Author: HackWatchit

Do your PowerShell scripts keep getting caught? Tired of dealing with EDRs & Windows Defender every time you need to pop a box?  In this one-hour webcast, we introduce a somewhat new Red Team approach that we call BYOI (Bring Your Own Interpreter).  Turns out, by harnessing the powah of C# and the .NET framework you can embed entire interpreters inside of a C# binary. This allows you to dynamically access all of the .NET API from a scripting language of your choosing without going through Powershell in any way!  We also cover some basic .NET & C# concepts in order…

Malicious Go Modules designed to wipe Linux systems Pierluigi Paganini May 04, 2025 Researchers found 3 malicious Go modules with hidden code that can download payloads to wipe a Linux system’s main disk, making it unbootable. The malicious modules contain obfuscated code to fetch next-stage payloads that can wipe a Linux system’s primary disk and make it unbootable. “Socket’s Threat Research Team uncovered a stealthy and highly destructive supply-chain attack targeting developers using Go modules.” read the report published by Socket. “Attackers leveraged obfuscation to deliver a catastrophic disk-wiper payload.” Below are the names of the malware-laced modules: github[.]com/truthfulpharm/prototransform github[.]com/blankloggia/go-mcp…

, neural networks and Clustering algorithms seem worlds apart. Neural networks are typically used in supervised learning, where the goal is to label new data based on patterns learned from a labeled dataset. Clustering, by contrast, is usually an unsupervised task: we try to uncover relationships in data without access to ground truth labels. As it turns out, Deep Learning can be incredibly useful for clustering problems. Here’s the key idea: suppose we train a neural network using a loss function that reflects something we care about — say, how well we can classify or separate examples. If the network achieves low…

The organization behind one of the world’s largest blockchain networks confirmed that TRON’s X account was compromised on May 2, 2025, in a targeted social engineering attack. The breach lasted from 9:25 A.M. PST, when an unauthorized party published a post containing a suspicious contract address. The hacker then proceeded to send direct messages (DMs) to users and follow unknown accounts.According to TRON’s post-incident analysis, the attacker gained access by targeting a team member with a malicious social engineering scheme. Once inside, the perpetrator used the official account to spread a contract address, potentially luring followers into interacting with a…

Over the past two years, Scattered Spider has emerged as one of the most prolific and dangerous sets of hackers currently operating. The threat actors are not a well-defined group of hackers. Instead, they’re more a loose collective that uses social engineering—such as phishing and voice calls—to gain initial access into company networks. Scattered Spider members are often English-speaking, teenaged, and can be members of the heinous criminal group the Com. The hackers have been active since June 2022 and have targeted more than 100 companies—including the high-profile hacks on Caesar’s Entertainment and MGM Resorts in 2023.French authorities have condemned…

Source: AI-generated using ChatGPT There are two things that live rent-free in my head. The first is my winning strategy for Oregon Trail (for starters, always play as the farmer). The second is how completely and utterly broken the ransomware ecosystem is. I’ll save Oregon Trail strategy for beers. This post is about ransomware. The ransomware economy is a tangled mess of moral hazard, perverse incentives, and players with wildly conflicting motives. It is no wonder the only people consistently coming out ahead are the criminals. And while ransomware has been around for more than 20 years, we are still…

Take a good look at Bitcoin right now… these are the unlucky ones. These are the unfortunate souls who jumped on another overinflated balloon. But, does this Bitcoin crash completely undermine all blockchain technologies? Since Bitcoin is crashing and burning we figured it would be a good time to have a webcast on blockchain security issues and why blockchain still matters.   Download slides: https://www.activecountermeasures.com/presentations/ Is it all hype? Is it all just a slow-motion train wreck? Why, exactly, should a security practitioner care?  There are so many cool applications, and more than a few crazy, stupid applications.  With the crazy…

we must load a copy of the same data into Power Query. Power Query offers two ways to get the same data twice: Duplicate and Reference. Let’s look at the difference between these two features and when to use one over the other. Introduction I may need to load the same data twice into Power Query and subsequently into Power BI. This can happen when I must split the data columns or perform other transformations on the data, or when I need to extract data from a table in two different ways. Power Query offers us two features to accomplish…

The Irish Data Protection Commission (DPC) has fined TikTok €530 million (over $601 million) for illegally transferring the personal data of users in the European Economic Area (EEA) to China, violating the European Union’s GDPR data protection regulations. The administrative fines imposed by the Irish watchdog consist of a fine of €485 million for its infringement of Article 46(1) GDPR regarding the lawfulness of the data transfers to China and a fine of €45 million for its infringement of Article 13(1)(f) regarding the lack of transparency. TikTok was also ordered to bring its data processing into compliance within six months,…