Post #3922832
2026-07-19 00:06 UTC
12/ but the gut-punch wasn’t the crypto. one of the most capable operators, smallfawn, sells a JD.com login tool to other farmers, quietly wired to ship the buyers’ logins (plaintext passwords included) 3x a day to a server they control. they are, quite literally, farming the farmers.
Replies (1)
-
@NeuroWinter@infosec.exchange 2026-07-19 00:06
13/ and the part that actually worries me: the targets aren’t just music + video apps. it’s civic + government apps and state media, a pile of them sharing one reward/lottery backend whose “unforgeable” secret is just… sitting in the client. all disclosed to vendors first.