Ag3nt57
387 posts

Ag3nt57
@573_918
Born in the best City on Earth | born on the RedTeam | Blessed to see life in all its Glory | Hacking4Good | #YNWA #Kali #420 #osint4good
Liverpool Katılım Mayıs 2020
1.2K Takip Edilen123 Takipçiler

Congratulations to this random guy who comments silly pictures of cars on my posts.
He has successfully found his first good malware in the wild, unironically a fake CoD cheat that is Santa Stealer
1. This is good free malware
2. This is a good silly cat meme
Brandon ッ@notbrvnd0n
Was poking "free" call of duty hax on yoobtube and found something AnyRun labeled "santastealer" >password protected zip file >out of habit "infected" >???? >"bytearmor" anyrun report: any.run/report/cb72a8e… This is Santa waiting for you to detonate the stealer
English

Another Windows zero day released by Nightmare Eclipse (sort of)
It turns out Microsoft just straight up didn't patch an old CVE from 2020 correctly.
github.com/Nightmare-Ecli…
English

@DailyDarkWeb I have to put in a recommendation for my friend's @insidedarknet podcast.
English

🎧 Top 5 Cybersecurity and Dark Web Podcasts You Should Be Listening To
If you want to understand cybercrime, threat actors, and real-world incidents beyond headlines, these podcasts are worth your time:
🕶️ Darknet Diaries – Jack Rhysider
Stories of hackers, breaches, and cyber operations told like a thriller
🔗 darknetdiaries.com
🧠 Malicious Life – Ran Levi
Deep dives into cyberattacks, threat actors, and historical cases
🔗 malicious.life
🌐 CYBER – VICE Motherboard
News-driven discussions on cybercrime, privacy, and digital threats
🔗 vice.com/en/topic/cyber
🎙️ Reply All (Archived) – Gimlet
Classic investigative tech stories, still highly relevant today
🔗 gimletmedia.com/shows/reply-all
🛡️ Cybercrime Investigations Podcast
Focused on real investigations, digital forensics, and law enforcement perspectives
🔗 cybercrimepod.com

English

@apis_carnica @vxunderground Thanks dude, I had to take time away so I can remember why I am going to be king of the pirates! 🫶
English

@573_918 @vxunderground Hell yeah dude!
(Also, it's nice to see you online again)
English

I'm tired of people stereotyping us computer nerds. It is PREJUDICE.
Here are some stereotypes non-nerds push on us. They're all FALSE.
According to non-nerds, us nerds do the following:
- Excessive caffeine or nicotine intake
- Unusual or unhealthy sleep schedule, specifically around 3am and 5am
- Apparently have tons of tabs open, or something, in terminal or web browser
- Desk messy, covered in cables
- Hardware nerds apparently do "experiments" just to see if something works
- Notes on paper or whiteboard look like serial killer manifesto
- Web cam taped, mic disabled, because of "paranoia"
- Strong distrust in tech companies, especially social media
- Nerd so intense forget to eat or shower
- Spend 8 hours debugging instead of reading something which would take 20 minutes because ???
- Apparently we "don't know an answer" but know how to find it?
- Some nerds become irrationally angry about GUIs?
- Weird obsession with mechanical keyboards
I'm so tired of these stereotypes. Literally none of these are true.
English


/me raises hand
Hi, I have a stupid question. This is for OSINT nerds and attribution nerds.
FBI Director Kash Patel used the email SpiderKash at Yahoo dot com.
Someone found the username SpiderKash on XVideos (pornography website) and asserted because it has the same name as the Yahoo email then this XVideo profile was created by Kash Patel
So... is using the same username actual attribution? I'm not trying to be rhetorical. I'm being completely serious. How can you assert with high confidence this is Kash Patel just because he had SpiderKash as his Yahoo email?
It's speculative, it doesn't look good, but there is not solid conclusive evidence. Am I wrong? Or because of the perceived novelty of SpiderKash this is sufficient evidence?
Right Wing Cope@RightWingCope
BREAKING: Kash Patel’s GOONER account has been discovered from a username leak 💀
English

Today @BleepinComputer published a story on a company named Telus Digital being compromised by a Threat Group operating under the moniker "ShinyHunters', a reference to Pokemon.
GTIG (Google Threat Intelligence Group) has been tracking ShinyHunters under the label UNC6395.
UNC6395 has been targeting enterprise organizations since at least August, 2025 by exploiting compromised OAuth tokens to gain access to company SalesForce instances. Upon successful compromise, UNC6395 attempts vertical or horizontal movement by combing through the compromised SalesForce data.
At a currently unknown time, UNC6395 successfully compromised Telus' SalesForce instance which allowed them to pivot elsewhere within the organization.
The amount of data UNC6395 claims to have compromised is astronomical. They claim to have exfiltrated over ONE PETABYTE of data (compressed as .tar.xz). While Telus has confirmed the compromise, the exfiltration of ONE PETABYTE of data indicates the compromise may have occurred weeks, possibly months, ago. Telus as of this writing has not given additional details on the compromise (more on that later).
I am unable to confirm the validity of the data, primarily because I do have the means to reliably comb through a petabyte of data. However, "snippets" and "samples" have been shared. Based off data seen, the compromised appears authentic. Here is a high-level overview of what was allegedly compromised and successfully exfiltrated.
- Employee Full Legal Name
- Employee National ID Number and/or SSN
- Telus hashed passwords, API keys, OAuth tokens
- Call record details
- Call meta data
- Telecom customer PII (First Name, Last Name, Address)
- HR records
- Agent performance records
- SalesForce accounts, contacts, leads, and records
- Financial records (ACH routing numbers, etc)
- GitHub repository access to an additional 20 organizations adjacent to Telus (20,000 internal source code projects)
- Customer and Agent call records in .wav
- 14,139 customer database instances, all containing customer PII (unspecified)
- GLEAN TELUS background check files. UNC6395 has access to FBI, RCMP, and CISA background checks.
- GLEAN TELUS confidential reports on investigations
- GLEAN TELUS confidential reports on tax filings (?)
- ... just search "GLEAN" on Google
If what UNC6395 states is true, this breach impacts approx. 230M companies across the globe. Based on information seen publicly, ... it looks bad.
However, as of this writing, Telus has not done anything other than confirm the compromise with some journalists. I suspect they're currently performing a DFIR (Digital Forensics and Incident Response) and forming a strategy to combat this technologically, legally, logistically, and PR-wise.
Is UNC6395 telling the truth? Is this compromise as severe as it appears to be? When will TELUS provide more details? Will impacted customers be notified? Is law enforcement mad their background checks are allegedly compromised?
Find out next time on Dragon Ball Z

English

@kieomusic @Michael1247793 No we fight like hell while we can because we have no choice!! The team did their best today again and now like life we carry on and do our best because we represent this great city!!
English











