How GerboxFi secures their multisig: https://x.com/0xmikko_eth/status/1893078876256899426?1

#security #opsec #privacy

Additionally:

• Implement a bandwidth monitor (endian, lulu or littlesnitch);
• Use: dangerzone.rocks when working with PDFs;
• For multisig use: safehashpreview.com

#opsec #security

Much thanks for mentioning my compilation! Check it out here: https://x.com/officer_cia/status/1893001903572951516?s=46

#security #opsec

#investigation #security #opsec

Telegram 's latest beta for Android introduces detailed user info! 🕵️‍♂️

You can now see:
📍 Country of phone number origin
📅 Account registration date (month/year)
👥 Number of shared groups
✔️ Whether the account is official

• https://x.com/officer_cia/status/1895442145370087681

#privacy #security #opsec

> One image cannot shake the unwavering resolve of a Web3 security researcher!

> Yet, behold this picture:

• https://x.com/officer_cia/status/1896040825479708766?1

#security #opsec

30 minutes ago, a victim lost $1.82M worth of cUSDCv3 due to phishing transaction signatures…

• https://x.com/officer_cia/status/1899730170338009127?12

#security #opsec

Trezor Reveals Potential Vulnerability in Older Safe 3 Crypto Wallets !

Trezor disclosed a potential vulnerability in its Safe 3 wallet after Ledger identified a supply chain attack using voltage glitching.

The attack requires physical access and advanced skills, making it unlikely for widespread exploitation. Newer Trezor models, including Safe 5, are unaffected. Users are advised to buy from official sources, use strong PINs, enable passphrases, and keep firmware updated.

• https://www.theblock.co/post/346018/trezor-discloses-vulnerability-safe-3-crypto-wallet-rival-ledger

#opsec #security

Yet another awesome OpSec rule:

Don't let perfect be the enemy of good.

100% solutions are rare in cybersecurity. Security solutions, each with their own shortcomings, are OK when layered together to supplement coverage.

Quoting Kerckhoff's principle, "A cryptosystem should remain secure even if everything about the system, except the key, is public."

If revealing a system substantially increases its risk of being broken, then perhaps it needs to be rethought.

• https://github.com/OffcierCia/Crypto-OpSec-SelfGuard-RoadMap

#opsec #privacy #security

New Malware Alert — Microsoft warns of StilachiRAT, a stealthy remote access trojan that:

• Steals browser passwords & clipboard data;
• Targets crypto wallets;
• Executes remote commands & monitors RDP sessions;
• Evades detection by clearing event logs.

• https://x.com/officer_cia/status/1902036244479230132?s=46

#security #opsec