People who are asking for context: I frequently upload pictures of cats and cat memes and refer to them as kitty cats. The malware IoC file names are kitty and cat.

I'M BEING FRAMED

Two kids shot up a mosque in California and live streamed the whole thing in a first person POV on Discord

Kids on Discord recorded the whole thing

If you're a programmer, and you're reading this, you're already dead

🚨BRAKING 🚨: ANTHROOPK CEO SAYS 90% OF CODE WILL BE WRITTEN BY AI IN 3 TO 6 MONTHS

BREAKING:

MICROSOFT ANNOUNCES YOU CAN SOON MOVE THE TASK BAR TO ANY SIDE OF THE SCREEN

THIS HAS NEVER BEEN DONE BEFORE

EVERYONE FREAK THE FUCK OUT

What staring at a computer monitor everyday for the past 20 years has done to me

You must follow the Yellow Brick Road a/k/a be one of the following:

- Think like someone incredibly ignorant about computers
- Be a high-profile target
- Be a company
- Be a crypto nerd

If you can successfully be one of these things, or larp as one, you will find the malware. Truthfully, I myself have a hard time finding malware in the wild. I am incapable of thinking like an internet doofus. I have tried many times.

I have noticed though that the easiest way to get free malware is looking for video game cheats. You can find tons upon tons of malware that targets Roblox nerds, CounterStrike nerds, and Call of Duty nerds.

There is this thing in the Roblox cheating community called an "Executor". Basically, it's a tool they utilize to perform process injection into the Roblox client. These "Executors" are NOTORIOUS for having impersonators which are actually malware and sometimes even the paid "Executors" betray their customer base. It is cool and badass if you like malware. It is not cool and not badass if you dislike malware.

Depending on what you're looking for though these fake Executors are almost always Information Stealing payloads, so you won't find much.

If you lookup aimbots for Call of Duty or Counter Strike you will almost always find malware on YouTube. They'll display a video of some dork spazzing out, blasting nerds through walls, and display the download link in the video description. To avoid detection the video description also has the "password" to the "aim bot". It's password protected to prevent automated scraping and automated detonation from anti-malware services.

There are other ways too, but this is the easiest and most low effort (in my opinion).

Okay, I got to go now. My wife says I have to go outside.

Another Windows zero day released by Nightmare Eclipse (sort of)

It turns out Microsoft just straight up didn't patch an old CVE from 2020 correctly.

https://github.com/Nightmare-Eclipse/MiniPlasma

I enjoy the "For You" recommendations on social media.

Everyday it is something truly unique. An omnipotent being named "The Algorithm" recommended:
- Educational video about Sharks
- Silly pictures of cats
- Interesting history facts
- Cool skateboarding compilations
- Funny short skits about aging

It was all educational, entertaining, light-hearted, and funny.

Then I kept scrolling and saw:
- Hatred toward Indians
- Hatred toward Black people
- Hatred toward Trans people
- Hatred toward women
- Some dude named Chud
- Violent street fights
- Deadly car accidents
- People overdosing on drugs
- Police corruption videos
- Police chase videos
- War footage (death from drones)

I said, wtf where are the silly cat videos "The Algorithm"? The Algorithm replied, "Hatred and disdain toward others is more likely to keep you engaged. You must witness the horrors of man."

I said "o ok"

Helping animals is cool and badass

Nah, for real

https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.identity.signins/remove-mgidentityauthenticationeventflowasongraphapretributecollectionexternaluserselfservicesignupattributeidentityuserflowattributebyref?view=graph-powershell-1.0

Microsoft: PowerShell is simple and easy to use.

Actual PowerShell command: Remove-MgIdentityAuthenticationEventFlowAsOnGraphAPretributeCollectionExternalUserSelfServiceSignUpAttributeIdentityUserFlowAttributeByRef

United States government relatively frustrated this morning. The Federal Bureau of Investigation has placed a $200,000 bounty for any information on Monica Witt which leads to her apprehension.

Monica Witt a/k/a Fatemah Zahra bamboozled the United States government in 2013. She was an Intelligence Officer who defected to Iran because, according to her, the United States is not cool and is not badass (she actually did a long tangent about war and atrocities, or something, I don't know).

Ms. Witt is believed to operate as part of Phosphorus Group a/k/a CharmingKitten, a state-sponsored Iranian military unit specialized in cyber espionage and misinformation campaigns.

Daniel Wierzbicki, special agent in charge of the FBI Washington Field Office’s Counterintelligence and Cyber Division wrote today "The FBI has not forgotten"

tl;dr

I need to make a confession. When I initially read "band for band" I thought he meant a musical band. Like, they were both playing the guitar or something to see who had the most cool and badass guitar solo.

I saw a write-up today from ZachXBT about a Threat Actor named Dritan.

In this write-up he showed Dritan flexing money, going "band for band" with people on Discord, purchasing luxury clothing, and many other things.

It is believed he may possess as much as $19,000,000 from fraud.

That is absolutely disgusting. It sickens me.

Do you have any idea how much pizza, Monster energy drinks, prescription medication, and Robux I could purchase with $19,000,000?

He needs to stop this hedonistic lifestyle and focus on what's important.

cybersecurity

Yippie

Two new Microsoft Windows 0days. The exploits have cool and badass mysterious names to be extra spoopy

- GreenPlasma: Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability
- YellowKey: Bitlocker Bypass Vulnerability

https://github.com/Nightmare-Eclipse

TanStack was hit by a supply chain attack.
MistralAI was hit by a supply chain attack.
The Mayor of Arcadia, California, was a Chinese spy.
Forza Horizon 6 leaked.
Canvas bamboozled.
Shai-Hulud open-sourced.
Nightmare-Eclipse teases two new Windows 0days.

It is Tuesday. What will happen on Wednesday? Find out on the next action packed episode of Dragon Ball Z