International Cyber Digest
7.53K subscribers
1.35K photos
69 videos
2 files
255 links
Independent reporting on cybersecurity, tech, AI & digital policy. Got a tip? http://internationalcyberdigest.com/tips
Download Telegram
Blockstream has replied to the hackers who drained about 4,000 BTC from their Liquid Network, returned 3,400 of it and kept roughly 598.

The hackers asked for a 10% bounty, but Blockstream refused.

The company says taking funds without authorization and then withholding them is theft, not responsible disclosure.

It doesn't want to set a precedent where open-source developers pay a ransom over software they built for the Bitcoin community.

It says it will now work with law enforcement, exchanges and forensic specialists to trace the coins, and notes that the transactions, and the evidence in them, stay visible on the chain.
πŸ’©15🀣8πŸ‘2πŸ”₯1
Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we had dinner together, and I've known him and his story for some time.

His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with.

"If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri

He loved Microsoft.

I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him.

They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below.

According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again.

Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence.

So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him €55,000 plus a year's pay to drop the case.

All while Abdel was releasing zero-days.

Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000.

He says Microsoft refused to reveal any details about the security breach and went another direction.

If you are reading this, and you can offer him a LEGAL job, this is his e-mail: msnightmare@proton.me
😒40🀯9πŸ‘5❀4πŸ”₯1πŸ’©1
Hey Interpol, we might have just found the drug dealer you're looking for.

He fled, joined the Ukrainian forces, and lost a leg in the process. But hey, at least he's free.

Might want to call Zelenskyy about extradition. Unless he's fine with recruiting criminals.
πŸ€”24πŸ‘9πŸ₯΄6😭4🀣3πŸ‘2
‼️ BREAKING: The threat actors who targeted Revolut with information-demand emails are now posting sensitive customer data, including that of high-profile clients such as tennis player Shevchenko and RΓΆmer, CEO of Gamdom/Skinscom.

They want Revolut to pay up. They say they'll release more messages, data and insights into how the Revolut team operates.

They're accusing Revolut of handing over sensitive information to countries outside its jurisdiction.

They accuse the company of negligence around privacy and the exposure of sensitive information.
πŸ”₯31😱11😁6❀2😭1
‼️ Google Search is now hiding where its results lead. Links point to google[.]com/goto?, followed by an opaque string only Google can resolve.

You can no longer inspect a destination before clicking it, or copy the address out of the page.

Every click now travels through Google first.

We're not sure whether this will roll out everywhere and to every account. One account we tested didn't show the behaviour yet, so it may be a gradual rollout.
πŸ’©37😁2❀1😒1🀣1
❗️ The European Commission is proposing an age ladder rather than an outright ban, covering social media, online games, AI companion chatbots and video-sharing platforms.

All these platforms will be forced to verify users' ages.

Under 13: only accounts opened and controlled by a parent.

13 to 15: "introductory" accounts with screen-time limits, parental controls and restrictions on contact with strangers.

From 15: teenagers can sign up on their own.

The EU Kids Act is due Thursday, according to POLITICO, which has seen the preparatory documents.
πŸ’©18πŸ‘7🀬5
We're so back πŸ‡ΊπŸ‡Έ πŸ¦…
😭31🀣8🀬3
‼️ BREAKING: We're in contact with the Revolut hacker. According to them, they didn't only take Revolut data, they've also compromised multiple Italian law enforcement departments.

They say the operation targeting Revolut ran for six months, and that they used Italian law enforcement systems to send data requests to Revolut.

They claim to hold 147 GB taken from the Italian side, including internal docs, calendars and personal material, among it the chat logs of a federal officer arguing with his wife.

They've also launched a website today.

Threat actor IAmNotAVillain says most of the Revolut data comes from Switzerland and France, but claims Revolut also handed over data on residents of the following countries:

Cyprus, Portugal, Germany, Spain, Bulgaria, Czechia, Romania, Poland, Malta, Norway, Sweden, Italy, Greece, Netherlands, Latvia, Austria, Belgium, Estonia, Croatia, Ireland, Slovakia, Finland, Lithuania, Hungary, Denmark, Turkey, Monaco, Luxembourg, Bahamas, Slovenia, United Kingdom.

They say the data includes high-profile individuals, among them a player at Barcelona, Georges Mikautadze.
πŸ”₯8πŸ’―3❀2