npm

i can’t stop thinking about this... last week, a friend of mine had $2.7 million drained from his phone. Tether managed to freeze the stolen funds at the hacker’s address. Most victims will never get that lucky. The tool is called DarkSword. If your iPhone is still running an older iOS 18 build, update it now. DarkSword has been observed targeting iOS 18.4 through 18.7, and researchers say it has been active since at least November 2025. The attack can begin with an ordinary HTML page sent through a website, document or message. The victim opens the link in Safari, and the exploit moves beyond the browser into the rest of the iPhone. Trust Wallet. MetaMask. Phantom. Coinbase Wallet. Exodus. Apple Notes. Wallet files, passwords and seed phrases stored on the phone all become targets. And this explains why every new day now feels worse than the one before it. Hackers have a market too. A version of this software is currently being advertised for $15,000 to $30,000. The buyer doesn’t need to discover an iOS vulnerability or spend years learning exploit development. They need money, a target and one link the target is willing to open. That changes who can become an attacker. It can be someone who already knows you use Trust Wallet. Someone who knows roughly how much you hold. Someone whose message you would open without thinking twice. Most recent wallet drains don’t begin with code appearing on the screen. They begin with trust. Google documented the full exploit chain. I left their technical breakdown in the first reply. Update your iPhone to the latest available iOS. Move the main balance off it. Remove seed phrases from Notes, photos and cloud storage. The next person trying to empty your wallet may already be in your contacts.

Portugal estará sempre em mim

If you are still trenching don’t even consider buying anything above $10k

Fake recruiters, fake interviews, malicious coding tasks. DPRK has been doing this for years. What exactly was “highly sophisticated” about that? You say you blocked 57 suspected DPRK-linked attempts. You clearly knew the threat very well, yet a developer still ran a malicious interview assignment on a work laptop 🙈 Your developers, security teams, and everyone with access to sensitive systems should know how DPRK operates, recognize these tactics, and build security around that threat. This has been publicly documented for years 🤦 1. Unit 42 — Hacking Employers and Seeking Employment unit42.paloaltonetworks.com/… 2. Unit 42 — DPRK Threat Actors Lure Tech Industry Job Seekers unit42.paloaltonetworks.com/… 3. Securonix — Analysis of DEV#POPPER securonix.com/blog/analysis-… 4. Securonix — DEV#POPPER Research Update securonix.com/blog/research-… 5. Datadog — Tenacious Pungsan securitylabs.datadoghq.com/a… 6. SentinelOne — macOS FlexibleFerret sentinelone.com/blog/macos-f… 7. SentinelOne — Contagious Interview: Plans and Operations sentinelone.com/labs/contagi… 8. ESET — DeceptiveDevelopment Targets Freelance Developers welivesecurity.com/en/eset-r… 9. ESET — From Primitive Crypto Theft to Sophisticated AI-Based Deception welivesecurity.com/en/eset-r… 10. Sekoia — From Contagious to ClickFake Interview sekoia.com/blog/clickfake-in… 11. Silent Push — Contagious Interview Front Companies silentpush.com/blog/contagio… 12. Socket — 35 New Malicious npm Packages socket.dev/blog/north-korean… 13. Socket — Contagious Interview Spreads Across Five Ecosystems socket.dev/blog/contagious-i… 14. Cisco Talos — Famous Chollima Deploying PylangGhost blog.talosintelligence.com/p… 15. Fireblocks — Disrupting a Recruiting Impersonation Scam fireblocks.com/blog/contagio… 16. Kudelski Security — How DPRK’s Contagious Interview Campaign Targets Developers kudelskisecurity.com/researc… 17. Microsoft — Malware Delivered Through Fake Developer Job Interviews microsoft.com/en-us/security… 18. Microsoft — Dissecting Sapphire Sleet’s macOS Intrusion microsoft.com/en-us/security… 19. FBI — North Korea Aggressively Targeting the Crypto Industry ic3.gov/PSA/2024/PSA240903 20. Joint Government Advisory — WaterPlum / Contagious Interview cyber.gov.au/advisory/north-…

maybe small regional banks -- big banks are definitely not in a worse position they are all interconnected and so even in the extremely unlikely case that you "hack" them, you're not getting that money out in size

⚡️ Binance reopened withdrawals after the $6.3B hack. Where did the money go? Binance: -$4.5B in 24h Next 10 exchanges combined: ~+$368M (OKX took most of it) ₿ Coinbase +984 $BTC, Kraken +1,422 $BTC Nearly 9 in 10 dollars leaving Binance didn’t land on a rival exchange.