Tuxxin

overwatch.earth rebuild adds feed pages, discussions, and passwordless comments overwatch.earth now opens on a website rather than the globe. All 34 live feeds have their own pages, every map carries a comments drawer, and commenting uses a pin code emailed to you. https://tuxxin.com/blog/overwatch-earth-rebuild-discussions-passwordless-comments #overwatchearth #livedata #opendata #webgl

Brevo delivered ClickFix malware to 51 of its own customers Kirk at ADAMnetworks found Brevo serving ClickFix malware from its own infrastructure to 51 customer sites. I took part in the investigation using whack.sh. https://tuxxin.com/blog/brevo-clickfix-customer-sites #security #threatintelligence #whacksh #clickfix

Invoice-named scripts drop a DLL-sideloading backdoor behind Pakistan Navy decoys Nine files named Invoice1.txt to Invoice9.txt in an open web directory are one-line Windows scripts that open a decoy PDF and install a backdoor inside a signed Microsoft program. The decoys include Pakistan Navy planning minutes for Exercise AMAN 2027 and quotations from a Navy supplier. The command server was live o… https://tuxxin.com/blog/fake-invoices-pakistan-navy-backdoor #threatresearch #malware #backdoor #dllsideloading

@nixCraft@mastodon.social it took far too long