GM fam! ❤️ Today, someone tried to hack SamCzSun with a crypto stealer, fortunately, attack wasn’t successful, but all it would've taken was three clicks.

The first step was to create an urgent and compelling hook. When placed under pressure, even trained security professionals might act instinctively instead of rationally. You must have good self-control and feel when someone is trying to make you rush or feel strong emotions (anger, desire to help, love, envy, and so on). Remember that time works for you and you can always wait 1-2 days for a similar request.

You should also understand that if you are in a vulnerable position (not sleeping, not resting, starving, sick) you must not work. And you must not do any activities that require urgency.

You can see the message on the screenshot. If he had clicked the link, then he was only in two clicks away from being pwned. Clicking the link automatically downloads malicious file to computer.

There were two files in the archive. If you have file extensions enabled, then you'll see the first as a URL. If you don't, then you'll see the second as a PDF.

Both of these are malicious, and opening either of them would give the attacker full access to your PC and thus tokens, socials, sensitive data.

The example used wasn't very advanced, but would have tricked a few users nevertheless. The more targeted, the harder to distinguish from legit requests.

This was very likely a Redline malware or a Raccoon Stealer.

Original Tweet

Read my OpSec roadmap to avoid such situations, never download files on your working machine. You should understand all 25 rules!

• How to store crypto securely - tips from CIA_Officer

• 2 Violent attack vectors in Crypto: a detailed review

• OpSec in Crypto: Thoughts

…and never forget to use dangerzone.rocks when working with PDF! Always use a separate, clean, airgapped in a maximum possible way machine for work.

Stay safe!

#blockchain #privacy #OpSec #security