‼️ BREAKING: The official HBO Max Reddit account was hijacked and ran malvertising with a ClickFix attack on Reddit for 48 hours, pushing macOS malware to users.
The ad led to a convincing HBO Max landing page where the download button started no download. Instead it produced a prompt telling visitors to copy a command and paste it into Terminal.
A Reddit user flagged the ad in r/cybersecurity, and admins paused it pending an investigation.
By then the account had run 108 ads, fewer than half of them HBO Max lures. Another 47 pitched AI coding tools at developers and 15 a macOS disk cleaner.
Hudson Rock and ADAMnetworks traced the pasted command to a delivery system they call PasteSwitch, which selects a payload based on the visitor.
The payloads include macOS stealers that take browser credentials, Apple Notes and saved passwords; counterfeit Ledger, Trezor and Exodus apps built to capture wallet recovery phrases; and a Windows stealer loaded straight into memory.
The ad led to a convincing HBO Max landing page where the download button started no download. Instead it produced a prompt telling visitors to copy a command and paste it into Terminal.
A Reddit user flagged the ad in r/cybersecurity, and admins paused it pending an investigation.
By then the account had run 108 ads, fewer than half of them HBO Max lures. Another 47 pitched AI coding tools at developers and 15 a macOS disk cleaner.
Hudson Rock and ADAMnetworks traced the pasted command to a delivery system they call PasteSwitch, which selects a payload based on the visitor.
The payloads include macOS stealers that take browser credentials, Apple Notes and saved passwords; counterfeit Ledger, Trezor and Exodus apps built to capture wallet recovery phrases; and a Windows stealer loaded straight into memory.
🤣23❤5
German police will do anything to protect a transgender ex-police officer who raped a 15-year-old girl in a gas station toilet and uploaded child sexual abuse material to Instagram.
They're even blurring the tattoos on today's photos.
Meanwhile, they are posing with human pups.
They're even blurring the tattoos on today's photos.
Meanwhile, they are posing with human pups.
🤬32💩12🤔3😁2👍1
Foreign intelligence agencies have issued a warning that Iranian state hackers are targeting dissidents, activists and journalists, tricking them into opening fake Telegram or KeePass apps or bogus MRI scan results while posing as someone the target already knows.
A convincing decoy screen appears while the file quietly installs spyware dubbed Chosen Brick.
The attackers can then take screenshots, switch on the microphone, steal email, and copy WhatsApp and Telegram data from the browser. Those screenshots can reveal a victim's contacts, location and daily routine.
They often try a work computer first. If that fails or looks too risky, they ask the target to open the file on a personal device, where corporate security can't catch it.
Some victims' personal details have already surfaced on pro-Iranian leak sites. Victims have been found in the UK, the US and the Netherlands, and the agencies say those affected have been notified.
https://www.ncsc.gov.uk/news/iranian-cyber-targeting-of-dissidents-activists-and-journalists
A convincing decoy screen appears while the file quietly installs spyware dubbed Chosen Brick.
The attackers can then take screenshots, switch on the microphone, steal email, and copy WhatsApp and Telegram data from the browser. Those screenshots can reveal a victim's contacts, location and daily routine.
They often try a work computer first. If that fails or looks too risky, they ask the target to open the file on a personal device, where corporate security can't catch it.
Some victims' personal details have already surfaced on pro-Iranian leak sites. Victims have been found in the UK, the US and the Netherlands, and the agencies say those affected have been notified.
https://www.ncsc.gov.uk/news/iranian-cyber-targeting-of-dissidents-activists-and-journalists
😢4
‼️ Meet transgender Maja Schmid from Rosenheim, who stood trial today for raping a 15-year-old girl, repeatedly raping a dog, and possessing and distributing child pornography.
They also have an OnlyFans with the bio "always horny and with no limits 💋🔥"
All while standing trial for sexual abuse.
Maja is tall and strong, and they were also part of GSG 9 (short for Grenzschutzgruppe 9, or Border Guard Group 9), the elite counter-terrorism and special operations tactical unit of the German Federal Police (Bundespolizei).
They also have an OnlyFans with the bio "always horny and with no limits 💋🔥"
All while standing trial for sexual abuse.
Maja is tall and strong, and they were also part of GSG 9 (short for Grenzschutzgruppe 9, or Border Guard Group 9), the elite counter-terrorism and special operations tactical unit of the German Federal Police (Bundespolizei).
1🤬30💩6🤔3😱2😭2❤1💯1
One guy in Sweden built a search engine that doesn't run on Google or Bing. It's been online since 2021, and the bills come to about $200 a month.
Viktor Löfgren says most "alternative" search engines are really powered by Google or Bing, or by authoritarian states like Russia and China.
His engine, Marginalia, has its own crawler and index, with no ads, no loans and no investors.
His argument: when nearly all search runs through a few US companies, censorship becomes easy, even by accident, and one country's cultural bias shapes what everyone finds.
He isn't trying to replace Google. He wants Marginalia to be the "minority report" that keeps the big engines honest.
So it ranks what they tend to bury: personal blogs, old university pages, text-heavy sites with nothing to sell.
Every result shows whether a page uses affiliate links or JavaScript, and you can filter those out. An "explore" mode just shows you random sites from the index.
It's keyword-based on purpose. Löfgren argues that the better a search engine gets at answering questions, the worse it gets at finding websites.
It's open source under the AGPL, so you can host your own copy.
https://marginalia-search.com
Viktor Löfgren says most "alternative" search engines are really powered by Google or Bing, or by authoritarian states like Russia and China.
His engine, Marginalia, has its own crawler and index, with no ads, no loans and no investors.
His argument: when nearly all search runs through a few US companies, censorship becomes easy, even by accident, and one country's cultural bias shapes what everyone finds.
He isn't trying to replace Google. He wants Marginalia to be the "minority report" that keeps the big engines honest.
So it ranks what they tend to bury: personal blogs, old university pages, text-heavy sites with nothing to sell.
Every result shows whether a page uses affiliate links or JavaScript, and you can filter those out. An "explore" mode just shows you random sites from the index.
It's keyword-based on purpose. Löfgren argues that the better a search engine gets at answering questions, the worse it gets at finding websites.
It's open source under the AGPL, so you can host your own copy.
https://marginalia-search.com
👏30❤9🔥7😁4💩1