🚨 Threat Intelligence | The StealC Info-Stealing Chain Behind the Qwen Impersonation Repository SlowMist Security Team identified a #GitHub# repository impersonating local quantized weights for Qwen 3.8 27B. A real Q4_K_M 27B package should exceed 16 GB. The asset delivered was only 487 KB — no GGUF weights, just three files: Application.cmd, a renamed LuaJIT interpreter, and an obfuscated Lua script disguised as cert.txt. The official #Qwen# project was not compromised. The repo kept the look of a normal offline model project, while the malicious ZIP sat in assets/. After deobfuscation, the script collects host data, takes a screenshot, and POSTs them to C2. When the hardcoded server fails, it reads a fallback C2 from a Polygon contract via eth_call, so operators can rotate infrastructure with a single on-chain transaction. Preserved C2 responses then delivered an inner payload we attribute to #StealC#, targeting: 🔹 Browser logins, cookies, and history — including a Chrome App-Bound Encryption bypass 🔹 Email, WinSCP, and Steam credentials 🔹 Wallet-related files and extension data, dispatched by server-side tasks MistEye reconstructed the multi-stage chain and compared 29 similar ZIPs across 23 repositories using the same Lua delivery stack. Between two collection dates, repositories, filenames, the outer PE, and the AES key had already rotated. A 27B model that downloads in 487 KB is not a model. Inspect asset size and unpack downloaded packages before running them. Read the full analysis 👇

Stealing phones in London is getting far harder. Record City Hall funding is helping the Met crackdown on the £50m-a-year trade in stolen phones and tackle all involved – from the street robbers, to the middlemen who unlock devices and sell them on. We will not let up in our pursuit of these criminals and we'll continue working with the mobile phone industry to make stolen phones harder to use, sell and profit from.

Steal this prompt to find 100 companies that actually have a reason to buy from you right now: That’s why their outreach gets ignored. A better way is to find companies already showing signs they might need what you sell. Here’s how to build that list with Polar: - Open a fresh Google Sheet - Add columns for the company, buying signal, source, decision-maker, contact information and outreach angle - Open Give it this prompt: “Help me find 100 companies that are likely to need [describe your product]. Only include companies that match this ICP: • Industry: [industry] • Location: [location] • Company size: [employee range] Each company must have shown at least one buying signal during the last 30 days: • Raised funding • Started hiring for relevant roles • Launched a new product • Expanded into a new market • Publicly discussed a problem our product solves For every company, find the most relevant decision-maker and add: • Company name and website • Buying signal • Source and date • Decision-maker’s name and role • LinkedIn profile • Publicly available work email • A personalized outreach angle based on the signal Add everything to the open Google Sheet. Never invent missing information. Write NOT_FOUND if something cannot be verified.” Instead of contacting random companies and hoping they care, you now have 100 accounts with an actual reason to buy. Save this prompt for your next outbound campaign.

Steal this idea. Allow people+agents to build custom hardware devices simply by prompting. Here's how you could make it happpen: - Index components available from partners (raspberry pi, Arduino, sensors, etc.) - Get a 3D printer or CNC machine - Expose catalogue + APIs for machines to agents, and let them use what's available to help make their human's request a reality. One prompt, order is assembled, human reviews + pays and the custom hardware comes assembled to your home in a day. It'd be so cool to have physical hardware made as easily as software, would open up so many possibilities!

Stealth Company is now listed for sale 🔁 MRR: $828/mo 💰 Revenue (30d): $2.1k 💵 Total revenue: $3.3k 🏷 Asking price: $40k 📊 Multiple: 1.6x ARR 📈 Growth (30d): +891% 💸 Profit margin: 99% 💳 Active subs: 170

Stealth Company just joined TrustMRR 🔁 MRR: $828/mo 💰 Revenue (30d): $2.1k 💵 Total revenue: $3.3k 📈 Growth (30d): +891% 💸 Profit margin: 99% 💳 Active subs: 170