BLOCKMAGE @BlockmageSec

Web3 Native Threat Intelligence. blockmage.dev The Ether Joined December 2022

Tweets

267
Followers

1K
Following

152
Likes

397

Fantasy @0xFantasy

4 weeks ago

1/ I've been doing some research into how Unity Packages (similar to Node or Pip packages) could be weaponized for malware delivery Let me tell you, it doesn't exactly look good... 🧵

3 3 19 2K 3

Download Image

Alchemyst @Alchemyst0x

5 months ago

Links: CVE-2025-31201: Apple CVE-2025-31200: Apple and Google Threat Analysis Group macOS Sequoia 15.4.1: support.apple.com/en-us/122400 iOS 18.4.1 and iPadOS 18.4.1: support.apple.com/en-us/122282 visionOS 2.4.1: support.apple.com/en-us/122402

0 2 3 528 0

No excuses. These are live use, not theoretical CVEs. Apple doesn’t push same-day cross-platform updates and delete vulnerable code unless the stakes are real. Stay sharp. Patch everything. Watch your traffic. 🧙‍♂️

1 1 3 239 0

Alchemyst @Alchemyst0x

5 months ago

Two #CVE's, patched across every Apple platform, both marked as actively exploited in the wild: #Apple just released: - macOS 15.4.1, - iOS 18.4.1 - iPadOS 18.4.1 - tvOS 18.4.1 - visionOS 2.4.1 — and you should stop what you're doing and update now.

1 1 4 510 0

BLOCKMAGE @BlockmageSec

2 years ago

It was a bit off.

Alchemyst @Alchemyst0x

2 years ago

It was a bit off.

4 0 2 4K 0

8 0 13 3K 1

JP @rugpullfinder

2 years ago

July 2023 #TornadoCash exit worth 1,400 ETH ($2.6M) Exit via 100 ETH Contract, swaps for USDC, heads out over the Synapse bridge, to Polygon 0xc09d3c2 and get gambled away at @Stake. I see this fairly often when analysing TC. Tool: @MetaSleuth

5 5 21 7K 3

Download Image

ZachXBT @zachxbt

2 years ago

@zaingaziani @Ledger @Microsoft Sadly received two messages about this from victims today. Seems another person lost funds in just past few min.

19 5 71 20K 0

Download Image

ZachXBT @zachxbt

2 years ago

Community Alert: There is currently a fake @Ledger Live app on the official @Microsoft App Store which was resulted in 16.8+ BTC ($588K) stolen Scammer address bc1qg05gw43elzqxqnll8vs8x47ukkhudwyncxy64q

359 2K 4K 1.1M 153

Download Image

ZachXBT @zachxbt

2 years ago

1/ An investigation into the Canadian scammer known as Yahya for their involvement in 17+ SIM swaps which resulted in more than $4.5M stolen.

309 894 4K 821K 454

Download Image

Fantasy @0xFantasy

2 years ago

@PeckShieldAlert This is another MakerDAO deposit. Now, I dont understand the exact mechanics of this, but after a bit of digging, funds seem to get withdrawn from Maker as USDC and deposited into Coinbase x.com/0xFantasy/stat…

Fantasy @0xFantasy

2 years ago

2 1 6 5K 2

Download Image

3 2 6 2K 0

Caido @CaidoIO

2 years ago

It's release time 🎃 - Responses can now be intercepted and modified - Delete requests from HTTP History - [Pro] Import/export your projects using our new "backups" page - [Pro] Add shell commands to your convert workflows with the new "Shell" node github.com/caido/caido/re…

1 10 77 11K 7

Download Video

JP @rugpullfinder

2 years ago

GM GMers! Tagging people who do great work in this space but I feel are not shown enough love! Go follow ⬇️ @CryptoaaService @WoAS_Necksus @0xFantasy @0xSaiyanElite @1c4m3by @Plumferno @BlockmageSec @BoringSecDAO @brookejlacey @ManicalEngineer Who did I miss? Tag them!

6 4 17 2K 1

Vaana❤️ @Vaana2K

2 years ago

@PocketUniverseZ @1c4m3by @oxsaiyangod @BlockmageSec @Plumferno @opensea @Server_Forge @1c4m3by saved me the other day 🤝 appreciate your work ♥️

1 2 6 1K 0

Pocket Universe 🟣 @PocketUniverseZ

2 years ago

Introducing the Pocket Guardians They've already saved *hundreds* of you from dangerous websites Here's a quick intro ⬇️

24 52 184 17K 8

Download Image

Pocket Universe 🟣 @PocketUniverseZ

2 years ago

3/ - @1c4m3by is a security researcher who's already blocked hundreds of scams - @oxsaiyangod is a security researcher from @BlockmageSec - @Plumferno works at @opensea's trust & safety team and founded @Server_Forge

6 3 35 4K 2

Tay 💖 @tayvano_

2 years ago

dprk once again rekting you via the platforms you use: github, slack, tg, npm. not checking email won't protect you anymore. 😭 admin keys and build/deploy systems gunna end up pwnd by this campaign. gl & rip.🪦 github.blog/2023-07-18-sec…

12 61 187 52K 29

Download Image

Arkham @arkham

2 years ago

Announcing The Arkham Airdrop: a distribution of rewards to our early users! Users can now convert their points exclusively on the Arkham Invite Dashboard. Beware of scammers: Only trust info from @arkhamintel verified on Twitter, only claim via Arkham, and double check URLs.

578 915 3K 2.0M 331

Download Image

Revoke.cash @RevokeCash

2 years ago

Yesterday, we received reports of people seeing unknown approval transactions in their transaction history. It turns out that this is a new scam where scammers use so-called gas tokens to steal money when victims revoke these "fake approvals".