Post #3922783
2026-07-19 00:03 UTC
5/ once i could read them i saw the targets: news sites, ads, local govt sites. and the endpoints matched across repos, same hand-rolled toolchain, different authors. qlk wasn’t a one-off. it was one corner of a whole scene.
Replies (1)
-
@NeuroWinter@infosec.exchange 2026-07-19 00:03
6/ pull the thread and it’s 16 actors, 26 repos, 60+ platforms. and it doesn’t run like a friend group, it runs like a supply chain: operators write the scripts, someone rents them DRM to protect them, shared plumbing hides the bots, a WXPusher ping tells the operator when the money lands.