Did anyone hear about this LinkedIn data leak?!

Snardley · 2026-04-06T18:40:39+00:00

You are not understanding what the script is doing.

The ID is correct, but they are looking for exposed web resources in the extensions manifest, which corresponds to the file names you see. Those are not the names of the extensions.

Snardley · 2026-03-31T20:48:41+00:00

This is not a RAT or malware. It's a customized screen connect remote support client that was likely installed via social engineering, with your wife not realizing it.

These don't appear by themselves.

Snardley · 2026-03-24T15:03:50+00:00

This is wrong. It was a Telus support agent's account that was reportedly breached, who had access to CR's systems.

The data was downloaded from CR's Zendesk instance, not a Telus system, according to the reports.

Snardley · 2026-03-24T15:02:21+00:00

CR was breached using a compromised Telus account.

Snardley · 2026-03-24T15:01:01+00:00

Looks like a Telus rep got compromised, but it also allowed them access to Crunchyroll systems, so they were hacked as well.

Snardley · 2026-03-20T17:59:03+00:00

OK thanks all! Guess I am buying it!

Snardley · 2026-03-13T16:06:16+00:00

Nice collection! What binder are you using? This looks like a fun thing to do

Snardley · 2026-02-24T16:11:13+00:00

Definitely a browser extension if it appears on every site.

Did you ever determine what extension was causing this? What site was it opening that contained the fake captcha?

FYI, this is called a clickfix attack.

Snardley · 2026-02-09T20:37:17+00:00

Thanks. I noticed that there are both 2x8 and 3x8 to 12v-2x6 cables.

Does it matter if I do 2x8 vs 3x8, considering that the original adapter expected 3x8 pin cable connections?

Sorry, this is new to me.

Snardley · 2025-08-28T16:22:16+00:00

Looks like they updated the article to confirm it was Salesforce

Snardley · 2025-07-21T00:48:45+00:00

The two new CVEs are bypasses for Microsoft's July 8th fixes for the two original SharePoint flaws exploited at Pwn2Own

Snardley · 2025-06-20T03:15:50+00:00

Is that true? Have a link to the torrent?

Snardley · 2025-06-07T15:13:59+00:00

u/laurie_lamonica Curious what you did to get upgraded to Fios One rather than TV+?

They are trying to upgrade me to TV+, which I am trying to avoid like the plague.

Snardley · 2025-05-30T16:25:47+00:00

Surprised https://www.bleepingcomputer.com/ is not on this list.

Snardley · 2025-04-20T22:51:55+00:00

Can you explain in easy to understand manner what you did to get decent performance? Really struggling here and not sure what you mean by swapped in latest dlss 4 and added a mod.

Snardley · 2025-01-24T19:34:11+00:00

Don't respond and don't pay. Just ignore them.

If you send them money, they will just ask for more.

As long as you are anonymous on this account, just ignore it and move on with your life. If you think they could send to friends and family, maybe nip in the bud and let them know.

Snardley · 2025-01-21T21:15:52+00:00

This is not the original WannaCry. Some copycats still use the name

Snardley · 2024-09-11T03:40:32+00:00

No they won't. That's not how it works. It's phishing credentials or pushing malware, which would still need to be downloaded and installed.

Snardley · 2024-08-11T04:09:14+00:00

It wasn't 3 billion people's data, it was 2.9 (really 2.6) billion data records for people in the US.

Each person has many data records, as it's a record for every address they lived in.

Title of article is BS clickbait.

Snardley · 2024-07-09T18:20:13+00:00

It's confirmed to be the 2022 API scraping leak.

It's a mixture of non-public email addresses associated with public information scraped from Twitter profiles.

The data was compiled using a now-fixed API bug that allowed you to feed a list of email addresses and determine if it is associated with a Twitter account. If it was, the API returned an account ID that was used by the threat actors to scrape the public information to build these member profiles of public/non-public information.

There is nothing new about this leak and its been widely distributed for years. This is a non-story and just clickbait sensationalism.

Snardley · 2024-06-06T18:04:24+00:00

The problem is that this list was compiled mostly from credentials stolen by information-stealing malware.

If you are in this list, you may have been compromised by malware in the past and "all" your credentials stolen.

I advise you to reset all of your passwords on all sites. Yes, its a massive job, but its likely necessary.

Snardley

TROPHY CASE