#gayint — Public Fediverse posts

Yes, fuck Cloudflare ( especially while they're having issues ), but maybe don't go looking for knock-off versions of it either.

For example: Y'all might want to block "cloudflareserver[0-9]\..*". So far the only apex domains I see are "cloudflare[1-4]\.(?:com|space|site)" but they're relatively new so I wouldn't be surprised to see more pop up.

Or you can just block AS20068 outright. That ASN is already in the GAYINT block list :yassquatch: :

https://intel.gayint.org/

#GAYINT #fuckCloudflare

We found some nerds going to Blue Hat this week so we gave them some stickers to hand out. If you want one, you'll have to go around asking people what they think about MOIST GRASSHOPPER.

#GAYINT #blueHat

Hey there lovelies, it's your GAYINT Supportive Internet Auntie again!

Today is the Trans Day of Visibility, and from looking at my feed, it seems like y'all have some complicated feelings about it. Are you visible enough? Are you too visible? Does "passing" make you less trans, or less valid?

I can't answer these questions for you, darling. I wish I could. Here's what I can tell you:

I don't know precisely what you're going through. But as a cis woman who's spent lots of time in hyper-masculine environments, I've seen the power of simply visibly existing. So, for those of you who choose to be visible, remember the power that simply being seen has.

If you feel like you're not doing enough? Remember to put on your own mask first. Things are *scary* out there, and your survival is important. There is nothing wrong with doing the "safe" thing.

If you are proud of being trans, if you can't imagine life any other way, I am so happy that you find pride in your identity!

If being trans is just something you had to pass through on your way to being able to fit into your skin a little better, and you don't really feel like it's your identity? I am so glad that you found a path that worked for you!

Regardless of whether or not you feel like you're doing trans "right", the important thing I want you to know is that you are precisely as trans as you are. Nothing anyone says can change that for you.

Trans women are women.
Trans men are men.
Trans nonbinary people aren't confused, they know precisely who they are.

Love and virtual hugs!
#GAYINT #FURINT #TDOV #TransgenderDayofVisibility

#GAYINT #T4T spotted in the wild at Microsofts HQ :100_gay:

#GAYINT #T4T spotted in the wild at Microsofts HQ :100_gay:

#GAYINT #T4T spotted in the wild at Microsofts HQ :100_gay:

#GAYINT #T4T spotted in the wild at Microsofts HQ :100_gay:

Here is a list of the @gayint updated and modernised APT group identifiers:

https://blog.gayint.org/threatActorCrosswalk.html

I'm just a little disappointed there isn't a MOIST FLANGE or NEON CAPYBARA APT as yet 😉

#APT #ThreatActors #GAYINT #Nomenclature

Cartography is our passion. :gayint:

https://pewpew.gayint.org/

https://masto.hackers.town/@earthshine/116092696658639312

#GAYINT #PewPew

We have provided stickers to minions who will be at Team Cymru's RISE USA conference in San Francisco this week. Keep an eye out for free GAYINT stickers around the con! #GAYINT #ThreatIntel #Stickers #TeamCymru #RISEUSA #RISEUSA2026

@cR0w

We braved LinkedIn so you don't have to. IOCs below:

Windows Samples 587d343b3d9e1201ba5a8fdd7a3a3f809052aa7dfba3f7c557189ef63a999f08

961b6184447ab4cb76295ea2f324e227aff459d0e68849c46c49ecdf641e2551

36255601ca5d6882d34c0d53a5a816ef0b979828038f9caf5f1a2afdfcffc329

67b487ddd924e078144bb9e2c48fe8b7924221f1e55c3f2df67d65daa3415fd4

6034d6aa9a13378be6cd611cb5495b50eb7dc8463ef435e3b6d8c68a57e9b8e1

5b9017e700d3dd26e18043fb6e041241c704bcc08608a9f5898212dc7e722198

0e63a49230d6ad3c05b57c9b35eb98b21f75cc15ff135008c1087c69478beea6

e7ad1b1974e8f04949936545d1297c4e3b1334a9da0ae31ab1d508174197bbce

98dc0cd6290566866f3b1682335c680b9bbdb1020fc52e47315fd33eb9fa221e

8b37116210f70e7768c736d657fcc143a1f009c9a69194ccc338d6e8dedb3c07

88553c3e3df81a66927480fd1029d577c7805c0dd20114807a6f41b50a230e96

041dca4a1d8c80f05c399dd750acf026ed5f94f1da08dc4f0f0d0ba9884916ff

63150c955be4158c9b9e111de114daa59a4ffd1eab92a469c1f09dce84a698c6

a30609489c111decdd3f8693cff016d9a8f629a0d85fdac858add7698f9b2659

c1b67a62239f328b98f9d2a168565754b6779918ddaab74bb58020b95f3ec7cc

180a40b7758b9b053f7f3f41511275f94b01eee88dd9b93edf003a607ee655a0

Linux Samples:
d92377d14dc2c3cd818fcf3a37343ec30a3495b9ba2eedaa2d41b698ee159b08

c5ffa5ac08f0feba11d767d1b2d8b096b729e90cc2874e0c8f624a5a68466131

#WorldLeaks #RustyRocket #Ransomware #ThreatIntel #GAYINT #FURINT #IOC

I call foul! Stolen from #gayint!! :100_gay: 🌈💥

https://www.securityweek.com/rsac-releases-quantickle-open-source-threat-intelligence-visualization-tool/

#pewpew #rsac

Don't forget to put your puppygirls in a quiet room tonight. Fireworks can be loud and scary for them. #GAYINT #FURINT

As you may know, we do our fair amount of bitching here at GAYINT which made it difficult to narrow it down to one thing for a Festivus post. But we did. So let the airing of grievances commence. :gayint:

https://blog.gayint.org/festivus.html

#GAYINT #FURINT #festivus

JavaScript libraries and frameworks are bad and the modern Internet should feel bad.

Edit because I forgot to add :gayint:

https://blog.gayint.org/react.html

#GAYINT #FURINT

Look, we're not mad. We're just disappointed that some of y'all weren't listening last time and let this happen again. :8bitrainbow:

https://blog.gayint.org/shaiHulud2.html

#GAYINT #FURINT

Today we observe the Trans Day of Remembrance, a time to honor the trans and gender diverse people who have been taken from us due to transphobia. While we here at GAYINT headquarters prefer to keep things light, this is a serious issue. To all our trans and gender diverse friends: We see you. You are not alone. Your existence is beautiful and we will never stop fighting for a better world where we all can feel safe. :Fire_Trans:

:gayint:

Resources:
https://translifeline.org/hotline/
https://www.thetrevorproject.org/

#TransDayofRememberance #GAYINT

The furrys we keep in the basement have fixed the link preview!

#GAYINT #FURINT

Heads up if you're unfortunate enough to be an M365 / Entra shop. There is a TOAD / phishing campaign going on targeting M365 tenants and because the senders are also MS tenants, they tend to be allowed.

https://blog.gayint.org/entraPhishing.html

#GAYINT #FURINT #threatIntel

#GAYINT #SOONTM :ablobcatwink:

Libs you are legally allowed to lib out for the next 24hrs. Go explore your love for tequila and call out sick. Fuck corporations. Enjoy your PTO. #GAYINT #FURINT #DicksOutLibOut

https://www.youtube.com/watch?v=bEvVSpN0BXg

#TransRightsAreHumanRights #GAYINT #FURINT

BREAKING NEWS: After a successful DICK REMOVAL the United States has transed itself into a populist working class socialist country. TRANSGENDER FOR EVERYONE!!!! #FuckCuomo #FuckDonaldTrump #DICKREMOVAL #GAYINT #FURINT

Hey friends, shit's fucked. Lots of people are struggling. And a lot of people who can help don't know where to start. So to kick off some extra giving, here's an offer: DM us a receipt of a donation you made for $50USD or more to a food bank and we'll mail you a GAYINT sticker. While supplies last. We only have like 50 stickers left from the first batch but more is on order already. Is that a lot for a sticker? Yes. It's just a fucking sticker. But helping direct people to a way to help their community is priceless.

Feeling super generous? Or maybe you just want to show off? DM a receipt showing a donation of $1000USD or more to a food bank and we'll work on getting you a threat actor name of your own in the upcoming GAYINT Threat Actor Taxonomy v2.

Can't donate? That's cool. Boost this toot and help where you can. Also, food banks, as well as the entire food distribution chain in the US, always need more volunteer labor.

Don't know of a good food bank local to you? Check here: https://www.feedingamerica.org/find-your-local-foodbank/all-food-banks

Currently we can only guarantee delivery of stickers to people with US addresses. International delivery isn't something we are currently prepared to do. Sorry. But at least you likely live in a country where this shit isn't necessary.

#GAYINT #FURINT #benevolentNerds

#GAYINT stickers are available by the juices at #BSidesPDX. :rainbow_fist:

#GAYINT stickers are available by the coffee at #BSidesPDX. 👊🇺🇸💥

We know why y'all are really here. :neocat_kisser:

#GAYINT #FURINT

Since it's apparently still Cybersecurity Awareness Month, here's another tip: Destroy your edge. All of it. Rip it out. It's all bad and all the vendors should feel bad.

Oh, and patch your shit. It's #patchTuesday.

#cyberSecurityAwarenessMonth #justTheTip #GAYINT

In true XKCD 927 fashion, here is the first public release of part of the GAYINT Threat Actor Naming Crosswalk. Feel free to start using our names in your reporting. It's better than a lot of what's out there already. It is a living document so it will be updated as more shit goes sideways in this horrible field of ours.

https://blog.gayint.org/threatActorCrosswalk.html

#GAYINT #FURINT

RE: https://infosec.exchange/@greynoise/115334901922511531

We like this idea. So here, have a similar list of username and password combinations currently in use against Cisco SSL VPN portals:

https://blog.gayint.org/intel/ciscoVpnCreds.txt

Currently our count is only ~82,000 unique combinations but it's still climbing.

#GAYINT #FURINT

Is it really still Cybersecurity Awareness Month? Okay, here's another tip: Patch your shit. Constantly. Don't wait for your systems to force you into it. Make a habit of routinely checking for updates.

#cyberSecurityAwarenessMonth #justTheTip #GAYINT

22,387 IP addresses that have been observed attacking Palo Alto GlobalProtect portals recently have been published to the GAYINT IOC RSS feed. So have 158 IPs observed attacking Cisco SSL VPN portals. Our visibility there is a little lower but it should still help if you manage those systems.

#GAYINT #FURINT

We may be copypasta proficient, but that does not mean we don't put out. If you follow our IOC RSS Feed, you should see a list of IPs we've recently observed performing attacks against various services. The vast majority of IPs in this particular list were performing password sprays and brute force attacks against VPN portals in the past week.

Happy hunting.

https://blog.gayint.org/observedIps.html

#GAYINT #FURINT

Guess who has four paws, a tail, and access to the GAYINT blog...

https://blog.gayint.org/iocs.html

#GAYINT #FURINT

Sorry for the delay. Our puppy girl has puppy brain and can't remember what she was going to toot. Stand by. #GAYINT #puppygirl

Chat, one of our puppygirls is asking for toot privileges. Should we give them to her? #GAYINT #puppygirl

It's a meetings in bed kinda day #eepy #gay #gayint

#GAYINT #FURINT #CATTE

uwu haiiii my furry friends! We know it’s Fursuit Friday (gotta get down on Friday) but fedi is being targeted AGAIN. We’re sick and tired of service providers doing a shit job at protecting the series of tubes. We kindly ask that you send them an email using the phishing report template below.

...

But GAYINT I don’t like email!

You can use the webforms here instead:

Cloudflare: https://abuse.cloudflare.com/phishing

Linktree: https://linktr.ee/s/about/trust-center/report

Cheapy Host: We can’t find one...they’re extremely sus

Phishing Report Template:

To: [email protected], [email protected], [email protected]

Subject: Abuse Report – Mastodon

Hello,

The following phishing campaign is using your infrastructure to attack internet users of the social media network known as Mastodon.

The threat actor is using the linktree url https://tr[.]ee/mastodonverif to direct users to the domain https://mastodon[.]envio84264[.]pro which uses Cloudflare’s nameservers and Cheapy Hosts servers to host a credit card phishing site pretending to be from Mastodon support.

Please stop providing services to criminals.
Thank you

#GAYINT #FURINT

@cR0w @reverseics #GAYINT and #FURINT solidarity