Threat researcher, malware analysis, RE, incident response, with some old school forensics and CTFing. Apologetic ginger. These are my personal opinions
Bawlmer, Maruhlan, US
Joined November 2008
- Tweets16.4K
- Following890
- Followers7.3K
- Likes3.4K
Brian Baskin retweeted
Socket uncovered malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget to steal recovery phrases and private keys. The fake Phantom wallet also bundled the operator’s backend for automatically draining funds.
socket.dev/blog/firefox-wall…
Brian Baskin retweeted
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
Brian Baskin retweeted
🚨 New investigation: Socket found malicious LiteLLM workflows running 11 days before the attack, targeting 20 secrets including GitHub, cloud, and AI credentials.
After our disclosure, LiteLLM linked a stolen token to approval of the malicious release.
socket.dev/blog/litellm-atta…
Brian Baskin retweeted
🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline.
Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.
Brian Baskin retweeted
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.
Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
Brian Baskin retweeted
Лучшее, что я видел за последнее время — чел пилит ASCII MMORPG, в которой вся графика состоит из букв и символов.
Да, буквально весь мир, персонажи, окружение и спецэффекты нарисованы разноцветным текстом.
Автор сейчас экспериментирует с магией, визуалом и боссами. Я прям залип на то, как из нескольких десятков символов получается такая красота.
Буквально сны при температуре 37,2.
Via: tiktok.com/@Ansenjeo
Brian Baskin retweeted
In 2004, a German demoscene group released a game called .kkrieger.
It was a full 3D first-person shooter with dynamic lighting, textures, sound effects, music, and monster AI.
The entire executable was 96 kilobytes. Instead of storing images and audio files, they wrote C++ and Assembly that generated the 3D meshes, textures, and sound waves mathematically in RAM when the game booted.
Today, a single website's "Accept Cookies" banner is 10x larger than that entire 3D game.
Brian Baskin retweeted
I pulled the Character bankruptcy docs. They show:
- They were spending $14 million/month on compute alone at a time their revenue was around ~$1 million/month
- Currently losing $9 million a month
- They admitted they enshittified & that it didnt work
404media.co/character-ais-ba…
No context but can breathe easy again
Some feel good tunes
youtube.com/watch?v=sEUbq9sK…
Received unsolicited job offer at address I rarely use, where they misspelled my name as Brain
Then a LinkedIn invite
30 seconds later, a phone call from a call center to my unlisted cell phone about the same role
I could not hang up fast enough
This method _does not work_
I'm excited that next week I'll be joining the awesome threat research team at @SocketSecurity, focusing on threats in supply chain attacks.
An awesome new challenge and opportunity to join a stellar team.
Brian Baskin retweeted
The topic of the day has been the strikes on Yandex data centers and whether they affect the Russian bot/troll army.
There have been some initial research done on this, and the most interesting finding comes from Reddit: after the strikes, many US-related subreddits lost a lot of traffic. Same happened in German and Irish subreddits.
As most of you know, Reddit is one of the most popular sources of information for LLMs, and I have zero doubt that Russians are actively trying to steer conversations across the platform to favor their narratives.
Full analysis and methodology here:
reddit.com/r/theydidthemath/…
Attending a cowboy wedding in Colorado and who knew my Flare-On RE fun would come in clutch to finish the outfit
Brian Baskin retweeted
🎃 🎃🎃 🎃 What could be spookier than Halloween?🎃 🎃🎃 🎃
How about volunteering with us or presenting in April? Or submitting a talk?
Our CFV and CFP open October 31!
Brian Baskin retweeted
It was an honour to speak with Pablo on the debut episode of the Polo Cyber podcast. We spoke about my early beginnings, career, reverse engineering, malware analysis and Invoke RE. Hope you enjoy it!
New Polo Cyber YouTube channel is up! First video with @InvokeReversing founder and former colleague of mine @JershMagersh
youtu.be/g9MIGhR318k
