veganism.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Veganism Social is a welcoming space on the internet for vegans to connect and engage with the broader decentralized social media community.

Administered by:

Server stats:

260
active users

#tips

25 posts22 participants2 posts today

How does a cyber threat group evolve from imitation to innovation? 🧑‍💻📦

An espionage-focused hacking group with links to Pakistan, identified as SideCopy—a sub-group within APT36 (Transparent Tribe)—has expanded its operations in India with a more refined toolkit and a broader victim profile. According to SEQRITE, their recent campaigns have moved beyond traditional targets like defense or maritime sectors to now include Indian ministries responsible for railways, oil and gas, and external affairs.

This shift is not just in targets but also tactics. The group has stopped relying on HTA files and now uses Microsoft Installer (MSI) packages for initial malware delivery. This change likely reflects an attempt to bypass growing detection rates associated with older techniques. These MSI files are often disguised as legitimate documents—like holiday schedules or security guidelines—and delivered via phishing emails.

Technically, the group relies on a mix of open-source remote access trojans (RATs) like Spark RAT and Xeno RAT, which have been modified to serve specific campaign needs. Spark RAT is cross-platform, while Xeno RAT has been customized using basic obfuscation methods. A key highlight is the emergence of CurlBack RAT, a previously undocumented Windows-based tool with advanced capabilities: system reconnaissance, command execution, file downloads, privilege escalation, and user enumeration.

SideCopy makes use of multiple post-exploitation methods including DLL side-loading, reflective payload loading, and AES-encrypted PowerShell scripts. They're also drawing from other known tools—borrowing features such as browser data theft from AsyncRAT, and using Cheex to extract images and documents.

Overall, the group’s progression reflects a maturing operation that integrates reused code, custom malware, and targeted social engineering to conduct surveillance and data theft at scale.

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

🛵Snel je scooterrijbewijs halen? Let op waar je boekt!

Op sommige websites kun je een examenpakket kopen met slagingsgarantie. De verkoper boekt dan voor jou praktijklessen en het examen in. Helaas is dit niet altijd betrouwbaar.🙁
Soms moet je erg lang wachten op het examen of is de locatie ver weg. Wil je dan toch sneller of dichterbij? Dan moet je ineens bijbetalen. Of je moet ineens bijbetalen voor het examen. 😱

Trap hier niet in. Check de website en reviews goed!

Tip 85 of #TuesdayCodingTips - Incomplete types and name demangling

While writing type-safe APIs, a "tag" type is often useful. It is nothing more than a forward declaration of a type that will never be fully defined, just for the sake of creating a template with a unique type.

Even without reflection, type-driven APIs can provide an opportunity to auto-generate (de)serialization code using typeid::name() utility. With two caveats:

You can't get the type info of an incomplete type
Unlike MSVC, both GCC and Clang will output mangled names
Luckily, both have a solution. While you can't get type info of an incomplete type, getting info of a pointer to an incomplete type is valid. You can trim the trailing star from the name. As for demangling, you can use the related ABI function (internally used by the c++filt tool).

Just remember to free your buffers, as said ABI function is written in a C-compatible way.

New Open-Source Tool Spotlight 🚨🚨🚨

DefectDojo consolidates DevSecOps workflows with ASPM and vulnerability management into one tool. It supports deduplication, end-to-end testing, and analysis—all Docker-deployable. Highly maintained with 4k stars on GitHub. #AppSec #DevSecOps

🔗 Project link on #GitHub 👉 github.com/DefectDojo/django-D

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

If 1MoviesHD is not working for you, it’s time to explore new options. Here are 10 great alternatives that let you stream movies and TV shows with no issues or annoying ads. Say goodbye to interruptions!

turisvpn.com/blog/1movieshd-no

1movieshd not working
TurisVPN · What Happened to 1MoviesHD? 10 Best Alternatives to 1MoviesHDIs 1MoviesHD safe? Sudden shutdowns or safety issues might leave you at risk. Top 10 best 1MoviesHD alternatives you can try!

Health & fitness, finance & investment, digital marketing, Personality development, Technology & AI are some profitable blog niches as of 2025.

You can also consider web design & development, home decoration, sales, travel & food, education, parenting, and gaming niches for creating a successful blog.

Which is your pick among them? Or do you have other choices?

Replied in thread

@jwildeboer what do you mean with “manually”?

What worked well for me to get multiple years of photos from my iPhone was connect a cable to a computer and copy them over usb (I used rsync).

I found that setting the Nextcloud app to ‘delete after syncing’ in combination with the ‘sync over WiFi only’ option works good for me: it keeps my phone “clean” and it syncs all photos.

#nextcloud #tips

Oh and I suspect that the reason the “sync stops after a few 1000 photos” behavior of the nextcloud app cannot be blamed on nextcloud but is instead to be blamed on Apple and the restrictions on what (third party) apps are allowed to do.

🚨 La seguridad comunitaria empieza en la conciencia 👀 ¿Estás listo para escuchar al triste bandido?

🔜 Una experiencia que cambiará tu forma de ver la seguridad. 🌍 Unidos, podemos aprender y protegernos mejor.

📅 Próximamente en La Guajira UX 📲 No te lo pierdas.

👉 #escuchaaltristebandido #aprenderparaproteger #LaGuajiraUX
#colombia #seguridad #comunidad #paz #union #podcast #love #laguajira #car #summer #domingo #feliz #sale #GRATIS #family #day #tips #campaign