BLOCKMAGE retweeted
1/ I've been doing some research into how Unity Packages (similar to Node or Pip packages) could be weaponized for malware delivery
Let me tell you, it doesn't exactly look good... 🧵
BLOCKMAGE retweeted
Links:
CVE-2025-31201: Apple
CVE-2025-31200: Apple and Google Threat Analysis Group
macOS Sequoia 15.4.1:
support.apple.com/en-us/1224…
iOS 18.4.1 and iPadOS 18.4.1:
support.apple.com/en-us/1222…
visionOS 2.4.1:
support.apple.com/en-us/1224…
BLOCKMAGE retweeted
No excuses.
These are live use, not theoretical CVEs.
Apple doesn’t push same-day cross-platform updates and delete vulnerable code unless the stakes are real.
Stay sharp. Patch everything. Watch your traffic. 🧙♂️
BLOCKMAGE retweeted
July 2023 #TornadoCash exit worth 1,400 ETH ($2.6M)
Exit via 100 ETH Contract, swaps for USDC, heads out over the Synapse bridge, to Polygon 0xc09d3c2 and get gambled away at @Stake. I see this fairly often when analysing TC.
Tool: @MetaSleuth
BLOCKMAGE retweeted
Sadly received two messages about this from victims today. Seems another person lost funds in just past few min.
BLOCKMAGE retweeted
Community Alert: There is currently a fake @Ledger Live app on the official @Microsoft App Store which was resulted in 16.8+ BTC ($588K) stolen
Scammer address
bc1qg05gw43elzqxqnll8vs8x47ukkhudwyncxy64q
BLOCKMAGE retweeted
1/ An investigation into the Canadian scammer known as Yahya for their involvement in 17+ SIM swaps which resulted in more than $4.5M stolen.
BLOCKMAGE retweeted
Replying to @PeckShieldAlert
This is another MakerDAO deposit. Now, I dont understand the exact mechanics of this, but after a bit of digging, funds seem to get withdrawn from Maker as USDC and deposited into Coinbase
xitter.cf/0xFantasy/status/16977…
Replying to @MistTrack_io
seems that it was a deposit into maker. call trace and debank show it properly, but etherscan doesnt for some reason
docs.makerdao.com/smart-cont…
BLOCKMAGE retweeted
It's release time 🎃
- Responses can now be intercepted and modified
- Delete requests from HTTP History
- [Pro] Import/export your projects using our new "backups" page
- [Pro] Add shell commands to your convert workflows with the new "Shell" node
github.com/caido/caido/relea…
BLOCKMAGE retweeted
GM GMers! Tagging people who do great work in this space but I feel are not shown enough love!
Go follow ⬇️
@CryptoaaService @WoAS_Necksus @0xFantasy @0xSaiyanElite @1c4m3by @Plumferno @BlockMageSec @boringsecurity @brookejlacey @ManicalEngineer
Who did I miss? Tag them!
BLOCKMAGE retweeted
@1c4m3by saved me the other day 🤝 appreciate your work ♥️
BLOCKMAGE retweeted
Introducing the Pocket Guardians
They've already saved *hundreds* of you from dangerous websites
Here's a quick intro ⬇️
BLOCKMAGE retweeted
3/
- @1c4m3by is a security researcher who's already blocked hundreds of scams
- @OxSaiyanGod is a security researcher from @BlockMageSec
- @plumferno works at @opensea's trust & safety team and founded @Server_Forge
BLOCKMAGE retweeted
dprk once again rekting you via the platforms you use: github, slack, tg, npm.
not checking email won't protect you anymore. 😭
admin keys and build/deploy systems gunna end up pwnd by this campaign.
gl & rip.🪦
github.blog/2023-07-18-secur…
BLOCKMAGE retweeted
Announcing The Arkham Airdrop: a distribution of rewards to our early users!
Users can now convert their points exclusively on the Arkham Invite Dashboard.
Beware of scammers: Only trust info from @arkhamintel verified on Twitter, only claim via Arkham, and double check URLs.
BLOCKMAGE retweeted
Yesterday, we received reports of people seeing unknown approval transactions in their transaction history.
It turns out that this is a new scam where scammers use so-called gas tokens to steal money when victims revoke these "fake approvals".
BLOCKMAGE retweeted
Ironically this was not created for this occasion, just something that was coincidentally lying around.
BLOCKMAGE retweeted
The Intel Exchange will be live on Tuesday, July 18
We’re very excited to see the kinds of information shared on our platform & where our community takes this.
As always, we’re grateful for all of your support.
Read more here:
arkhamintelligence.com/annou…
























