Planeta Terra
Joined November 2023
- Tweets5.3K
- Following463
- Followers1.4K
- Likes5.4K
Pinned Tweet
Quem deu follow baseado na publicidade enganosa do @OutsiderPapini fiquem avisados que eu não faço conteúdo no twitter. Minha conta é uma conta mais de retweet de temas de hacks, scams, privacidade, anonimato e segurança. Com o intuído de informar/avisar a galera sobre o tema.
brunoshi retweeted
Gate Freezes Two Accounts Tied to Alleged Binance Attacker Deposits.
The exchange said it identified and froze two related accounts and will fully cooperate with law enforcement, after Lookonchain flagged $250,000 in deposits to Gate from a wallet it linked to the Binance theft.
brunoshi retweeted
ZachXBT Suspects European Institution Is Covering Up Crypto Breach, Says $30M Could Have Been Frozen
Blockchain investigator ZachXBT said he identified more than $27 million in additional suspicious withdrawals from centralized exchanges, bringing the total linked to a suspected crypto theft to over $133 million. Some withdrawals occurred after his initial disclosure. ZachXBT speculated that a major financial institution in Western Europe may have been compromised and was concealing the breach. He criticized the lack of timely disclosure, claiming it allowed more than $30 million to be laundered that EU authorities might otherwise have frozen. The victim's identity and actual losses remain unconfirmed.
brunoshi retweeted
THE BLOCK: ZachXBT says he suspects that a large Western European financial institution was exploited for more than $133 million from CEX accounts, and that the incident is currently being covered up.
He notes the lack of proper disclosure has allowed the laundering of over $30 million in stolen funds that EU authorities could have frozen.
brunoshi retweeted
Scammers are using Adobe Acrobat-themed pages to trick users into downloading a legitimate remote access tool configured to give attackers control of their PCs and access to their data.
Listen/Read: hackread.com/hackers-remote-…
#Cybersecurity #Phishing #ScreenConnect #Adobe
brunoshi retweeted
⚠️ Synology NAS devices are under ransomware attack.
Attackers are exploiting a flaw patched in December 2024 to target devices running outdated DSM versions.
Synology urges users to update immediately.
Details → thehackernews.com/2026/11/sy…
brunoshi retweeted
‼️ Google Dismantles 1.3 Million-Device XCPE Botnet, Bans Android TV Maker
Details: cybersecuritynews.com/google…
Google and industry partners have dismantled the XCPE botnet, which enrolled more than 1.3 million set-top boxes through preinstalled malware.
In a November 2 report, Google linked the operation with high confidence to Videostrong Technology, accusing the Android device maker of deliberately building and running the backdoor for profit.
Google banned the company, including future subsidiaries and affiliates, from producing certified Android devices or supplying software to certified vendors. The backdoor, named x.cpe or com.oemservice, was built into device firmware and ran with Android system privileges. Its three-stage design separated remote control from malware execution.
#CybersecurityNews
brunoshi retweeted
Following the unauthorized access to trade[XYZ]'s GitBook documentation earlier today, we have temporarily suspended access to Unit's GitBook page as a precaution.
We advise users not to click on any links within the documentation while our investigation remains ongoing.
We will provide updates as our investigation progresses.
brunoshi retweeted
Não basta operar cripto. É preciso antecipar os movimentos do mundo para surfar tendências, ainda mais agora com o elevado risco Brasil.
Entenda as forças geopolíticas, domine Bitcoin & Web3 e construa uma blindagem psicológica e financeira junto de quem vive o mercado 24/7. 🪐
Conheça o Ambiente Educacional da Outsiders
Insira o Cupom no link abaixo: 10OFF e aproveite.
lastlink.com/p/C7032E138?af=…
Suporte no whatsapp 👇
api.whatsapp.com/message/YQE…
brunoshi retweeted
Celulares baratos chegam ao Brasil com malware de DDoS embutido no firmware. A campanha Midnight Mimosa atinge aparelhos Android de baixo custo com chips MediaTek em mais de 150 países. O código roda com privilégios de sistema, instala dezenas de apps falsos e também gera fraude de cliques. cisoadvisor.com.br/brasil-ma…
brunoshi retweeted
NEW: @zachxbt SAYS AN EU ENTITY IS SUSPECTED OF LOSING $106M+ FROM MULTIPLE CENTRALIZED EXCHANGE ACCOUNTS ON NOV 1
THE ATTACKER WITHDREW THE FUNDS AS $USDC AND $USDT AND HAS BEEN SWAPPING TO $ETH, MOVING THEM THROUGH INSTANT EXCHANGES INTO $XMR AND BRIDGING ACROSS CHAIN
SOURCE: t.me/investigations/372
brunoshi retweeted
Comunicado oficial:
Identificamos e contivemos com rapidez um incidente de segurança em um de nossos sistemas nesta madrugada.
Reforçamos que:
• Não houve nenhum prejuízo aos clientes;
• Não houve vazamento de dados.
Como medida preventiva de proteção, depósitos e saques estão temporariamente suspensos. Nossas equipes estão mobilizadas investigando o caso, rastreando os ativos e coordenando as medidas junto às autoridades competentes.
Manteremos atualizações regulares por aqui.
brunoshi retweeted
⚠️ Sembrerebbe ci sia stato un hack dek wallet di @MercadoBitcoin per circa 40 milioni di dollari.
L'hack coinvolge almeno 10 chain (BTC, SOL, TRX, POL, ARB, AVAX, BSC, STELLAR).
Seguiranno aggiornamenti - per ora condizionale d'obbligo.
brunoshi retweeted
OneKey Founder: Some Older iPhones Have Unpatchable Chip Vulnerabilities, Posing Risks to Seed Phrase Storage
OneKey founder Yishi warned that factory-resetting an older iPhone, enabling airplane mode, and using it to store crypto wallet seed phrases offline may still be unsafe. He noted that iPhone 4S through iPhone X are affected by checkm8, while iPhone XS, XR, 11 series, and second-generation iPhone SE are affected by usbliter8, disclosed earlier this year. These BootROM-level vulnerabilities cannot be fixed through iOS updates. Attackers with physical access and specialized tools may exploit them via USB, even in airplane mode.
However, on models such as the XS and 11, these flaws alone do not provide direct access to seed phrases, as device passcodes and the Secure Enclave offer additional protection. Yishi advised affected users to generate entirely new seed phrases in a trusted environment, transfer their assets, use newer devices, keep software updated, and adopt stronger passwords.
brunoshi retweeted
UPDATE: Name.com told The Block that 15 customer domains were hijacked in the attack, more than the 12 previously identified, and that all have been restored. Vercel says 10 of the affected domains were tied to its platform.
THE BLOCK: Hackers who hijacked a dozen DeFi sites late Friday, including Pickle, Origami and Kintsu, targeted domains all registered with Name.com, registry records show. Ten were suspended Saturday.
The Block has traced about $138,000 in stolen funds so far.
brunoshi retweeted
FBI links 628 crypto wallet addresses to North Korea’s #TraderTraitor hackers after the $6.3 billion Binance hack, asking services to block transfers involving stolen funds.
Listen/Read: hackread.com/fbi-crypto-wall…
#CyberSecurity #Binance #Crypto #NorthKorea #Bitcoin
brunoshi retweeted
Several websites were compromised yesterday, and some of them remain compromised still.
We recommend to not use too many crypto related websites for the time being.
If you already interacted with one of the compromised websites, make sure to check for any unexpected approvals.
And check out the Revoke Sidekick extension in partnership with Fairside that simulates transactions before signing them, which can really make a difference for these kind of hacks.
⚠️How can you tell a DNS is Hijacked when you visit an official website?..⚠️
At least 12+ domains got hijacked last night, serving wallet drainer code on their official website.. All but 5 have now moved their DNS to Vercel/Cloudflare to mitigate and those 5 are still compromised, DO NOT VISIT!
The URL can be 100% correct, but the website you're visiting can still be malicious.
This compromise did not break anything from the teams flow, setup, compromise anything they did, it appears someone inside name(.)com (The registrar) change the nameservers to the domains. If you use them as a registrar I would consider moving away and at minimum setup cloudflare for hosting/filtering.
If you are a user, there really isn't a way to detect this unless you are checking WhoIs, DNS updates, ASN numbers, and many more which most don't. The only way to tell is that when you go to the website it will ask for your seed phrase/private key, or prompt you to sign an odd transaction. The transaction part is tough to spot which is why I recommend always using @RevokeCash extension to help spot this for you with the transaction simulator...
If you are a business and not using cloudflare, let's talk, this is basic proper security on domains outside of domain lock, etc. You have to be prepared ahead of time to prevent/mitigate this in an instance moment!
Stay Safe & Stay Vigilant
brunoshi retweeted
🚨Blockaid detected an ongoing exploit on @PremiaLabs on Arbitrum.
Created empty option pools, flash-loaned, and bought options so vault collateral locked into those pools, then withdrew it as liquidity.
~$400.5k drained from the vaults so far across ~2 txs. Attack still ongoing. 🧵
brunoshi retweeted
The biggest theft in crypto history: an attacker hijacked Binance’s signing service and drained $6.3B from its hot wallets.
Using advanced AI models and our industry-leading exploit detection engine, Blockaid detected it in under two minutes.
Read more: blockaid.io/blog/binance-55b…
brunoshi retweeted
#PeckShieldAlert @PremiaLabs has been exploited for $464.6K. The exploiter bridged the stolen funds from Arbitrum to Ethereum, then swapped them to BTC via #Chainflip and #NEARIntents.
brunoshi retweeted
#PeckShieldAlert The address labeled as #Binance Hacker 12 has already swapped 7.7T $PEPE (~$24M) for 14,049.9 ethereum:native. The address that received 167.14 $WBTC (~$12.8M) and 9.7M $USDe from #Binance Hacker 2 has swapped the WBTC for 5,700 ethereum:native. The ETH from both swaps has been consolidated into a new address: 0x79e70d139fC05AA75F75611fDF2680E9952B544A.
