helvede.net is one of the many independent Mastodon servers you can use to participate in the fediverse.
Velkommen til Helvede, fediversets hotteste instance! Vi er en queerfeministisk server, der shitposter i den 9. cirkel. Welcome to Hell, We’re a DK-based queerfeminist server. Read our server rules!

Server stats:

169
active users

#scam

15 posts14 participants0 posts today

Malicious actors have taken notice of news about the US Social Security System. We've seen multiple spam campaigns that attempt to phish users or lure them to download malware.

Emails with subjects like "Social Security Administrator.", "Social Security Statement", and "ensure the accuracy of your earnings record" contain malicious links and attachments.

One example contained a disguised URL that redirected to user2ilogon[.]es in order to download the trojan file named SsaViewer1.7.exe.

Actors using social security lures are connected to malicious campaigns targeting major brands through their DNS records.

Block these:

user2ilogon[.]es
viewer-ssa-gov[.]es
wellsffrago[.]com
nf-prime[.]com
deilvery-us[.]com
wllesfrarqo-home[.]com
nahud[.]com.

#dns #lookalikes #lookalikeDomain #threatintel #cybercrime #threatintelligence #cybersecurity #infoblox #infobloxthreatintel #infosec #pdns #malware #scam #ssa

I saw the news that ATProto relay is now very cheap to run, and went to check it. Turns out "cheap" means 10 GB RAM, 500 GB SSD, 50mbps bandwidth. This is more than minimum Ethereum node requirements, and I am not sure how it could possibly be worse than that.

Needless to say, relay is only one component in their laughably inefficient system, which is still not decentralized in any meaningful way.

Bluesky Social · bryan newbold (@bnewbold.net)there will be an updated post soon. new relay uses around 2x vCPU, 10 GB RAM, 500 GB SSD, 50mbps bandwidth, IIRC. disk scales with event rate times replay window. 500 GB doesn't grow over time, only with event rate. that is for 72hr window, could slash a lot
Replied in thread

Last week, while reviewing detected lookalike domains, one in particular stood out: cdsi--simi[.]com. A quick search pointed him to a legitimate U.S. military contractor, CDSI, which specializes in electronic warfare and telemetry systems. It's legitimate domain cdsi-simi[.]com features a single hyphen, whereas the lookalike domain uses two hyphens.

Passive DNS revealed a goldmine: a cloud system in Las Vegas hosting Russian domains and other impersonations of major companies.

Here are a few samples of the domains:

- reag-br[.]com Lookalike for Reag Capital Holdings, Brazil.
- creo--ia[.]com Lookalike for an industrial fabrication firm in WA State.
- admiralsmetal[.]com Lookalike for US based metals provider.
- ustructuressinc[.]com Lookalike Colorado based Heavy Civil Contractor.
- elisontechnologies[.]com Typosquat for Ellison Technologies machine fabrication.

#dns #lookalikes #lookalikeDomain #threatintel #cybercrime #threatintelligence #cybersecurity #infoblox #infobloxthreatintel #infosec #pdns #phishing #malware #scam #dod

Elevated number of scam calls with fraudulent caller ID from my bank today. Won't leave voicemail. Won't talk to the automatic screener.

If they have anything interesting to say, they'll send me a letter.

Never accept calls or emails from business or govt. you deal with. Call them yourself, at the number found on their website or paper documents.

The unpaid toll text scammers need to be more diligent about their craft. I just got a text from the Wisconsin Department of Transportation informing me that I have unpaid tolls that I need to address ASAP. Wisconsin doesn't have toll roads.

Replied in thread

@fj I still think @signalapp has fundamental flaws like demanding #PII (#PhoneNumbers can't be obtained anonymously around the globe and are trivial to track down to devices and thus users), being subject to #CloudAct as an unnecessary & 100% avoidable risk as well as #Shitcoin-#Scam shilling (#MobileCoin) and it's #proprietary, #SingleVendor & #SingleProvider nature that makes it inferior to real #E2EE with #SelfCustody like #PGP/MIME & #XMPP+#OMEMO!

Yesterday I made a test, warned against this account with a hashtag of the name and a certain bird, and promptly got the #scam again. It's the sign that this paragon of a #troll factory or a narcissistic bot tinkerer hopping instances is not reacting randomly. Don't just block it, it's important to #report it so that it finally comes to an end. Don't click the links. If it's #scraping, a joke, or an attack on the Fediverse: a #fediblock would be fine! The phrase pattern could be filtered.