PS
Trader Traitor: tracking North Korean infrastructure Michael Koczwara @MichalKoczwara 20h Just finished the full walkthrough of my TraderTraitor infrastructure research today. From one reported ROOFDECK C2 to 13 linked endpoints using certificates, TLS fingerprints and historical records. Full walkthrough. Hope you enjoy it, and happy hunting!
PS
Step by step of what to do after your data has been leaked. From the number one: Officer's notes Officer's Notes @officer_secret Nov 7 Your Data Was Leaked? Here’s Exactly What to Do 1. Immediate Damage Control Check whether your email was exposed: go to haveibeenpwned.com . Change the password on the affected account and any other accounts that used the same or similar password. Use a password manager
PS
Pass the word along Patrick McCorry 🐋 @stonecoldpat0 Nov 7 I’ve had a number of local Indians at Devcon approach me and thank me for running the online course ~~3-4 years ago as it was a means to help them start their crypto journey. It is really pleasant to gradually identify the people who took advantage of the material across the
PS
Check what your signers can approve Trail of Bits @trailofbits Nov 6 Attackers can drain wallets by abusing a signing service, even without stealing private keys. Our 4-step post-Binance hack guidance helps wallet teams test what their signing systems can authorize and what limits the damage if signing is compromised. blog.trailofbits.com/2026/11/06/aft…