More from @officer_cia

CIA Officer

@officer_cia

Jan 21

https://twitter.com/cyberpunkf_ixer/status/1484612369934438407

Awesome tip for using canarytokens.org/generate honeypot traps as a defence mechanism & #SIEM 🤯

https://twitter.com/cyberpunkf_ixer/status/1484612369934438407

1/3

There are three fun techniques for those who are constantly under attack.

One of them is to set up similar honeypots, IP loggers like “grabify dot link” and put a script for notifications.

👇👇👇

@TenderlyApp

2/3

The second is to set up fake wallets, potential targets and name them tempting for the hacker. If you try to steal money from them (the hacker will probably notice them first), you can get a notification from @TenderlyApp or own script via SMS.

👇👇👇

Read 7 tweets

CIA Officer

@officer_cia

Dec 25, 2021

@telegram

Warning ❗️ An attack on thematic @telegram crypto chats ongoing now. The attackers use an account named "Smokes Night" to spread Echelon malware by dropping a file into the chat room.

TLDR: Disable auto-downloading in Telegram settings right now.

👇 See the thread below 👇

@telegram

@telegram 1/X

Here is a good article themed how to configure your TG, which don't have "out-of-the-box" privacy settings, correctly.

medium.com/immunefi/how-n…

2/X

Original report: cisomag.eccouncil.org/echelon-malwar…

Full report: safeguardcyber.com/hubfs/Threat%2…

Read 14 tweets

CIA Officer

@officer_cia

Nov 6, 2021

GN! Another very serious thread/manifest in which I would like to bring up an important problem. It is called cybersquatting. I will explain everything in details 👇

1/X So, let's begin. What exactly is cybersquatting? Cybersquatting is the bad-faith registration and use of a domain name that would be considered confusingly similar to an existing trademark, for example CADDNA.org or AppleProducts.com.

2/X Cybersquatters often conduct a variety of illegal and illicit practices: they can deliver malware, sell counterfeit goods, host phishing schemes, steal identities, and make money from deceptive advertising ruses.

Read 9 tweets

CIA Officer

@officer_cia

Nov 4, 2021

@_CPResearch_

According to @_CPResearch_, users of the Metamask and Phantom crypto wallets, as well as the Pancake platform, were victims of a crypto-fishing scam that stole more than $500,000.

In this thread I ll try to explain how did attackers do that in my own words 👇

1/X

When searching in google on crypto keywords such as “metamask” the spoofed links would appear at the top of search results. When clicked, the link would redirect to a “white” page and serve phishing content in the native language of the geographic region of the victim.

2/X

This attack method is called "cloaking". Cloaking refers to the practice of presenting different content or URLs to human users and search engines.

support.google.com/adspolicy/answ…

Read 11 tweets