Just released version 1.16.8 of The Pdfalyzer with a bunch of new and updated #YARA rules to scan #PDF files for malicious content. Links in the quoted toot below.

https://universeodon.com/@cryptadamist/114768170683991686

an american defense contractor that "develops artificial intelligence-powered equipment and technologies" (whatever that means) managed to accidentally hire a north korean spy or two.

https://therecord.media/doj-raids-laptop-farms-crackdown

(i have read elsewhere that this defense contractor uses #cryptocurrency in its day to day operations though so far i've been unable to confirm that)

a russian hosting service that takes payment in crypto, Aeza Group, was just hit with #OFAC sanctions.

they've sent funds to a bunch of the shadiest crypto exchanges - #Cryptomus, #MEXC, #Binance, and (of course) #HTX, the crypto exchange run by the business partner of the president of the united states.

also looks like they took payment in #Tether, the #stablecoin whose money is managed by america's secretary of commerce howard lutnick.

* OFAC press release: https://ofac.treasury.gov/recent-actions/20250701
* Wallet: https://intel.arkm.com/explorer/address/TU4tDFRvcKhAZ1jdihojmBWZqvJhQCnJ4F

TRM Labs released some analysis of the #Nobitex source code that was leaked by an Israeli team that hacked the company (Nobitex is the largest #cryptocurrency exchange in #Iran and probably the largest crypto exchange anywhere to take such an extreme approach to hiding its own tracks (and its users' tracks).

of course they also hardcoded a bunch of auth keys into the source code... so maybe they weren't *that* privacy focused. or maybe they decided to do some "outsourcing" of the dev team (lol).

* TRM: https://www.trmlabs.com/resources/blog/inside-the-nobitex-breach-what-the-leaked-source-code-reveals-about-irans-crypto-infrastructure
* I wrote a fair bit about Nobitex back in October: https://cryptadamus.substack.com/p/trumps-transition-team-is-tethered

Just published version 1.16.6 of The Pdfalyzer, the surprisingly popular tool for analyzing (possibly malicious) PDFs I created after my own unpleasant encounter with such a creature. Includes a (kind of janky) #YARA rule for #GIFTEDCROOK infostealer PDFs.

* Github: https://github.com/michelcrypt4d4mus/pdfalyzer
* Pypi: https://pypi.org/project/pdfalyzer/
* Homebrew: https://formulae.brew.sh/formula/pdfalyzer

Here are a couple of links I recommend visiting before inauguration day

https://www.eff.org/deeplinks/2024/12/top-ten-eff-digital-security-resources-people-concerned-about-incoming-trump

https://digitaldefensefund.org/

Hello hive mind! I am looking for some good examples and write ups on how to complete a threat landscape assessment. Any good recommendations out there?

The single most important contributing factor to the impending collapse of civilization is the centralization of data and data processing. We have single points of failure in AWS, Azure, and Google Cloud. They're becoming more critical to daily life, and therefore more dangerous.
#ThreatAssessment

Lauren Boebert says the Pentagon sees her as a "security threat"

https://www.newsweek.com/lauren-boebert-pentagon-sees-her-security-threat-1805800

@Forensiclinguist @SUEuropean @BlatentLie @MeadHallBardPhantom

Have you performed a #ThreatAssessment of recent posts?