Advertisement · 728 × 90

Posts by Blue Ox

Preview
We Are America March • 4/25• Through DC to National Mall• Day Marcher · Mobilize This April, the We Are America March will be walking from Philadelphia to Washington, DC (again!). Come march with us! Full route details coming soon!! Start @ 9 am • Shepard Park Soccer Field; ...

We Are America March • 4/25• Through DC to National Mall• Day Marcher

www.mobilize.us/mobilize/eve...

5 hours ago 0 0 0 0
Preview
a woman in a blue shirt with the word agreed on her chest ALT: a woman in a blue shirt with the word agreed on her chest
17 hours ago 1 0 0 0
Post image
2 days ago 2 0 0 0
Buckethead 4K (LIVE) at The Van Buren (2026)
Buckethead 4K (LIVE) at The Van Buren (2026) YouTube video by Buckethead Rocks

Buckethead still shreading! youtu.be/xKWJjv2twtU?...

2 days ago 0 0 0 0
Preview
a drawing of a man with glasses and the words " if you are neutral in situations of injustice " ALT: a drawing of a man with glasses and the words " if you are neutral in situations of injustice "
4 days ago 0 0 0 0
Post image

Carl Sandburg - Iron

1 week ago 1 0 0 0
Preview
an elderly woman sitting on a couch with the word implants written on the screen ALT: an elderly woman sitting on a couch with the word implants written on the screen
1 week ago 0 0 1 0
Advertisement
Post image

Her new job

1 week ago 1 0 1 0
Video

This is absolutely fantastic.

ht: @maddenifico.bsky.social

2 weeks ago 15339 5930 683 458
Preview
a man singing into a microphone with the words " generals gathered in their masses " below him ALT: a man singing into a microphone with the words " generals gathered in their masses " below him
2 weeks ago 0 0 0 0
Post image

. #removehegseth #RemoveTrump #StopThisWar #RescueThePilots #TrumpisInsane

2 weeks ago 0 0 0 0
Preview
Thousands Of Miles From Earth And On Their Way To The Moon, Artemis II Is Having Microsoft Outlook Problems "I have two Microsoft Outlooks, and neither one of those are working," a male voice told ground control.

LOL www.iflscience.com/thousands-of...

2 weeks ago 1 0 1 0

I'll be there

1 month ago 0 0 0 0

Hippie Fish tomorrow for lunch?

1 month ago 0 0 1 0
Preview
The 8 Biggest Concerts Coming To The D.C. Area, From Bailey Zimmerman To BTS Get ready for the hottest shows in the D.C. area! From Bailey Zimmerman to BTS, check out the 8 biggest concerts you won’t want to miss this season.

secretdc.com/best-concert...

1 month ago 0 0 0 0
Preview
LeakNet Scales Ransomware Operations With ClickFix Lures and Stealthy Deno Loader A ransomware group known as LeakNet has been quietly building a more dangerous attack strategy. Until recently, the group averaged about three victims per month — but new evidence shows it is scaling up fast, adding new tools that most security defenses are not built to catch. LeakNet has introduced two notable additions: a social engineering trick called ClickFix and a stealthy, memory-based loader built on the Deno JavaScript runtime.​ ClickFix is not a brand-new technique in the threat landscape, but LeakNet’s move toward using it marks a significant change in how the group finds its victims. Instead of purchasing stolen access credentials from initial access brokers (IABs) on underground markets, LeakNet now plants fake verification pages on compromised but otherwise legitimate websites. When an unsuspecting user lands on one of these pages, they are shown what looks like a standard Cloudflare Turnstile check and are prompted to manually run a command. There is no specific victim profile here — the group simply casts a wide net and counts on a portion of users to take the bait.​ ReliaQuest analysts identified the activity across multiple recent incidents, attributing it to LeakNet with high confidence based on overlapping infrastructure and consistent tactics, techniques, and procedures (TTPs). The shift away from IABs is deliberate: it removes a dependency that slowed the group down and broadens the pool of potential victims considerably. ClickFix has become a preferred delivery method across the threat landscape, facilitating the distribution of 59% of the top malware families tracked in 2025.​ This shift puts any web-browsing employee at risk. Because the lures are hosted on real websites rather than attacker-owned domains, standard network-layer defenses generate far fewer alerts. The red flag only appears after the user has already run the malicious command, which puts more weight on behavioral monitoring — particularly for suspicious  msiexec  commands and unexpected outbound connections — rather than domain-based blocking alone.​ What makes LeakNet’s current campaign particularly concerning is how both entry paths — ClickFix and Microsoft Teams phishing — feed into the same post-exploitation chain every time. The group moves through execution, lateral movement, and payload staging with the same tools regardless of how it got in. That consistency is a useful signal for defenders: knowing the steps means there are clear points where the attack can be detected and cut short.​ The Stealthy Deno-Based Loader One of the most technically dangerous parts of LeakNet’s updated toolkit is a previously unreported loader built on Deno, a legitimate JavaScript and TypeScript runtime used daily by developers. LeakNet uses a bring-your-own-runtime (BYOR) approach — instead of deploying a custom malicious binary that might trigger security tools, the attackers install the real, trusted Deno executable on the victim’s machine and use it to run harmful code.​ ClickFix lure that incorporates a fake Cloudflare Turnstile verification page (Source – Reliaquest) The loader is activated through PowerShell and Visual Basic Script files, notably named  Romeo*.ps1  and  Juliet*.vbs . Rather than writing a JavaScript file to disk where it could be scanned, LeakNet feeds the payload to Deno as a base64-encoded data URL, which Deno decodes and runs entirely in memory. No standard file ever touches the endpoint, making the entire process nearly invisible to signature-based security tools .​ LeakNet’s attack path (Source – Reliaquest) Once the loader runs, it collects basic system details — username, hostname, memory size, and OS version — then creates a unique victim fingerprint. It connects to attacker-controlled infrastructure to retrieve a victim-specific second-stage payload, prevents duplicate instances by binding to a local port, and then enters a looping cycle of fetching and executing further code in memory.​ To reduce exposure, organizations should block newly registered domains, since LeakNet’s command-and-control servers are typically only weeks old. Regular users should be restricted from running Win-R commands on their workstations, and PsExec should be limited to authorized administrators through Group Policy Objects (GPOs). Security teams should watch for  jli.dll  sideloading in the  C:\ProgramData\USOShared  directory, unusual PsExec activity, and unexpected outbound connections to S3 buckets. Isolating a compromised host the moment post-exploitation behavior is confirmed is the most direct way to break the chain before ransomware reaches deployment.​ Follow us on  Google News ,  LinkedIn , and  X  to Get More Instant Updates ,  Set CSN as a Preferred Source in  Google . The post LeakNet Scales Ransomware Operations With ClickFix Lures and Stealthy Deno Loader appeared first on Cyber Security News .

LeakNet Scales Ransomware Operations With ClickFix Lures and Stealthy Deno Loader

1 month ago 1 1 0 0
Advertisement
Post image

March 17th 1986 Eddie left us

1 month ago 2 0 0 0
Preview
a close up of a cartoon character 's face ALT: a close up of a cartoon character 's face
1 month ago 1 0 0 0
Preview
a close up of a man in a tuxedo and bow tie . ALT: a close up of a man in a tuxedo and bow tie .
1 month ago 0 0 0 0
Die Spitz - "RIDING WITH MY GIRLS" Official Music Video
Die Spitz - "RIDING WITH MY GIRLS" Official Music Video YouTube video by Die Spitz

youtu.be/zVPFp4s2L_s?...

1 month ago 0 1 0 0
Post image
1 month ago 1 0 0 0
Preview
a blue and yellow flag with a coat of arms in the middle ALT: a blue and yellow flag with a coat of arms in the middle

They have been attacking UKR via Russia for 2 years! SMH

1 month ago 0 0 0 0
Post image

Love it there, I liked Porches too.

1 month ago 3 2 0 0
In a seaside landscape, a skeletal figure tugs at a man in oilskins as they stand in the water, just off the beach. Gray, stormy clouds in the sky, and a tower or lighthouse stands in the distance.

In a seaside landscape, a skeletal figure tugs at a man in oilskins as they stand in the water, just off the beach. Gray, stormy clouds in the sky, and a tower or lighthouse stands in the distance.

#PhantomsFriday The Drowned Man's Ghost Tries to Claim a New Victim for the Sea, Thorvald Niss [1842-1905]
Skagens Museum, Skagen, Denmark
#TheVictorianBookoftheDead

1 month ago 2907 424 61 21
Preview
OpenFlaw | UwU Underground The official OpenFlaw collection for UwU Underground. Shop products like: OpenFlaw - Jeff - Tshirt - 0x02, OpenFlaw Jeff Apron - Big Ass Jeff Logo, and more.

uwu-underground-shop.fourthwall.com/collections/...

1 month ago 0 0 0 0
Advertisement
Country Joe Mcdonald - Feel Like i'm Fixing to Die Rag - Woodstock '69
Country Joe Mcdonald - Feel Like i'm Fixing to Die Rag - Woodstock '69 YouTube video by Lidia

RIP Joe youtu.be/eRl6-bHlz-4?...

1 month ago 0 0 0 0
Preview
a close up of a man 's face with the word e.f.n written on it ALT: a close up of a man 's face with the word e.f.n written on it
1 month ago 0 0 0 0
Preview
a black and white photo of a man standing in a crowded restaurant . ALT: a black and white photo of a man standing in a crowded restaurant .
1 month ago 1 0 0 0
Preview
Flyer protesting against occupation of Czechoslovakia, 1968 - Registry - Courage – Connecting collections The leaflet was created in August 1968 after the occupation of Czechoslovakia by five armies of the Warsaw Pact. From the beginning of the invasion on August 21, 1968, spontaneous demonstrations of re...

#BoycottICE
- do not feed them
- do not let them use the toilets
- do not let them buy gas
- do not house them.
- do not assist them in any way.

Adapted from the 1968 Prague Spring resistance
cultural-opposition.eu/registry/?ur...

1 month ago 0 0 0 0
FULL SPEECH: Finland President Declares End of Western-Led World Order at Raisina Dialogue | AC1G
FULL SPEECH: Finland President Declares End of Western-Led World Order at Raisina Dialogue | AC1G YouTube video by DRM News

youtu.be/FZcMo9uCw7E?...

1 month ago 0 0 0 0