founder, phisherman & QR guy @epiapp @episecurity • defeats phishing, bad QRs and cyber threats as a public service • check a link ↙ pro acc @greenlandphish

London
Pinned Tweet
An Epi Special Investigation on the scam political ads plaguing X users in the UK. Over four days, we detected 425 unique malicious ads, generating over 2.3 million impressions. From 1 to 4 July, I observed 425 distinct malicious ads that exploited the studio brand of the BBC Radio 4 Today programme and the likeness of Emily Maitlis. 1 July: 82 ads with 816,950 views 2 July: 95 ads with 433,808 views 3 July: 169 ads with 781,802 views 4 July: 79 ads with 319,412 views Total 1–4 July: 2,351,972 views (avg: 5,534 views/ad) Some individual ads reported over 70,000 impressions. The vast majority of the 425 ads matched one-to-one with individual X accounts; ie. around 400 separate X accounts were used for 425 ads. Interestingly, a large proportion of the accounts were created between 2009 and 2014, with a peak in 2011, and many of their initial tweets posted are scams and malicious links. This tells me that these Twitter accounts have not been recently created or hijacked, but are persistent scam accounts controlled and traded by organised criminals over long periods — decades, in fact. Ads were published by X accounts originating from 89 countries, most of which X indicates are using VPNs, which obscure their true geographic location. The ad origins include exotic and unusual countries such as: Afghanistan, Belarus, Mongolia, Palestine, Pakistan, Russia, Somalia, South Sudan, Ukraine, Uzbekistan and Venezuela. Some important questions that need answers: Why is X allowing ads from a such an exotic variety of countries to reach British users with UK political inspired ads? Why does X let ads be published from accounts hiding behind VPNs, particularly when they acknowledge their use? What are the banks and jurisdictions of the credit cards used to pay for the ads? Why is X permitting ads from regions in active conflict zones, and most concerningly, from countries under comprehensive and targeted US and UK sanctions — including: Afghanistan, Belarus, Russia, Somalia, South Sudan and Venezuela. Since this investigation, I have observed malicious ads exploiting the likeness of Nick Robinson on the Today programme. Funnily enough, I will be on the Today programme on BBC Radio 4 on Wednesday morning at 06:50 to discuss my findings. I hope you join me as one of six million listening! On your radio, on BBC Sounds, or on catchup. UK: Wed 6:50am US Eastern: Wed 1:50am US Pacific: Tue 10:50pm Sydney: Wed 3:50pm @epiapp @episecurity
30
21
116
70,871
I'm AW (always working)
4
52
doge ball
goodness me, what a terrible domain coinbasemundododgeball•com scammers don't have to try hard when the legit domain is this bad
5
64
goodness me, what a terrible domain coinbasemundododgeball•com scammers don't have to try hard when the legit domain is this bad
Mundo Dodgeball, anyone? We're bringing it to real life. But first, you must show down on the rift. 1v1. Top players go to the League of Legends World Championship in NYC. Champion takes home 1 Bitcoin. See you in the pit.
3
8
182
this is especially bad for a crypto company. easy to lose your coin
3
19
should've called it dogeball
4
32
White Lotus is number 1. It has everything — it's even a travelogue! The show can go on forever, without becoming stale, because it is an episodic travel show and documentary of all our family holidays that start out fine and normal, capturing all the silly quibbles and fights, but then it all goes terribly wrong, with slow-burn tension and climax. It needs no overarching story arc. Standalone seasons with all-new characters works forever for The White Lotus.
The New York Times just dropped its full list of the best TV shows of the 21st century. Thoughts? 📷: The New York Times
5
6
158
Travesty when the producers and networks butchered the name of The Great British Bake Off into The Great British Baking Show. They would have got it, the Bake Off
1
72
If GBBO is here, where is Top Gear?
3
41
GBBO is 85! Is there another reality competition show in there?
1
38
The travelogue is one of the main reasons Top Gear with Clarkson, Hammond and May works. Along with the humour, camaraderie, and sheer will of Jeremy Clarkson.
3
48
why they so happy about it?
1
6
59
should've been a stock image of the stadium from aerial
2
41
AI solves this
One of the biggest scams out there
5
100
Anybody have a VS Code fork with all of the extra features and AI stuff removed? I want a minimal editor that doesn't spam me with requests to use a mediocre agent when I just want to quickly look at some code changes.
4
82
ngl i read this as "how to build yourself an ai unc"
5
58
new X carousel
2
47
twitter feels good in the club
1
3
45
did i do ok?
how the fuck am i more sincere than josh?
2
8
181
sincere and a shitposter!
2
29
only just realised what @tomhacks means and just laughed tom hanks lol
1
1
35