130
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
all 28 comments
sorted by: hot top new old
[-] [email protected] 102 points 1 year ago

Correct me if I'm wrong, but this doesn't look like this has anything to do with Syncthing vulnerabilities. Instead it looks like a hack that uses a preconfigured Syncthing installation to transfer sensitive data. Disturbing nonetheless.

[-] [email protected] 74 points 1 year ago

It's a Phishing scam using a tool. It's no more exploiting SyncThing than TCP/IP.

[-] [email protected] 12 points 1 year ago

Bet they also utilize electricity these bastards! What's next? Physics? Oh the humanity!

[-] [email protected] 10 points 1 year ago

Just like using a remote desktop tool in a scam I suppose

[-] [email protected] 5 points 1 year ago

Looks like a specially modified SyncThing was just used for exfil.

[-] [email protected] 18 points 1 year ago

The article uses the word modified, but it sounds like it's just talking about configuring it and using it as normal.

[-] [email protected] 0 points 1 year ago
[-] [email protected] 79 points 1 year ago

The attack begins with a phishing email sent to the target

Okay bro im not reading past this its 2024

[-] [email protected] 20 points 1 year ago
[-] [email protected] 6 points 1 year ago

Your links do nothing! I'm invincible!

[-] [email protected] 8 points 1 year ago* (last edited 1 year ago)

1000016170

Best i can do is chineese bootleg subway surfers riddled with malware and ads.

[-] [email protected] 7 points 1 year ago

Gets drenched in liquid nitrogen

[-] [email protected] 4 points 1 year ago

Wow, that second one... 🤣

[-] [email protected] 63 points 1 year ago

Please dont link with a Google Amp link.

[-] [email protected] 12 points 1 year ago

They can't even type Syncthing right.

[-] [email protected] 5 points 1 year ago* (last edited 1 year ago)

It's a convenient file transfer/sync tool. Copying data has to happen somehow, I'm not surprised someone thought to use syncthing for that purpose >.<, since it can do that. But its not really different than any other tool here.

[-] [email protected] -2 points 1 year ago

This is upsetting

this post was submitted on 08 Jun 2024
130 points (85.3% liked)

Technology

73066 readers
2394 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS