Lmst

Ehi #Windows, questo lo sai fare? 🤣
Ogni tanto scopro cose nuove su #KDE

@computer @linux

#Linux #pc #qr #qrcode #QRcodeItalia

¡Crea códigos #QR únicos y profesionales SIN COSTE! 🎨

Este generador de #links QR gratuito te permite:

✅ Personalizar colores y logo
✅ Compartir en redes al instante
✅ Reforzar tu identidad visual

¡Crea tus códigos QR perfectos!

➡️ https://softandapps.info/2025/10/06/generador-de-links-qr-crea-y-personaliza-codigos-qr-gratis/

🇩🇪🇩🇪🇺🇦 En #Berlín han aparecido consignas revanchistas con un llamamiento a los alemanes a ir a la guerra en #Ucrania, informa Berliner Zeitung

En los panfletos, con la foto de prisioneros #nazis, figuran las inscripciones: "Toma revancha", "Junto a los libertadores #ucranianos", "Únete al Legión Internacional — ahora". También aparece un código #QR que lleva a la página de la unidad en el sitio oficial del 'gobierno' de Ucrania.

El diario precisa que los vecinos del barrio, hace dos semanas, arrancaban estos folletos por su cuenta, pero poco después volvieron a aparecer.

@Irinamar_Z 🇷🇺

https://t.me/Irinamar_Z/58853

#NPM #Package caught using #QR #Code to fetch #Malware

Newly discovered npm package 'fezbox' employs QR codes to retrieve cookie-stealing malware from the threat actor's server. The package, masquerading as a utility library, leverages this innovative steganographic technique to harvest sensitive data, from a compromised machine.

https://socket.dev/blog/malicious-fezbox-npm-package-steals-browser-passwords-from-cookies-via-innovative-qr-code

#it #security #privacy #engineer #media #tech #news

👾While 2D barcodes like QR codes have conventionally been designed for humans, to hold marketing content or share links, attackers have found a new purpose for them: hiding malicious code inside the QR code itself.👾

Last week, the Socket Threat Research Team identified a malicious package, 'fezbox', published to npmjs.com, the world's largest open-source registry for JavaScript and Node.js developers. The illicit package contains hidden instructions to fetch a JPG image containing a QR code, which it can then further process to run a second-stage obfuscated payload as a part of the attack.

⁉️At the time of writing, the package received at least 327 downloads, as per npmjs.com, before the registry admins took it down.⁉️

[ImageSource: Socket]

Malicious link stored backwards in the CJS file.

The malicious payload primarily resides in the dist/fezbox.cjs file of the package [taking version 1.3.0 as an example]. "The code itself is minified in the file. Once formatted, it becomes easier to read," explains Socket threat analyst Olivia Brown.

⁉️The conditionals in the code check if the application is running in a development environment, as explained by Brown.⁉️

"This is usually a stealth tactic. The threat actor does not want to risk being caught in a virtual environment or any non-production environment, so they may often add guardrails around when and how their exploit runs," states the researcher. "Otherwise, however, after 120 seconds, it parses and executes code from a QR code at the reversed string..."

👾Storing URL in reverse is a stealth technique used by the attacker to bypass static analysis tools looking for URLs [starting with 'http(s)://'] in the code, explains Brown.👾

[ImageSource: Socket]

QR code returned by the malicious URL.

👾Unlike the QR codes we typically see in marketing or business settings, this one is unusually dense, packing in far more data than usual. In fact, during Socket’s tests, it couldn't be reliably read with a standard phone camera. The threat actors specifically designed this barcode to ship obfuscated code that can be parsed by the package.👾

The obfuscated payload, explains the researcher, will read a cookie via document.cookie.

<https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie>

⁉️"Then it gets the username and password, although again we see the obfuscation tactic of reversing the string (drowssap becomes password)." said the researcher’s. "If there is both a username and password in the stolen cookie, it sends the information via an HTTPS POST request to https://my-nest-app-production[.]up[.]railway[.]app/users. Otherwise, it does nothing and exits quietly."⁉️

八達通正式支援日本 PayPay　遊日可用 Android 及 iPhone 掃碼付款　直接兌換日元至港元扣款
八達通今日（30 日）正式在手機 App 內的「旅遊」專區新增日本 PayPay 二維碼支付功能，支援 Android 及 iPhone 手機。用戶即日起可於日本數百萬間接受 PayPay 的大小商店付款，享受零手續費、優惠匯率及商戶折扣優惠。
#生活科技 #PayPay #qr code #八達通
 https://unwire.hk/2025/09/30/octopus-paypay-japan-payment-launch/life-tech/?utm_source=rss&utm_medium=rss&utm_campaign=octopus-paypay-japan-payment-launch

A new #era of #seamless #financial #connectivity between #Asia’s economic #powerhouses has begun. In a #landmark move for regional #commerce, travelers and #businesses between #China and #Indonesia can now bypass traditional #currency #exchange hurdles thanks to a newly launched #CrossBorder #QR #payment #system. https://cnbusinessforum.com/china-and-indonesia-launch-pioneering-cross-border-qr-payment-linkage/

Warum hat v143.0.1 von #Firefox für #iOS keinen #QR Scanner mehr? Ich prangere das an!

A new #era of #seamless #financial #connectivity between #Asia’s economic #powerhouses has begun. In a #landmark move for regional #commerce, travelers and #businesses between #China and #Indonesia can now bypass traditional #currency #exchange hurdles thanks to a newly launched #CrossBorder #QR #payment #system. https://cnbusinessforum.com/china-and-indonesia-launch-pioneering-cross-border-qr-payment-linkage/

#NPM package caught using #QRCode to fetch #cookie-stealing #malware

https://www.bleepingcomputer.com/news/security/npm-package-caught-using-qr-code-to-fetch-cookie-stealing-malware/

#cybersecurity #QR

A new #era of #seamless #financial #connectivity between #Asia’s economic #powerhouses has begun. In a #landmark move for regional #commerce, travelers and #businesses between #China and #Indonesia can now bypass traditional #currency #exchange hurdles thanks to a newly launched #CrossBorder #QR #payment #system. https://cnbusinessforum.com/china-and-indonesia-launch-pioneering-cross-border-qr-payment-linkage/

Small feature upgrade for my personal QR code generator. You can now also change color, size and effect. Because, why not?

https://defnull.de/qr/

#QR #QRcode #foss #noads

A new #era of #seamless #financial #connectivity between #Asia’s economic #powerhouses has begun. In a #landmark move for regional #commerce, travelers and #businesses between #China and #Indonesia can now bypass traditional #currency #exchange hurdles thanks to a newly launched #CrossBorder #QR #payment #system. https://cnbusinessforum.com/china-and-indonesia-launch-pioneering-cross-border-qr-payment-linkage/

🎯 Cần giao project open‑source (QRCoder .NET) cho người khác?
💡 Phổ biến 3 cách:
1️⃣ Thêm maintainer tuy vẫn là “owner”
2️⃣ Chuyển repo sang chủ mới – lo mất kiểm soát
3️⃣ Để người fork rồi archive
🧐 Vấn đề: tìm maintainer tin cậy & làm “vet” sao? Bạn đã làm như thế nào?

#opensource #maintainer #handover #opensource #projecthandover #csharp #dotnet #qr #developers #xephanhviệt #đangkiểmsoát