socel.net is one of the many independent Mastodon servers you can use to participate in the fediverse.
Socel is a place for animation professionals, freelancers, independents, students, and fans to connect and grow together. Everyone in related fields are also welcome.

Server stats:

317
active users

#edge

6 posts6 participants1 post today

Pick your Poison - A Double-Edged Email Attack

A sophisticated cyber-attack campaign has been identified, combining phishing techniques targeting Office365 credentials with malware delivery. The attackers use a file deletion reminder as a pretext, exploiting a legitimate file-sharing service to appear more credible. Upon opening a shared PDF file, users are presented with two hyperlinks: 'Preview' leads to a fake Microsoft login page for credential theft, while 'Download' initiates the installation of ConnectWise RAT malware. The malware establishes persistence through system services and registry modifications. This dual-threat approach emphasizes the need for user vigilance and education in recognizing phishing attempts and suspicious emails.

Pulse ID: 680fac69fa21735eedd5b785
Pulse Link: otx.alienvault.com/pulse/680fa
Pulse Author: AlienVault
Created: 2025-04-28 16:27:21

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

Another example of software doing shit I absolutely do not want. If I click a link in #microsoft #outlook, it opens #edge with the friggin email open in a sidebar. Why the fuck would I want this? I already have the email open. I guess some people might have a use for it (I can't imagine why). Fine. Make that a setting that they can turn on. Don't make me search for how to turn that annoying shit off. It's like software product managers are actively looking for ways to piss me off.

I see #mozilla making all these #ai related announcements and it makes me sad.

We need you focused on making #firefox the world's greatest web browser.

We need you to curb stomp #chrome and #edge and all their sleazy shenanigans1.

There are so many areas for improvement but I'm going to list a few anyway:

  • Better support for multiple profiles. Trying to use multiple profiles in Firefox right now is miserable #ux sadly.
  • WebUSB support
  • Fuller WebGL support

(With apologies to the folks working on those teams. I'm sure you're good people, but these products are super sleazy in the form they ship to the world)

Forest thru the Trees Problem. It hits me almost every time I touch technology. Most recently I wanted to help squeeze more power out of my partners PC he uses for #BG3. So I disconnected everything and blew all the heat sinks clean and fans, then plugged it all back. Then he went to use his system and Windows audio for system sounds worked fine, but not #Chrome, #Edge, or #VLC. Struggling with Windows shittastic audio controls didn’t help. It made no sense. (1/3)

Replied in thread

Which browsers do you use?
• Multiple choice to account for various usage and any device (pro & perso)
• You may boost to enlarge the sample

It pains me, but I've caved to technical pressures and made Edge the default browser on my work PC.

Firefox has long been my default, but it gets confused about which account to use with which tab, and I often end up fighting to point it to the right account.

Nobody else in my IT department reports this problem. It's almost like Microsoft wants links in Teams to fail with 3rd party browsers. 🤔

Also, Teams sucks. Why do attachments have to be links and not actual files? #Edge

Silent Credit Card Thief Uncovered

A sophisticated credit card skimming campaign dubbed 'RolandSkimmer' has been discovered, targeting users in Bulgaria. The attack utilizes malicious browser extensions across Chrome, Edge, and Firefox, initiated through a deceptive LNK file. The malware employs obfuscated scripts to establish persistent access, harvesting and exfiltrating sensitive financial data. The attack workflow involves system reconnaissance, downloading additional malicious files, and injecting scripts into web pages. The threat actor uses unique identifiers to track victims and employs sophisticated techniques to evade detection. The campaign demonstrates the evolving nature of web-based credit card skimming threats, highlighting the need for enhanced security measures against LNK-based attacks and unverified browser extensions.

Pulse ID: 67efc6e92fbd533808f09435
Pulse Link: otx.alienvault.com/pulse/67efc
Pulse Author: AlienVault
Created: 2025-04-04 11:47:53

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
I spent decades perfecting my linux dotfiles and emacs config - but all that changed in just five minutes.

I peeked into my classmate's laptop to copy the homework but I was awestruck by how awesome windows 11 is.

Nixos has rollbacks and emacs but Windows has recall and copilot inside notepad that has done my homework.

I had trouble choosing a browser on Linux after firefox shit its bed. But windows gave me a free microsoft account and bing assured me that Edge is the best.

Life's so good now with microsoft watching my back 😄. Take that linux shills!

#linux #nixos #emacs #windows #microsoft #firefox #edge #copilot

My (small: around 75 systems) #MDM setup works now. It has *only* 1 flaw: it's #Miscrosoft #InTune 🤮

I could add my #ubuntu laptops to it, but:
1. I hate the idea of managing systems via such a closed system
2. I would be forced to install #edge and an InTune app, on Ubuntu!

Are there alternatives to manage my #linux computers centrally via an #opensource solution? Updates, apps and websites restrictions, ...

After ditching browser after browser due to privacy, AI, or whatever nonsense, I find myself using Konqueror.

It's kind of a breath of fresh air. Google is hostile towards it and I miss having a Bitwarden plugin but I think I'll survive.