RealVovochka

A small thank you to everyone using Claude: We’re doubling usage outside our peak hours for the next two weeks.

JUST IN: Trader accidentally swaps $50 million $USDT for $36,000 $AAVE on Ethereum.

Russian GRU cyber operatives are running a large-scale, targeted operations against Signal and WhatsApp users of government officials, military personnel and civil servants. The fake support message in the advisory tells victims, in capital letters: "DON'T TELL ANYONE THE CODE, NOT EVEN SIGNAL EMPLOYEES." That literal line is in the phishing message. AND IT WORKED. Russia didn't need to break Signal. It just needed officials who trusted a a random chat message more than their own security training. Dutch intelligence services confirmed Dutch government employees were among the victims. The campaign exploits no technical vulnerabilities in either app. Instead, it uses the apps' own features against their users. Two methods. 1. A fake "Signal Security Support Chatbot" contacts the target, warns of suspicious activity and a possible data leak, then asks for the SMS verification code and Signal PIN. Hand those over and the attacker takes full ownership of the account, moves it to a number they control, and reads everything going forward. The victim can re-register using their old number and will see their local chat history intact - so they assume nothing happened. The advisory notes, with some understatement, that "this assumption could be incorrect." 2. A malicious QR code, dressed as a group invitation, silently links the attacker's device to the victim's account. The victim keeps full access and notices nothing. The attacker just reads along. What makes this operationally elegant is the irreversibility. Signal has no central management by design. This is for reasons of user privacy. There is no way to remotely deactivate a stolen account. Once gone, it is gone. GRU operatives just understood this.

I'm going to one day show this, but their are two Serial rug artists in Crypto. They create a ton of contracts. Their contracts leave their signature marks, the word "beef" or "fed", found typically at the very beginning, in the very middle, or at the very end of their contract.

Hey guys, I was sleeping. Really sorry about that. If I’d been awake, I would of course have stopped these funds from going through. 1. Wagyu will never freeze funds. That’s just against everything I stand for. My goal is instead to stop these kinds of funds from ever entering, similar to NEAR Intents or Railgun. Compliance tools are in place to block transactions like these. These just happened to pass because there was no risk score on them for a while from multiple venues. The risk scores eventually kicked in, which is why the transactions stopped and only a small amount went through. Clearly the current protocols aren’t sufficient. I’ll be working to make sure this never happens again.