A spammer says:

"Are you done in of difficult every food and still not seeing results? Lose 10 pounds in a week with this miracle value impoverishment dissolution [URL censored.] that’s revolting doctors everywhere. You one requirement the same lozenge a period to char bulky instantly and around the main part you’ve each dreamed of."

"Doctor! Look at this impoverishment dissolution!"

"OMG! This is so revolting. [barfs...]"

"Take this lozenge a period, and you'll char bulky instantly."

"Okay, but I was dreaming about playing the part of Frodo in Lord of the Rings."

"OMG! Me too! Twinsies!"

#spam #spammers #revolting #LordOfTheRings #twinsies

CVE-2025-24054, NTLM Exploit in the Wild

A critical vulnerability, CVE-2025-24054, related to NTLM hash disclosure via spoofing, has been actively exploited since March 19, 2025. The flaw allows attackers to leak NTLM hashes or user passwords using a maliciously crafted .library-ms file, potentially compromising systems. A campaign targeting government and private institutions in Poland and Romania used malspam to distribute Dropbox links containing archives exploiting this vulnerability. The exploit can be triggered with minimal user interaction, such as right-clicking or navigating to the folder containing the malicious file. This vulnerability appears to be a variant of the previously patched CVE-2024-43451, sharing several similarities.

Pulse ID: 680034fc84efc0751b3bc07d
Pulse Link: https://otx.alienvault.com/pulse/680034fc84efc0751b3bc07d
Pulse Author: AlienVault
Created: 2025-04-16 22:53:48

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Dropbox #Government #InfoSec #MalSpam #Nim #OTX #OpenThreatExchange #Password #Passwords #Poland #Spam #Vulnerability #Word #bot #AlienVault

Suggestions for cold callers:

Me: Hello!
Cold caller: How are you today?
Me: I have got rage induced by a large number of cold callers trying to scam me for some shit, even though this number is registered with the telephone preference service. How can I help you?

#Spam
#ColdCaller
#PhoneSpam

> Sending the order in attachment, please deliver to Ruda Śląska.
>
> Zamowienie.iso

Is #Windows so embarrassing these days that it runs malware from .iso files?

#spam

> W załączeniu przesyłam zamówienie, proszę o dostawę do Rudy Śląskiej
>
> Zamowienie.iso

Czyżby dziś #Windows był tak żenujący, że nawet malware z .iso odpala?

#spam

At the end of March we decided to switch to a cheaper electric&gas company. The old company handled the disconnection process starting April 9th, which will be fully completed by April 30th.
This is the complete list of spam calls I received until yesterday.
Luckily I know how to handle the situation, still it seems to me unreal and crazy.
I'll be updating the graph every now and then just to fully understand the madness.

#spam #spamcalls

Todays (17th April) Nicole Sightings

tennises80@burns.is

#FediWatch #FediverseChick #Nicole #Spam #FediAdmin #MastoAdmin

Excellent investigation by Zataz into Project Nova. The operation is a success. This operation, led by 19 countries, aims to undermine LabHost (shut down in 2024). A 38-year-old British man was arrested and convicted.

Current operations (April 2025) are attempting to target and track the platform's users.

#Zataz #LabHost #Hacking #Spam #Infosec #Cyber #Cybersecurity #Quebec

https://www.zataz.com/projet-nova-lempire-pirate-labhost-seffondre-au-quebec/