102 points

Correct me if I’m wrong, but this doesn’t look like this has anything to do with Syncthing vulnerabilities. Instead it looks like a hack that uses a preconfigured Syncthing installation to transfer sensitive data. Disturbing nonetheless.

permalink
report
reply
74 points

It’s a Phishing scam using a tool. It’s no more exploiting SyncThing than TCP/IP.

permalink
report
parent
reply
12 points

Bet they also utilize electricity these bastards! What’s next? Physics? Oh the humanity!

permalink
report
parent
reply
3 points

Its physics all the way down

permalink
report
parent
reply
10 points

Just like using a remote desktop tool in a scam I suppose

permalink
report
parent
reply
5 points

Looks like a specially modified SyncThing was just used for exfil.

permalink
report
parent
reply
18 points

The article uses the word modified, but it sounds like it’s just talking about configuring it and using it as normal.

permalink
report
parent
reply
0 points

Indeed.

permalink
report
parent
reply
79 points

The attack begins with a phishing email sent to the target

Okay bro im not reading past this its 2024

permalink
report
reply
20 points

Just click this link bro. Just one more link man. Just click it I need it.

permalink
report
parent
reply

Your links do nothing! I’m invincible!

permalink
report
parent
reply
8 points
*

Best i can do is chineese bootleg subway surfers riddled with malware and ads.

permalink
report
parent
reply
7 points

Gets drenched in liquid nitrogen

permalink
report
parent
reply
4 points

Wow, that second one… 🤣

permalink
report
parent
reply
63 points

Please dont link with a Google Amp link.

permalink
report
reply
22 points

Non-amp link.

OP, edit this in.

permalink
report
parent
reply
8 points

Please

permalink
report
parent
reply
6 points

Done.

permalink
report
parent
reply
10 points

Sorry about that, on my mobile firefox it looked fine. Fucking google.

permalink
report
parent
reply
12 points

They can’t even type Syncthing right.

permalink
report
reply
5 points
*

It’s a convenient file transfer/sync tool. Copying data has to happen somehow, I’m not surprised someone thought to use syncthing for that purpose >.<, since it can do that. But its not really different than any other tool here.

permalink
report
reply

Technology

!technology@lemmy.world

Create post

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


Community stats

  • 18K

    Monthly active users

  • 11K

    Posts

  • 504K

    Comments