mastodon.xyz is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon instance, open to everyone, but mainly English and French speaking.

Administered by:

Server stats:

790
active users

#darkweb

4 posts4 participants0 posts today

Have you ever walked into a supermarket, pharmacy, or department store looking to buy a specific item, only to find the layout confusing? Perhaps you ended up aimlessly strolling around, purchasing other items? This is deliberate, and known as the Gruen Transfer. The 'Transfer' part is the moment that you, as a consumer surrounded by a deliberately confusing layout, lose track of your original intentions.
We've all experienced it, and now it's starting to consume the internet. #Internet #GruenTransfer #DarkWeb #WWW #Enshitification

sebs.website/blog/the%20gruen-

sebs.websiteThe Gruen Transfer is consuming the internet<p>The Gruen Transfer is taking over social media. What is it and how can we avoid it?</p>

I had the pleasure of presenting at #FIRSTCTI25 in Berlin:

"The Art of Pivoting – How You Can Discover More from Adversaries with Existing Information."

The talk explored how unconventional indicators, like cookie names, QR codes, HTTP headers (HHHash), DOM structures, and reused Google Analytics IDs, can reveal surprising links across threat actor infrastructure and behavior.

We also shared real-world insights from our crawling and analysis with AIL, including:

  • How “weak” indicators can gain strength through composite correlation
  • Unexpected metadata reuse across Tor services and social platforms
  • How AIL enables more creative and effective pivoting workflows

🔗 Slides ail-project.org/assets/img/sli

#threatintel #threatintelligence #cti #opensource #cybersecurity #darkweb

@misp @ail_project @circl

Thanks to @terrtia for the crazy discussions around correlations!

⚠️ Major AI data breach: DeepSeek leaks 1M+ records to the Dark Web 🧠💥

China-based AI startup DeepSeek just exposed a staggering volume of sensitive data:
💬 1M+ chat logs
🔐 API keys, backend metadata
📡 Unencrypted traffic via iOS app (ATS disabled)
🔓 Open ClickHouse database with full control

This wasn’t just a lapse — it was a floodgate.

🛡️ AI companies (and anyone integrating LLMs) must:
🔍 Audit storage configs
🔐 Enforce secure transport policies
📊 Monitor for unintentional data exposure

The future of AI relies on building trust. That starts with securing it.

#AI #CyberSecurity #DataBreach #DarkWeb #InfoSec
darkreading.com/cyberattacks-d

Vast #pedophile network shut down in Europol’s largest #CSAM operation

#Europol has shut down one of the largest dark web pedophile networks in the world, prompting dozens of arrests worldwide and threatening that more are to follow
#darkweb

arstechnica.com/tech-policy/20

Ars Technica · Vast pedophile network shut down in Europol’s largest CSAM operationBy Ashley Belanger
Continued thread

I got nothing for Signal. I used my brother's phone number but the 6 digit verification number just doesn't come.. He doesn't even know what Signal app is, so I doubt he used his phone number to sign up.

Guess this isn't the day to meddle with Signal. "No Signal" I guess :(

I'mma stick with SimpleX chat. This and the email. I dunno about Matrix+Element though

I now have SimpleX Chat, lol. Idk I was bored so I set one up!

To anyone interested in hitting me up, spam, negative shit or just normal conversations, here's my address (note I won't be online all the time. I'm dealing with something serious right now)

simplex.chat/contact#/?v=2-7&s