Say what you will about LinkedIn and all its phony baloney, but it is occasionally useful for discovering friends of known threat actors. Plenty of cybercriminals have IRL LinkedIn profiles, and when you find them LI helpfully suggests a number of other accounts you might be interested in following that it thinks are somehow related to the profile you're looking at. And that's twice now this month that LI has revealed connections between threat actors that I didn't find on my own.
Mastodon Digest
Posts
Anthropic launched Claude Desktop for Linux (Ubuntu and Debian) in beta
Google is liable for its AI Overviews, German court rules https://thenextweb.com/news/google-ai-overviews-german-court-liable
💥TORLINK: A torrent finder that runs right from your terminal with zero setup and nothing to configure.
One search checks a small curated list of sources at once. Pick what you want, and it downloads directly to your computer.
🚨🇫🇷 PeacePhish phishing kit advertised on Dread
A Dread user is advertising PeacePhish, an alleged phishing framework designed to bypass 2FA by making victims interact with the real target site through a live browser session.
PeacePhish is being promoted as a phishing kit for account takeover and session interception.
Advertised tool claims include:
• Real browser session per victim
• 2FA bypass claim
• Victim monitoring dashboard
• Live victim connection view
• Periodic victim screenshots
• Cookie and keylogger decryption claims
• Anti-bot proxy filtering
• Geo-IP and browser fingerprint collection
• Custom rules per targeted site
Claim is unverified.
💥 Stop guessing what's redacted. Paid subscribers see everything: http://darkwebinformer.com/pricing
When the company has one DBA and he’s been carrying prod since 1998.
Boosts
Those quotation marks are doing a lot of heavy lifting.
Following recent news, we have cancelled Mullvad's sponsorship of EMF 2026.
If you'd like to contribute to make up for the lost income, you can still sponsor EMF through our ticket shop: