Author: HackWatchit
They tried logging into secure.telemessage.com using a pair of these credentials and discovered that they had just hacked a user with an email address associated with US Customs and Border Protection, one of the agencies implementing Trump’s draconian immigration policy. CBP has since confirmed that it was a TeleMessage customer.After spending a few more minutes digging through the heap dump, the hacker also discovered plaintext chat logs. “I can read Coinbase internal chats, this is incredible,” the hacker said. (Coinbase did not respond to WIRED’s request for comment, but did tell 404 Media that “there is no evidence any sensitive…
Navigating the job market requires skill, determination, and a keen awareness of potential pitfalls, especially when it comes to online searches. The search for a new job can be exciting and hopeful, but it’s also a time when job seekers are vulnerable to scams. Unfortunately, fake job postings are a prevalent issue, designed to trick unsuspecting applicants out of their personal information or money. The landscape of job hunting has evolved, with online job boards and professional networking sites becoming primary resources. While these platforms offer incredible opportunities, they also provide avenues for scammers. According to a survey by Genius…
Kent Ickler// TLDR: We use a custom dictionary to crack Microsoft Office document encryption. Then we use a custom dictionary for pwnage in LinkedIn hash database. Background: I recently got a couple of questions about a better way to crack encrypted Excel files. The question came from BHIS’s extended community who is using commercial password-recovery tools with distributed CPU and GPU processing power. The problem is they were still getting ridiculously slow hashing speeds making brute force unfitting. In discussing our typical run-down of hashing on John the Ripper (JTR) and Hashcat, the user responded with “I used that 15…
Twelve more suspects were charged in a RICO conspiracy for their alleged involvement in the theft of over $230 million in cryptocurrency and laundering the funds using crypto exchanges and mixing services. Two other suspects linked to this conspiracy, 20-year-old Malone Lam (aka “Greavys,” “Anne Hathaway,” and “$$$”) and 21-year-old Jeandiel Serrano (aka “Box,” “VersaceGod,” and “@SkidStar”), were arrested and charged in September 2024. According to court documents, Lam, Serrano, and others involved in the scheme allegedly gained unauthorized access to victims’ cryptocurrency accounts and transferred funds into crypto wallets they controlled. In an August 18th attack, they stole over 4,100 Bitcoin…
Welcome to Slate Sundays, CryptoSlate’s new weekly feature showcasing in-depth interviews, expert analysis, and thought-provoking op-eds that go beyond the headlines to explore the ideas and voices shaping the future of crypto.The last time I interviewed Tezos co-founder Arthur Breitman was at the Paris Blockchain Week Summit in 2019. It coincided with the fire of Notre Dame, and I can still hear the gasps of a dumbstruck crowd gathered opposite the cathedral as the angry orange flames engulfed the spire of “Our Lady of Paris,” and the thick black smoke billowed into the evening sky.Despite the historic tragedy at the…
FBI has warned about a sophisticated vishing and smishing campaign using AI-generated voice memos to impersonate senior US officials and target their contacts. The Federal Bureau of Investigation (FBI) has issued a warning regarding a growing threat where malicious individuals are using artificial intelligence (AI) to mimic the voices of high-ranking United States officials. These AI-generated voice memos, combined with deceptive text messages, are being used in attempts to target current/former government officials, and individuals in their contact lists. According to the FBI’s announcement, since April 2025, these “malicious actors” have employed techniques known as “smishing” (using SMS or text…
Lohrmann on Cybersecurity What’s on the minds of top local government chief information security officers? In this interview, Michael Dent shares current security and technology priorities, career tips and more. May 18, 2025 • Dan Lohrmann Facebook/Fairfax County Government I have known Michael Dent, the Fairfax County, Va., chief information security officer, for more than a decade, and his knowledge, expertise, insights, perspectives and accomplishments never cease to impress me. Michael is a seasoned cybersecurity executive and military veteran with over 30 years of experience in public-sector information security. As the CISO for Fairfax County, Michael has been instrumental in developing…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 45 | Security Affairs newsletter Round 524 by Pierluigi Paganini – INTERNATIONAL EDITION | Experts found rogue devices, including hidden cellular radios, in Chinese-made power inverters used worldwide | US Government officials targeted with texts and AI-generated deepfake voice messages impersonating senior U.S. officials | Shields up US retailers. Scattered Spider threat actors can target them | U.S. CISA adds Google Chromium, DrayTek routers, and SAP NetWeaver flaws to its Known Exploited Vulnerabilities catalog | Pwn2Own Berlin 2025 Day Two: researcher earned 150K hacking VMware ESXi | New botnet HTTPBot targets gaming and tech industries…
Rick Wisser// Comparing Apples to Oranges (Bus Pirate vs Shikra) this a Hardware Hacking 101 webcast follow up blog post. I recently did a hardware hacking webcast on hacking a router with the Bus Pirate. The webcast can be found at https://www.blackhillsinfosec.com/webcast-hardware-hacking-101/. In the webcast I made a comment on how long it took to dump the firmware off the chip with the bus pirate (approximately 30 minutes). Well, here is a blog post with the same content but using the Shikra. If you are not familiar with the Bus Pirate then you need to check out the webcast along with the dangerous…