WRLD

Search

#wtf
SaxX ¯\_(ツ)_/¯ 20h

SaxX described a cyberattack against Binance that he attributed to North Korea and presented as a theft of $6.3 billion. According to his account, the operation allegedly began in June when an engineer from the wallet team installed an infected version of Homebrew. Binance reportedly detected the incident, replaced its computer, and reset its passwords, but the hackers had already mapped the team. In September, a second engineer was supposedly targeted by a job offer posted on LinkedIn, according to SaxX, who referred to Fortune. After fake interviews, the employee downloaded a programming exercise containing a malicious version of pyenv, which Binance's antivirus allegedly did not detect. On October 20, the hackers reportedly used an internal artificial intelligence tool to access the computers of two engineers and found a way to execute code on Binance's servers on one of them. SaxX indicated that on October 29 at 21:05 Paris time, the hackers exploited EIP-7702 to take control of an internet-connected wallet. According to his account, 233 million XRP had been transferred in four minutes, followed by other cryptocurrencies. Binance reportedly took about four hours to halt the transfers, with the last occurring at 00:56 and access being cut off 14 minutes later. SaxX explained that the security system, which distributed keys among multiple parties, prevented a single key from quickly revoking access. He added that Binance claimed to have reimbursed 98% of the stolen cryptocurrencies from its own funds and that $2.85 billion had been frozen or intercepted with partners. According to SaxX, the head of Binance stated that the FBI attributed the attack to North Korea. He also recalled that the previous record was the theft targeting Bybit in 2025, of approximately $1.5 billion, also attributed to North Korea, and that Binance claimed to have blocked 57 North Korean attacks this year. #Cyberattaque #Binance #Cryptomonnaie (translated)

3011
Luca 2d

Shop freezers in seven European countries hit by cyber-attack. WTF? Belgium and Luxembourg saw some of the worst damage, with 40 Delhaize supermarkets affected, and incidents also took place in stores across Sweden, Ireland, the Netherlands, Estonia and Finland. Also: www.cbc.ca/news/busines...

2336
kenket 🇫🇷🇧🇷 1w

Kenket thanked the Brazilians and said that they gave him a lot of hope for 2027. He also highlighted their strong presence on Twitter, estimating that there were at least a hundred of them under each tweet. #Brésil #Espoir #Twitter (translated)

2959
emptywheel 1w

Hilarious: DOJ interrupts a Feeb getting his ass handed to him by defense attorneys for Kash's targets to announce the no-bill on a Cassidy Hutchinson indictment. WTF Ned Hedley was doing there IDK.

2278
Grzegorz Rzeczkowski 1w

The author wrote that the report of the government commission investigating repression against civil society described, among other things, attempts to intimidate the media by individuals connected to Russia, associated with the authorities. He added that the report was revealed by Citizens of the Republic of Poland, and the government has not done so yet. https://t.co/WTfU7wZ8Et #Rosja #media #represje #PL #RU (translated)

3418
Dubravka Šuica 1w
Croatian politician

The author said this summer’s heatwaves had shown the need for countries to work together to strengthen climate resilience, protect communities and support local authorities. They added that the Southern Mediterranean and the Gulf were particularly exposed.

3646
Luis del Pino 2w
Spanish journalist

The author stated that a 15-year-old English teenager posted a satirical photo of a British councilor and that the police went to his house to arrest him. He added that the case provoked a wave of memes about the councilor on social media, most of which were spread from outside the Kingdom. #memes #política #Inglaterra #GB (translated)

3318
Wuppi ꥟ #FreieRedeJetzt 2w

Wuppi wrote that the linked content can also be found in the emails of the #AfDLeaks. He said that they have really caught the AfD with this. https://t.co/biqwG2rYLq #AfD #Politik #Deutschland (translated)

2760
Zprávy z První Nohy 2w

Reports from První Nohy commented on what he described as normalization in Czech television. He wrote that ČT released a documentary about COVID the previous day as part of the series Rozpleteno, and that Rajchl also appeared as a COVID expert in it. He described Rajchl using a derogatory term and expressed surprise at what his participation might mean. https://t.co/TKPqizNeOC #ČT #covid #politika (translated)

2990
Planeta Boca Juniors 2w

Boca Juniors announced that Leandro Paredes expressed his gratitude to the group, which he credited for giving their all to take the club to the place it deserves. He also said that the team had played a perfect match from start to finish. https://t.co/wTfEaYc4GI #Fútbol #Agradecimiento #Equipo (translated)

3106
metashi12 2w

Metashi12 wrote that two months prior, they had sat down with the person at a dinner during Gamescom. The account expressed shock and wished her "rest in peace." #Gamescom #Trauer #RIP (translated)

2763
Serpias 🎄 3w

Serpias praised Lalito Jr. 1804 and said that the work seemed very good to him, highlighting the effort behind it and the spectacular result. #TrabajoBienHecho #Espectacular #Arte (translated)

3462
Borussia Dortmund 3w

Borussia Dortmund wrote that they would be guests at FC Union in the capital on matchday. The match was set to begin at 3:30 PM and to be broadcast on Sky Sport Germany. #FCUBVB https://t.co/WTfKjkLfne #Bundesliga #Fußball #Berlin (translated)

3118
Montenikos ⛔️ 3w

Montenikos stated that Enjai had an average of 12.5 points in six games, with 86% in two-pointers, 67% in three-pointers, and 79% in free throws, as well as 4 rebounds, 1 steal, 1 assist, and 1 block in 18 minutes. He then expressed great surprise at the performances. #olympiacosbc #paobc #μπάσκετ #αθλητισμός #Ολυμπιακός (translated)

2772
Sh⭕t Vetakis 3w

Sh⭕t Vetakis mentioned that Donda Hol suffered a sprain in his left leg but would continue to compete. Regarding Nikola Milutinov, he wrote that he received a knee to the back in the match against Valencia and would only play if deemed necessary. According to the post, Montero had suffered a sprain in his right leg in the match against Valencia and felt discomfort in his left knee in tonight's game, while efforts were being made for him to continue. Sh⭕t Vetakis added that Embai N'Jai had a bruise on his left eye but would continue. #olympiacosbc #μπάσκετ #τραυματισμοί #σπορ (translated)

3004
SaxX ¯\_(ツ)_/¯ 3w

SaxX reported that a hacker had accessed the Danish central registry of persons, the CPR, and retrieved data associated with about 8.8 million identification numbers. According to him, these concerned living people, deceased individuals, or those who had gone abroad, and included names, addresses, and personal numbers. The author clarified that the intrusion did not directly target the Danish state, but Pays ApS, an IT company in Odense that had legal access to the registry to verify its clients' files. He indicated that the company had only two employees. Citing the newspaper Politiken, he wrote that at least three of its accounts used the password "123456", including that of the administrator. According to SaxX's account, the hacker allegedly used a leaked password from a former employee, maintained access for 21 days and 17 hours, and carried out about 14 million automated searches between September 10 and 20. The hacker also claimed that his data recovery program had been written by an AI, that he had no particular technical skills, and that he did not intend to sell or publish the data. SaxX stated that the intrusion was only discovered on October 2, after an official noticed an abnormally high bill, as searches in the registry are paid. He added that the Minister of Digital Affairs had described the incident as "deeply serious." The author also reported that the number of citizens who activated a credit fraud alert had risen from about 250,000 to nearly 970,000 in one week. According to him, the CPR had then reminded the security rules to 1,039 companies that had access to the registry, including banks, telecom operators, law firms, unions, and insurers. Finally, SaxX estimated that the incident demonstrated the risks associated with access granted to private providers, as several African states digitized their civil registries. #Cybersécurité #Hacking #Danemark (translated)

3584
Dan Priban 3w
Czech traveller and writer

The author objected to what he described as Kvapil's argument: that counting civilian casualties meant it was not genocide, even though, according to him, people were being killed by the hundreds and, in total, by the tens of thousands. He challenged this conclusion by referencing Srebrenica, where, according to him, only boys and men were murdered and the victims were selected according to a certain criterion. https://t.co/Gf8es2rLmI #genocida #Srebrenice #lidskáPráva #BA (translated)

3473
Eric Larchevêque 3w

Eric Larchevêque wrote that the new Tesla Roadster was set to be unveiled the next day at an event he anticipated would be spectacular. He reported that Tesla had indicated that the demonstration could only take place outdoors, and that Elon Musk had promised an "unforgettable" event, with witnesses on site to attest that the images broadcast were not generated by artificial intelligence. Larchevêque mentioned a rumor that the vehicle could take off thanks to a collaboration with SpaceX and cold gas thrusters. He suggested that these could allow for acceleration from 0 to 60 mph in less than a second and, potentially, levitate the car. He also reported that Musk had described the technology as more spectacular than that of all the James Bond cars combined. Citing The Information, Larchevêque added that Tesla had prepared a demonstration with a remote-controlled Roadster that would use a magnetic ramp, drive backward, then right itself and remain suspended in the air. He concluded by saying that he was looking forward to attending the event. #Tesla #Roadster #Innovation (translated)

3242
SaxX ¯\_(ツ)_/¯ 3w

SaxX stated that hundreds of French supermarkets had seen their freezers reach 50 °C on Sunday evening, in what he described as a cyberattack that led to the destruction of frozen goods and estimated losses of several million euros. However, he clarified that the vector of the attack had not been confirmed and that no group had claimed responsibility. According to SaxX, the AK-SM controllers from Danfoss, which manage refrigeration in stores, were accessible from the Internet. He recalled that Danfoss had declared the AK-SM 800 model end-of-life in 2021, and that 16 Russian supermarkets equipped with these devices had been attacked in 2022. In 2023, Synacktiv reported an authentication bypass, to which the manufacturer allegedly responded that the issue concerned end-of-life products. In 2025, Claroty discovered a password calculated from the current date. SaxX added that Claroty had presented its work at the DEFCON conference in Las Vegas in August 2026, demonstrating how this vulnerability could be exploited to cut refrigeration and display false temperatures. He mentioned more than 2,700 exposed controllers worldwide and indicated that Danfoss had acknowledged that most of the affected equipment was old and unpatched. He also cited Dixell as another impacted manufacturer. The author estimated that France accounted for nearly 60% of the exposed Danfoss controllers reported worldwide, according to Internet scans he claimed to have consulted. He also mentioned the presence of these devices in South Africa and the risk that African supermarkets could be affected, particularly due to the use of refurbished equipment. Finally, SaxX condemned a lack of accountability, writing that researchers had alerted to the vulnerabilities while stores had continued to use the equipment. #cybersécurité #cyberattaque #supermarchés (translated)

3705