テキサス州の上院選で、民主党のジェームズ・タラリコ氏が勝利。30年以上にわたる共和党の議席独占を崩し、民主党が議席を奪取しました。
（アメリカ中間選挙：無料登録で読める）
最新の開票状況と見通しをライブ解説中。無料アカウント登録（クレカ不要）で読めます。
bloom.bg/48zaL50
Cafe_Forex（テムズ川の流れ） retweeted
JUST IN: Donald Trump says there is MASSIVE election fraud happening nationwide right now
Readers added context they thought people might want to know
Trump has made no statements in the last 2 hours. The last thing he stated publicly was on Truth social regarding Fox news coverage. Since election results started coming in, he has not made any statements. There are also no videos of him making any fraud statements.
truthsocial.com/@realDonaldTru…
Cafe_Forex（テムズ川の流れ） retweeted
BREAKING: DECISION DESK SAYS JAMES TALARICO PROJECTED TO WIN TEXAS SENATE RACE.
🤝 Paid partnership
Cafe_Forex（テムズ川の流れ） retweeted
Ese pinche oscuro debe ir a la cárcel si o si, fue por el delantero habiendo dos defensas y encima le receta un puñetazo, es un asesino.
Cafe_Forex（テムズ川の流れ） retweeted
Millions of Android TV boxes left the factory already backdoored and sold to criminals.
Google just exposed that Shenzhen manufacturer Videostrong deliberately pre-installed a persistent backdoor into more than 1.3 million Android TV boxes, including MECOOL models. Partners saw roughly 1.47 million infected devices across 206 models in 170+ countries.
It sold access to criminals who used the devices as residential proxies, ran ad fraud, and stole data, all without owners knowing.
The malware runs with system privileges, can silently install apps, disable Google Play Protect, and reinstalls itself from a protected partition if you delete it.
Google and partners took down the command servers (cutting off access to at least 10 million more devices) and permanently banned Videostrong from certified Android. The company had slipped the malware past testing by activating it after first boot.
Servers are offline, but the firmware backdoor is still on the devices already sold. Simple deletion will not fix it.
When a certified maker ships malware from the factory into living rooms across 170+ countries, cheap streaming boxes can quietly turn your home internet into someone else’s tool.
【Android端末130万台超にバックドア】
中国・深圳のVideostrong社がファームウェアに意図的に埋め込み犯罪グループにアクセス権を販売していた
joho-todai.com/android-video…
悪用の規模（4か月間の観測）
・感染端末：130万台超
・悪用されたIPアドレス：380万超
・制御メッセージ：23億件超
・感染確認国：170か国超
■影響
感染端末が住宅用プロキシ（家庭回線を犯罪者の通信経路に転用する仕組み）として稼働
利用者のIPアドレスが不正行為の発信元に
■Googleの措置
認証資格の停止.指令サーバーの遮断で追加1000万台への攻撃者アクセスも遮断
※端末上のバックドアは削除しても再起動で復活する
感染端末の廃棄か安全なファームウェアへの書き換えが必要
Cafe_Forex（テムズ川の流れ） retweeted
Binance hack was prepared over several months
North Korean hackers used a fake job interview to infect employees’ computers, according to the exchange’s report.
In June, engineer A installed malware. Security replaced his device and changed all access, but the attackers already knew the engineers’ roles.
In September, engineer B was offered a job at a non-existent company by a “project director.” He passed two interviews and downloaded a malicious “test assignment.”
On October 20, through his infected computer, hackers reached Binance’s internal AI tool and gained access to the computers of engineers A and C.
On October 29, using that data, they launched the attack.
Binance said the hack affected $6.34 billion in assets, of which about $2.85 billion was frozen.
“We have already reserved more than 100% of the funds needed to cover the losses,” the exchange said.
The report also mentions the FBI’s version that North Korean authorities are behind the hack.
スマホ落とせば無一文： 三菱UFJ、三菱UFJエムット銀行でキャッシュカード全廃 サイバー防御へスマホ入出金 - 日本経済新聞 nikkei.com/article/DGXZQOUB2…
オーストラリア、金利を2008年金融危機以来の最高水準4.85％に引き上げ ft.com/content/60283bdf-e45d… @ftより
Cafe_Forex（テムズ川の流れ） retweeted
التلفزيون الإيراني يبث تحذيرًا للمواطنين حال وقوع ضربة نووية: لا تنظروا إلى الضوء شديد الانفجار واستلقوا على الأرض وغطوا الرأس والوجه.
==========
🔴 لا تنظروا إلى الضوء شديد الانفجار، واحتموا خلف حاجز، واستلقوا على الأرض، وغطوا الرأس والوجه.
🔴 بعد مرور موجة الانفجار ادخلوا أقرب مبنى، لا تبقوا للمشاهدة أو التصوير، ولا تحتموا داخل السيارة، وابتعدوا عن النوافذ والجدران الخارجية.
🔴 اغتسلوا بماء فاتر وصابون، واستخدموا شامبو عاديًا بلا بلسم، وإن تعذّر الاستحمام فنظفوا الوجه واليدين والجلد المكشوف بالماء أو المناديل المبللة.
🔴 استخدموا مياهًا معبأة وطعامًا مغلفًا، واستعدوا للبقاء في الملجأ 24 ساعة على الأقل، وإن اندلعت نيران في المبنى أو خشي انهياره، انتقلوا إلى ملجأ أكثر أمانًا.
🔴 لا تفترضوا أن البيئة أصبحت آمنة بعد 24 ساعة، اتبعوا الإعلانات الرسمية وبيانات الطوارئ لمسار الخروج الآمن.
Cafe_Forex（テムズ川の流れ） retweeted
Claude Code found that every free charging station i used in airports copied data from my phone. photos, passwords, banking sessions, contacts. i charged my phone at 3 airports across China and every single station pulled something from my device.
i travel through Asia a lot for work. my phone dies at airports constantly. i've used those free USB charging stations at gates without thinking about it. everyone does.
i installed Claude Code on my iPhone and ran a full device scan while i was still at the airport. plugged into a charging station at the gate and let Claude Code monitor the connection in real time. within 8 seconds it flagged a data handshake that shouldn't exist on a power-only connection.
i went back and checked every charging session from the last 4 months:
→ Shanghai Pudong PVG, Terminal 2 → June 14 → contacts + 2,840 photos transferred
→ Guangzhou Baiyun CAN → July 2 → active Safari sessions copied including Gmail and banking apps
→ Shenzhen Bao'an SZX → August 19 → full photo library access + location history for 6 months
→ Shanghai Pudong again → September 3 → iMessage database copied, 3 years of messages
→ Guangzhou again → October 11 → clipboard history including a crypto wallet address i copied that morning
every station initiated a data transfer the moment i plugged in. none of them were just charging.
the scariest one was Shenzhen. whoever operated that station got my full location history for 6 months. every place i slept, worked, ate, and visited. from one 20 minute charge while i was scrolling my phone waiting for my flight.
Claude Code traced 4 of the 5 transfers to the same server:
→ IP → 116.25.***.34
→ location → Shenzhen, China
→ hosting → dedicated server, registered 45 days before my first transfer
→ total data pulled from my phone → 4.7 GB across 5 sessions
what Claude Code did:
→ revoked every active session on Gmail, iCloud, WhatsApp, and banking apps
→ rotated every password stored in Keychain
→ purged all cached session tokens
→ flagged the crypto address i copied as compromised before i sent anything to it
→ disabled USB data transfer for all future connections
i never lost money. Claude Code caught it before anything was used. but 3 years of iMessages, my banking sessions, and my entire photo library were sitting on a server in Shenzhen for months.
buy a $12 charge-only USB cable. it has no data pins. or use a wall outlet with your own adapter. never plug a USB cable from a public station directly into your phone.
the full prompt is in the first reply. run it tonight. takes 3 minutes. if you've ever charged your phone at an airport, a mall, or a hotel lobby, someone might already have your data. save it and send it to anyone who travels.
Readers added context they thought people might want to know
Account pattern is consistent and commercial. @starmexxx posts a steady stream of these dramatic "Claude Code found..." stories. Many link to or promote digishield.app, which sells paid packs ($19-$39) of "16 ready-to-run checks that turn Claude into your personal security scanner"
「盗まれたトークンは公開ブロックチェーン上で法執行機関が確認できるものの、ハッカーたちは資金の流れを追跡することをできる限り困難にするため、少額ずつ多数の経路を通じてトークンを移動させるという、長く複雑なプロセスに着手している。」
北朝鮮のハッカーは、盗んだバイナンスの数十億ドルを資金洗浄するのに数ヶ月かかると予想されている。 ft.com/content/a6212e33-2175… @ftより
北朝鮮のハッカーは、盗んだバイナンスの数十億ドルを資金洗浄するのに数ヶ月かかると予想されている。 ft.com/content/a6212e33-2175… @ftより