Mastodon Digest
for the past
scorer
threshold
Posts

🚨 Malware developer advertises cross-platform RAT and crypter for $500
β €
A forum actor using the handle "Consecration" is advertising what they claim is a newly developed all-in-one command-and-control platform supporting Windows, Linux, and Android systems alongside a built-in crypter.
β €
Key details:

β€’ Windows, Linux, and Android support
β€’ Integrated RAT/C2 platform and crypter
β€’ $500 asking price
β€’ XMR preferred
β€’ Lifetime access advertised
β€’ Limited to 10 buyers
β€’ Self-hosted deployment available separately
β €
Claimed capabilities:

The Windows component is advertised with remote shell access, file transfers, process injection, credential harvesting, keylogging, screen and microphone capture, token manipulation, lateral movement, persistence, proxying, and multiple defense-evasion features.
β €
The Android component reportedly includes SMS, contacts, call logs, location, camera, microphone, clipboard and account collection, remote shell access, screen recording, remote control, persistence, and anti-analysis functionality.
β €
The Linux component is advertised with shell execution, file transfers, credential collection, keylogging, persistence, lateral movement, network discovery, proxying, and data exfiltration capabilities.
β €
The included crypter is claimed to support multiple encryption and obfuscation methods, anti-debugging, anti-sandbox and anti-VM checks, delayed execution, junk-code injection, rotating build keys, and other techniques intended to complicate analysis.
β €
The actor says demonstrations are available before purchase and that transactions can be completed through a verified forum middleman.
β €
This claim and the advertised capabilities have not been independently verified.
β €
πŸ’₯ No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

New Ransomware Group: Spirals πŸ‘‡

x.com/fbgwls245/status/2100956

Every government and big business who insists on "sovereign" cloud data where the data stays geographically in their country should look at this and understand that you're demanding a cloud with less reliability.

arstechnica.com/gadgets/2026/0

🚨 Google reveals undercover Mandiant analyst infiltrated TeamPCP during massive supply-chain hacking spree

Google says an undercover Mandiant analyst infiltrated TeamPCP's inner circle as the hacking group compromised open-source software and ultimately breached more than 1,000 companies.
β €
The analyst gained access to TeamPCP's core "CanisterWorm" chat in March, joining a group of roughly 12 members and watching the operation from the inside.
β €
The mole also gained access to a server containing credentials stolen from victims, including usernames, passwords, and access tokens.

Google used that visibility to alert cloud and technology providers, revoke compromised credentials, and send hundreds of notifications to affected organizations.
β €
The operation also exposed a TeamPCP member developing an AI-assisted zero-day capable of bypassing two-factor authentication in widely used login software.

Google obtained the exploit code, verified that it worked after minor modifications, and privately notified the developer so the vulnerability could be patched.
β €
TeamPCP's campaign compromised hundreds of open-source packages and affected organizations including GitHub, Mistral AI, Mercor, the European Commission, and employee devices at OpenAI.
β €
Google says operational security mistakes later helped investigators identify an alleged TeamPCP member, with information passed to the FBI.

Two Australians accused of being principal participants in TeamPCP were arrested last month.

Source: wired.com/story/an-undercover-

Interview with: @AustinLarsen_ (X)

If you use MoveIT Transfer I recommend upgrading to 2025.1.6 or 2026.0.4 ASAP.

They don’t appear to have issued any CVEs or advisories but I can see they’ve patched some serious security issues.

Boosts

RE: diaspodon.fr/@dada/11729045022

Fully repairable
Design to last
No DRM, No locks
Free to refill ink
Free paper format
No subscriptions
Open Source
Paper roll or sheet
100% private data

Congrats to the team for following through & refining this all! Also see more images & info on their own website: opentools.studio/

(Ps. Is this also going to be the only color printer without yellow tracking dots?)

#OpenPrinter #OpenHardware #CrowdFunding

I realized that, even though I don't use LLMs for work, the fact that they exist was making me feel inadequate whenever I felt I wasn't operating at LLM-like speeds. And because I'm generally not, this was making me miserable.
So I'm telling myself, and whoever else needs to hear it, to stop comparing yourself to the slop machines. Thinking calmly and thoroughly is worth something, even in an age where society at large seems to believe they can replace it with pushing a button.