21–30 of 40 posts
It's just a bunch of pyromaniacs repeatedly burning themselves an each other and saying, "huh, that's weird."
Instead, a user who hasn't been active on Twitter for some time can do something totally benign, not even including messaging or posting, and get flagged as suspicious.
Meanwhile, an account handle changes, and the old one is reclaimed by someone else. And then very suspicious messages get sent. This should be reasonably detectable with less false negatives than what they subject the rest of us to already.
What's scary is if you google Vortax, it comes up like a totally legit videochat app.
Was able to find one article calling it out, https://davidgerard.co.uk/blockchain/2024/04/03/vortax-a-fak... Genius approach on their part tho. The landing page looks legit, the site even has blog posts.
AH == a16z it seems.
Earlier quoted context omitted.
I tried that. Too long. Not essential anyway, IMO, the attack is much more interesting than the victim's employer's name.
The only reason I clicked the link was to know what AH meant. Phishing for crypto assets is nothing new, I wouldn’t have clicked it for that.
Twitter followers were migrated, but anyone "following" using something like a crontab that retrieves a link based on the old Twitter name might be fooled.
Even that is apparently not to fringe to work for phishing.
Why installing an app allows to "drain wallets"? Why does a video chat app, which is installed from untrusted source, have an access to a wallet private key? Why OS allows this?
Anything less, and the user will find a way to accidentally give admin permissions to random apps.
NB: I don't believe that it's the OS's job to protect the user from themselves. Shielding people from consequences of their own actions results in people making worse mistakes later on.
Earlier quoted context omitted.
Was able to find one article calling it out, https://davidgerard.co.uk/blockchain/2024/04/03/vortax-a-fak... Genius approach on their part tho. The landing page looks legit, the site even has blog posts.
nowadays this is so much easier to generate.
Earlier quoted context omitted.
The only reason I clicked the link was to know what AH meant. Phishing for crypto assets is nothing new, I wouldn’t have clicked it for that.
If I understand the attack correctly: Twitter followers were migrated, but anyone "following" using something like a crontab that retrieves a link based on the old Twitter name might be fooled. Even that is apparently not to fringe to work for phishing.