Clickbait to Catastrophe: How a Fake Meta Email Leads to Password Plunder

A sophisticated phishing campaign targeting Meta Business accounts has been uncovered by the Cofense Phishing Defense Center. The attack begins with a fake Instagram alert claiming the user's ads are suspended due to policy violations. Victims are directed to a fraudulent page mimicking Meta's business help center, where they're prompted to interact with a fake chat support or follow step-by-step instructions. The ultimate goal is to trick users into adding the attacker's device as a secure login method via Two-Factor Authentication, effectively hijacking the account. The campaign employs convincing email templates, landing pages, and even includes live agent support to add credibility. Users are urged to verify communications and examine URLs carefully before taking action to protect their social media credentials.

Pulse ID: 67dd406e35e3344749124f94
Pulse Link: https://otx.alienvault.com/pulse/67dd406e35e3344749124f94
Pulse Author: AlienVault
Created: 2025-03-21 10:33:18

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Credit Card Skimmer and Backdoor on WordPress E-commerce Site

A sophisticated malware attack targeting WordPress WooCommerce sites was discovered, involving multiple components: a credit card skimmer, a hidden backdoor file manager, and a reconnaissance script. The attack focused on financial gain and long-term control. The skimmer, injected into the checkout page, collected payment and billing information, sending it to a malicious server. A PHP backdoor allowed remote system command execution, while a reconnaissance script gathered server information. The attack demonstrates the evolving complexity of e-commerce platform threats, emphasizing the need for strict security measures, regular scans, proper access controls, and timely updates to prevent such exploits.

Pulse ID: 67d52aad906732f7bad24dfa
Pulse Link: https://otx.alienvault.com/pulse/67d52aad906732f7bad24dfa
Pulse Author: AlienVault
Created: 2025-03-15 07:22:21

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Building a Ten-Hundred Key Computer Word-Giving Thing - From the styling of this article’s title, some might assume that the Hackaday edit... - https://hackaday.com/2025/03/14/building-a-ten-hundred-key-computer-word-giving-thing/ #peripheralshacks #dyesublimation #keyboard #keycaps #word #xkcd

Nice PDF, But Can It Run Linux? Yikes! - The days that PDFs were the granny-proof Swiss Army knives of document sharing are... - https://hackaday.com/2025/02/10/nice-pdf-but-can-it-run-linux-yikes/ #securityhacks #softwarehacks #linuxhacks #emscripten #javascript #security #tinyemu #asm.js #risc-v #linux #news #doom #word #pdf

Weil ich es immer wieder vergesse schreibe ich es hier für mich und Euch auf: Wenn Ihr den Bearbeitungsschutz eines #Word-Dokuments entfernen müsst und das dafür nötige Password nicht habt:
- Docx-Dateien sind nur eine Zip-Datei mit vielen Einzelfiles.
- Öffnet die Datei in einem ZIP-Programm (z.B. 7-zip)
- Dort die Datei \word\settings.xml bearbeiten
- Sucht folgendes Setting: w:enforcement=“1”
- Ändert die 1 zu einer 0.
- Speichert die Datei
- Fertig!

#word : a single component part of human speech or language

- French: mot

- German: das Wort

- Italian: parola

- Portuguese: palavra

- Spanish: palabra

------------

Join our new Discord Server for language learners @ https://wordofthehour.org/discord

meatball (programming):

a **meatball** is a data object that contains parmeters for various parts of a program. its name is a play on "mystery meat" and "spaghetti code".

if you have to ask "where is this value being set/used?" that's a meatball.

A few weeks ago a #supersorp #fanfic #author discovered that their works that are posted on #AO3 appeared on a site called #word-stream.com. This site is apparently run by someone called Cliff Weitzman and provides not just public domain books on it but also #fanfiction works (not just by this author) that have been scraped from ArchiveOfOurOwn as this guy obviously thinks that fanfiction is a copyright free material that can be monetized.

The books are turned into #AI generated audio books and for a not that small of a fee can be listened to via his app.

Here's a detailed post on Tumblr about what this fanfic author found out:
https://www.tumblr.com/ekingston/772702316017156096/hello-so-sorry-to-bother-but-have-you-had-any?source=share