Web3 Native Threat Intelligence.

The Ether
Joined December 2022
BLOCKMAGE retweeted
1/ I've been doing some research into how Unity Packages (similar to Node or Pip packages) could be weaponized for malware delivery Let me tell you, it doesn't exactly look good... 🧵
4
3
5
19
4,297
Links: CVE-2025-31201: Apple CVE-2025-31200: Apple and Google Threat Analysis Group macOS Sequoia 15.4.1: support.apple.com/en-us/1224… iOS 18.4.1 and iPadOS 18.4.1: support.apple.com/en-us/1222… visionOS 2.4.1: support.apple.com/en-us/1224…
1
2
3
698
No excuses. These are live use, not theoretical CVEs. Apple doesn’t push same-day cross-platform updates and delete vulnerable code unless the stakes are real. Stay sharp. Patch everything. Watch your traffic. 🧙‍♂️
1
1
3
355
Two #CVE's, patched across every Apple platform, both marked as actively exploited in the wild: #Apple just released: - macOS 15.4.1, - iOS 18.4.1 - iPadOS 18.4.1 - tvOS 18.4.1 - visionOS 2.4.1 — and you should stop what you're doing and update now.
1
1
4
608
July 2023 #TornadoCash exit worth 1,400 ETH ($2.6M) Exit via 100 ETH Contract, swaps for USDC, heads out over the Synapse bridge, to Polygon 0xc09d3c2 and get gambled away at @Stake. I see this fairly often when analysing TC. Tool: @MetaSleuth
4
5
21
6,895
BLOCKMAGE retweeted
Sadly received two messages about this from victims today. Seems another person lost funds in just past few min.
18
5
72
20,369
BLOCKMAGE retweeted
Community Alert: There is currently a fake @Ledger Live app on the official @Microsoft App Store which was resulted in 16.8+ BTC ($588K) stolen Scammer address bc1qg05gw43elzqxqnll8vs8x47ukkhudwyncxy64q
338
1,512
269
3,870
1,089,664
BLOCKMAGE retweeted
1/ An investigation into the Canadian scammer known as Yahya for their involvement in 17+ SIM swaps which resulted in more than $4.5M stolen.
288
810
131
3,755
825,282
BLOCKMAGE retweeted
Replying to @PeckShieldAlert
This is another MakerDAO deposit. Now, I dont understand the exact mechanics of this, but after a bit of digging, funds seem to get withdrawn from Maker as USDC and deposited into Coinbase xitter.cf/0xFantasy/status/16977…
Replying to @MistTrack_io
seems that it was a deposit into maker. call trace and debank show it properly, but etherscan doesnt for some reason docs.makerdao.com/smart-cont…
3
2
2
6
2,270
BLOCKMAGE retweeted
It's release time 🎃 - Responses can now be intercepted and modified - Delete requests from HTTP History - [Pro] Import/export your projects using our new "backups" page - [Pro] Add shell commands to your convert workflows with the new "Shell" node github.com/caido/caido/relea…
1
10
1
75
11,517
GM GMers! Tagging people who do great work in this space but I feel are not shown enough love! Go follow ⬇️ @CryptoaaService @WoAS_Necksus @0xFantasy @0xSaiyanElite @1c4m3by @Plumferno @BlockMageSec @boringsecurity @brookejlacey @ManicalEngineer Who did I miss? Tag them!
6
4
1
17
2,005
BLOCKMAGE retweeted
@1c4m3by saved me the other day 🤝 appreciate your work ♥️
1
2
5
1,340
Introducing the Pocket Guardians They've already saved *hundreds* of you from dangerous websites Here's a quick intro ⬇️
24
51
8
176
16,937
3/ - @1c4m3by is a security researcher who's already blocked hundreds of scams - @OxSaiyanGod is a security researcher from @BlockMageSec - @plumferno works at @opensea's trust & safety team and founded @Server_Forge
5
3
2
33
4,429
BLOCKMAGE retweeted
dprk once again rekting you via the platforms you use: github, slack, tg, npm. not checking email won't protect you anymore. 😭 admin keys and build/deploy systems gunna end up pwnd by this campaign. gl & rip.🪦 github.blog/2023-07-18-secur…
12
57
13
182
51,757
BLOCKMAGE retweeted
Announcing The Arkham Airdrop: a distribution of rewards to our early users! Users can now convert their points exclusively on the Arkham Invite Dashboard. Beware of scammers: Only trust info from @arkhamintel verified on Twitter, only claim via Arkham, and double check URLs.
536
847
372
2,695
2,023,910
Yesterday, we received reports of people seeing unknown approval transactions in their transaction history. It turns out that this is a new scam where scammers use so-called gas tokens to steal money when victims revoke these "fake approvals".
171
1,895
451
3,553
1,486,294
Ironically this was not created for this occasion, just something that was coincidentally lying around.
1
1
1,068
BLOCKMAGE retweeted
The Intel Exchange will be live on Tuesday, July 18 We’re very excited to see the kinds of information shared on our platform & where our community takes this. As always, we’re grateful for all of your support. Read more here: arkhamintelligence.com/annou…
33
26
5
161
60,369
BLOCKMAGE retweeted
Intel on the exchange isn’t limited to entity labels. Bounties can be posted for any on-chain activity. e.g. - Victims of an exploit may pool resources to acquire Intel on the exploiter - A trading firm may wish to buyout intel on their own wallet before a competitor finds it
10
13
10
98
76,954