Maxime Lescure

Y'a un truc qu'on a trop banalisé

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments. The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran. To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.

Dutch investigators from the FIOD have taken down the bulletproof server hosting provider Stark Industries Authorities seized 800 servers and arrested two men, a 57-year-old who ran the company and a 39-year-old behind a separate firm that handled internet connectivity Just last year, Stark Industries was sanctioned by the United Kingdom for enabling Russian state-sponsored operations, disinformation campaigns, and other cybercrime activities Shortly after the EU sanctions, Stark rebranded as "THEHosting" under a new Dutch organization (WorkTitans B.V.), allowing it to maintain its operations

Meet one of the biggest crypto scammers ever… in august 2024 this 20 year old from singapore named malone lam and his friends pulled off one of the craziest crypto heists ever. they didn’t hack anything or touch code. they just made a couple phone calls. the target was a bitcoin holder in dc who had been stacking since around 2014. over 4100 btc. that was worth about 240 million at the time. they spoofed a google support call, got him to screen share, then followed up with a call pretending to be from gemini. told him his account was compromised and he needed to send everything to a safe wallet right away. he did it. they drained the whole thing in one transaction. then the discord voice chat leaked. you can hear the whole group screaming their heads off. “oh my god, 243 million, bro we did it.” pure chaos and disbelief. these guys originally met playing minecraft on faction servers. started out scamming kids for in game items with chargebacks and worked their way up to sim swaps and bigger stuff until they hit the jackpot. after the money hit, they started living like true millionaires. lamborghinis, mansions in miami, two million in watches, half million dollar bar tabs, private jets, the whole lifestyle. but the trail was obvious. zachxbt got the clips, the fbi connected the dots, and within weeks the crew got raided. serious charges, even rico because they were part of a bigger network. most of the bitcoin got seized.

ChatGPT vs Claude revenue. Claude has 1.25x more revenue despite having ~97% fewer users than ChatGPT. 💀

El mundo se esta volviendo gris y aburrido.

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments. The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran. To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.

La presse se fait l'écho du témoignage de M. Benjamin Brière, ex otage en Iran, qui a rencontré des difficultés avec plusieurs services publics à son retour en France en 2023.

Pour changer 😤

J’ai voulu faire un site internet. On m’a recommandé quelqu’un. Devis à 16.000€. Ça m’a paru cher. J’ai gratté 🇦🇲 On est descendu à 4.500€. J’ai demandé à Claude. Il m’a fait installer Claude Code, Git et un autre truc donc j’ai plus le nom. En deux heures j’ai fait un site design avec les fonctionnalités que je voulais, Claude a rédigé tout le contenu en me faisant gagner un temps fou. Un nom de domaine et un hébergement. Ce matin encore je ne savais pas codé. Je ne sais toujours pas. Et pourtant je l’ai fait. Merci Claude.