The 5 horsemen of the apocalypse: Spyware, Ransomware, Botnet, Stealer, and Adware

Coincidentally... 5 horsemen of the apocalypse... we turn 5 in 9 days... 🤔🤔🤔🤔

how the hell is Duchy staff

Today we've discovered a new DoS technique

Trigger a G5 Geomagnetic Storm and introduce several Earth-directed Coronal Mass Ejections (CMEs) by creating a large, complex sunspot cluster that's roughly 17 times the diameter of Earth

This will cause computer problems somewhere

What CloudFlare configurations do we need to defend against a G5 Geomagnetic Storm that introduces several Earth-directed Coronal Mass Ejections (CMEs) created by a large, complex sunspot cluster that's roughly 17 times the diameter of Earth?

C programmers watching Python programmers work

(it ends up working flawlessly and its cross-platform)

You bought a domain name for a project you either didn't start or didn't finish.

Meanwhile on Minecraft nerds are rebuilding Bloodborne

Someone requested we post a picture of their cat. We said "Okie". This is Nugget. It's a kitty cat.

Someone requested we share a picture of their shoe (it's cat disguised as a shoe, they're very sneaky)

We always avoided discussing the name of IntelBroker's group because it was so wildly inflammatory. Twitter doesn't care though 💀

No, that's not a bunny. Stop being ignorant. That is an ultra rare Russian Forest Jumppity Cat

We're releasing a super top secret TLP:RED document. It is a secret wallpaper. It is password protected.

https://vx-underground.org/tmp

tl;dr 49,000,000 customer records stolen from DELL. Additional information and statistics in attached link.

May 9th DELL began sending notifications to customers stating their personal information was stolen in breach. Data stolen includes customer order data, warranty information, service tags, customer names, installation locations, customer phone number, and order number.

BleepingComputer spoke with the Threat Actor, operating under the moniker Menelik, who initially tried selling the stolen data. In summary, they became an authorized partner in 24hrs - 48hrs using (using presumably bogus information) and began brute forcing the DELL partner API with 7-digit service tags looking for valid data.

They reportedly were sending 5,000 API requests a minute for 3 weeks. DELL took no action stopping the API brute forcing.

Read the full story and get more information here: https://www.bleepingcomputer.com/news/security/dell-api-abused-to-steal-49-million-customer-records-in-data-breach/

When we initially heard the news about this breach it seemed insignificant because it was removed from Breached. Shout out to Lawrence Abrams and Bleeping Computer for doing their due diligence and researching this compromise more.

One thing we have learned over the years is nerds hate ads. Nerds will fight you to death over ads.

We say this because it's been announced EA games will soon begin putting ads inside of their video games.

More information: https://www.tomshardware.com/video-games/ea-is-looking-at-adding-in-game-ads-in-aaa-games-well-be-very-thoughtful-as-we-move-into-that-says-ceo

We've recently had an influx of people asking if @LockbitRewards on Telegram is the Federal Bureau of Investigation. Yes, it is actually the FBI. If you Google "LockbitRewards" you'll find it listed by the United States Department of Justice and United States Department of State.

If you decide to message them we advise you do not self-snitch. It is poor practice to openly admit crimes directly to the FBI.

(someone thought it was a gag account and was actually self-snitching)