Hi! im D, I automate weird stuff, build web apps and bots

An in-depth teardown of a postal phishing campaign targeting Ledger hardware wallet users with fake 'Quantum Resistance' upgrades, QR redirection chains, Cloudflare geo-fencing, and seed phrase exfiltration.

This analysis documents a sophisticated multi-stage phishing campaign targeting cryptocurrency wallet users. The attack chain spans from email delivery through credential exfiltration, incorporating TDS (Traffic Direction System) cloaking, BIP39 cryptographic validation, and social engineering across five sequential stages.

This blog post explores a fake tech interview scam that infects victims' machines through a malicious GitHub repository. The infection occurs via Visual Studio Code's `.vscode` folder and a legitimate-looking Express app, allowing attackers to execute arbitrary code and steal sensitive information.