Orange,

I saw your email and I love it. This is great stuff. I'm probably not going to be on my computer for the rest of the day, but I'm super excited to share it tomorrow morning. I love you so much for this stuff.

Thanks,
- smelly

Loteria de Medellin (the Lottery of Medellin, Columbia) has allegedly been compromised by Crimson Collective

They claim over 1TB of data have been exfiltrated.

They've released samples of drivers licenses, applications, etc.

Insert Dragon Ball Z reference

Fixed this. Initially I wrote Medellin, Spain

For some reason I confused Medellin, Columbia for Madrid, Spain

I've got a very high IQ, it's (falling) off the charts

Spelled Colombia wrong

Fuck it, close enough. I'm going back to bed

My Xitter For You tab was curated fairly well. It was a nice combination of cat pictures, information security news, and a sprinkle of politics

Today my For You is Steve Jobs daughter, big breasted women, and Twitch streamers

Wtf is this shit? Give me my cats back

Yeah, I'm killing myself tonight

Tldr guy says telling someone how much RAM you have is a security issue. Fucking ridiculous.

Chat, we are so back.

"Orange" leaked the Islamic Revolutionary Guard Corps (IRGC) malware source code for "BellaCiao". BellaCiao has been discussed by various Cyber Threat Intelligence agencies.

This includes "Variant 1", "Variant 2", and documentation on how it works

"Episode 3" is fuckin' cookin' bro. I don't know Persian, but I know code and understand silly documentation pictures.

https://github.com/KittenBusters/CharmingKitten

I'm not a forensics expert. I couldn't forensic my way out of a forensics thing.

However, this cyber weapon thingy leaked from the Iranian government has a program debug file thingy and it contains a debug file path

What could it mean?

Myself personally, whenever I am performing a state-sponsored campaign to infiltrate a foreign adversary of the government in which I reside, I too name the directory structure after our primary target.

This makes it easier for me to remember who our Commander has instructed us to target. Furthermore, in the event of a compromise or whistleblower, analysts whom are employed by our foreign adversaries can easily identify our objectives and modus operandi

TIL "Bella Ciao" is an anti-Nazi and anti-fascist Italian folk song.

The Iranian government named their malware payload "Bella Ciao".

Reddit-bro goes on schizo rant about how anti-malware services are garbage. In the middle of schizo rant he writes that his 1337 hack is allocating memory in a target process and running calc.exe

WHY ISNT THE AV DETECTING CALC BRO

https://www.reddit.com/r/antivirus/comments/1o4nq5o/the_shocking_state_of_premium_antimalware/

WHY ISNT IT FLAGGING MEMORY ALLOCATION INVOCATIONS?! MEMORY ALLOCATION IS ILLEGAL AND FOR NERDS

I've got students messaging me asking if cybersecurity is still a "safe" field to go into because of the advancements of AI

Dawg, our career value has fucking EXPLODED. Are you fuckin' with me right now?

- AI vibe coded slop as far as the eye can see
- AI deep fakes as far as the eye can see
- AI written emails, scams, as far as the eye can see

On top of that, due to how accessible the internet is now, there is a "cyber attack" literally every god damn second. It's nonstop. The internet is still very much the wild, wild, west.

Like, bro, this shitty little malware website I run brings in 20,000+ malwares a day with a budget of $15, a slice of pizza, and cat pictures. Do you have any fucking clue how widespread cybercrime is?

Don't even fucking start me on crypto theft

I'll lose my mind writing this post, bro. It's literally nonstop, around the clock, weekends and holidays. It never ends. Cybersecurity is only getting bigger.

Xitter has announced an interesting method to combat misinformation campaigns.

Soon Xitter will display country of origin on the profile. While obviously this can thwarted with a VPN, existing accounts may end up exposing themselves as a bad actor.

Moments ago I was bombarded with questions.

I was informed I was made a channel administrator for an alleged Threat Actor operating under her moniker "Sevvy".

I wasn't sure of these claims, I was enjoying a wonderful convection oven baked pizza (it distributes the heat better, cooks the dough really good), so I hadn't had an opportunity to verify whether or not these rumors were true.

It is indeed true. I am an administrator in her channel.

Why? I don't know. But I am now.

This is a very surprising plot twist. This wasn't in the Dragon Ball manga so I don't understand what is going on or what will happen next.

I am now receiving questions on Twitter, Telegram, and Discord, my opinions on convection cooked pizzas.

This is (apparently) the really interesting news as pizza enthusiasts are eager to learn more about convection heat.

I have ZERO idea what the fuck is going on now

Sevvy has requested I share her channel invite.

I would like to inform all of you her channel does not discuss malware, or cyber security, in any capacity. It is primarily her documenting herself abusing alcohol and/or narcotics and flashing excessive wealth.

I still don't quite understand what's going on, but I guess it's going on, I guess.

I am very confused and will be taking a nap soon. Enjoy this week's episode of internet schizophrenia.

https://t.me/+631xqBxi4eE4NTk0

Happy Birthday to leahcmd!