Notices by Fellows (fellows@cyberplace.social), page 2

@GossiTheDog is that vehicle something that exists in the physical world?

@GossiTheDog I gave it a try, didn’t like it, added no value. The bar was low but they didn’t make it over.

If you’re not blocking SVG (Scalable Vector Graphic) attachments in email messages you might want to.

I have observed something I haven’t yet seen. Malicious email messages where the attachment the threat actor wants the target to open is a to SVG file pretending to be an agreement.

The SVG file when loaded makes a HTTP call to load a remote image, it also contains a transparent layer which links to the malicious website.

Looks to be an attempt at evading detection.

#ThreatIntel

@GossiTheDog no need to go to the theater with events so expertly scripted.

@GossiTheDog He must be playing TMNT

@GossiTheDog thanks for this Kevin, I have passed the info around to some MSPs I have friends working at.

@GossiTheDog Those graphics look pretty amazing. Is this game like WWII Online? (If you’ve ever played that one) I used to play WWII Online as a teen on my old Power Mac G4 and Power Mac G5.

@GossiTheDog your last comment is too funny! In reading the Reddit post I was thinking to myself, ‘What CEO would have the time to engage in actively reading Reddit and black listing partners who comment on their product’s security woes.’ It made me question the post’s validity lol - I will do as you suggest and check out the forums, I’m in need of a laugh.

@GossiTheDog what’s interesting from that Reddit post is the comments surrounding the CEO - apparently blacklisting partners who mention security issues involving their products on Reddit. Hopefully that’s untrue, but most likely isn’t. I can only imagine if you represented a 3CX partner! :)

@GossiTheDog Difficult to tell from that Reddit post what’s going on. Multiple people reporting seeing a higher number of unauthorized attempts over the holidays. Others indicating trunks being abused with high number of international calls until the SIP trunks were shutdown by the provider.

Sounds like this is malicious actors abusing 3CX systems for international calls, and not a supply chain attack like last time?

@GossiTheDog Fair enough. I hope they all manage to land safely into new roles elsewhere. Speaking of landing and expertise, what’s going on with MS Flight Simulator 2025? I’ve missed seeing your posts featuring its wackiness :)

@GossiTheDog what do you personally feel is the leading cause of these layoffs Kevin?

@GossiTheDog thanks for this post, I laughed out loud!

@GossiTheDog worst “feature” ever. Turned that off on mine. I guess if anything it’s good for a laugh.

@GossiTheDog perhaps they’re distributing Azure now to carry the load of the game, Microsoft thanks you for your contribution.

@GossiTheDog well done video. Maybe it was an old Enron video to begin with

@GossiTheDog so are they legitimately back or is this a joke?

@GossiTheDog the cloud really does ruin everything

@GossiTheDog wow, someone really shit the bed - then rolled in it!

@GossiTheDog I think I saw somewhere that they built it with the notion there would only be 200,000 players online at a time. So based on what you know, do you think the existing implementation could even handle 200,000 simultaneous players without issue?