Ollama Abuses: Trading and Content Farms https://sudonull.com/ollama-abuses-trading-and-content-farms
Analysis of Exploitation of Open Ollama Instances: from health-check to Generation of Trading Code and SEO. Protection with Honeypots, IOC and MITRE ATT&CK. Learn How Scanners Use Your GPU.
Telegram Phishing: Analysis of the Scheme with Polls https://sudonull.com/telegram-phishing-analysis-of-the-scheme-with-polls
Technical Analysis of Phishing Attack in Telegram via Fake Contests. IOC, Redirect Chain, Scripts. Protect Accounts: Instructions for Developers. Learn How to Block.
RAT in Axios npm: phantom dependency and Claude Code leak https://sudonull.com/rat-in-axios-npm-phantom-dependency-and-claude-code-leak
Analysis of attacks on Axios and Anthropic: RAT via postinstall, sourcemap leak of 512k lines. Checks, IOC, clean-room Python implementation. For middle/senior dev.
GlassWorm: Zig-dropper in WakaTime infects IDE https://sudonull.com/glassworm-zig-dropper-in-wakatime-infects-ide
Learn how GlassWorm uses native Zig-binaries to infect VS Code, Cursor and other editors. IoC, trade-offs and cleanup steps. Check extensions now.
PhaaS collector.js: fingerprinting sandboxes https://sudonull.com/phaas-collector-js-fingerprinting-sandboxes
Analysis of PhaaS platform with collector.js: WebGL GPU, WebRTC IP leak, DevTools detection. VPN bypass and automation techniques for IT specialists. Study IOC and countermeasures.