#lnk — Public Fediverse posts

Do i have to become a billionaire developer myself and pour all my newly gained riches into personally making downtown #LNK not suck, turn it into somewhere that feels lively and healthy instead of feeling like a dying city core?

Inside Kimsuky's Abuse of Legitimate Remote Control Tools Across Northeast Asia

Kimsuky conducted spear phishing campaigns against South Korean and Japanese targets during the first half of 2026, distributing LNK malware through OneDrive share links. The malicious files established scheduled tasks that periodically fetched PowerShell scripts from command-and-control servers to profile systems, exfiltrate Thunderbird and Outlook email data, and log keystrokes. The threat actor installed legitimate remote control software including Chrome Remote Desktop and AnyDesk to evade antivirus detection and maintain multiple access channels. A malicious Chrome extension designed to steal Gmail data exhibited characteristics of AI-generated code, featuring Korean comments, debug strings, and Unicode emoji throughout. The operation employed rotating infrastructure and compromised legitimate Korean servers as command-and-control nodes to impede tracking efforts.

Pulse ID: 6a873495a873c0ec3c6d9880
Pulse Link: https://otx.alienvault.com/pulse/6a873495a873c0ec3c6d9880
Pulse Author: AlienVault
Created: 2026-08-20 17:08:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AnyDesk #Asia #Chrome #ChromeExtension #CyberSecurity #EDR #Email #ICS #InfoSec #Japan #Kimsuky #Korea #LNK #Malware #OTX #OpenThreatExchange #Outlook #Phishing #PowerShell #RAT #SouthKorea #SpearPhishing #UK #bot #AlienVault

I hope you've had a chance to observe a spider web this morning. They're dew-covered and beautiful this morning thanks to the fog. #LNK

After 3 inches of rain yesterday, the fog this morning is very dense with visibility of maybe a block and a half.
#fog #weather #NEwx #Nebraska #LNK

Operation QUICSILVER: China-Nexus Actor Targets Myanmar Diplomats via VHD-Delivered Go Backdoor

A China-nexus threat actor is targeting Myanmar government personnel and diplomats through Operation QUICSILVER, delivering malware via Virtual Hard Disk files disguised as JPEG images. The campaign uses Burmese-language lures impersonating Myanmar's Information Technology and Cyber Security Department, including graduation ceremony invitations. The multi-stage infection chain begins with a malicious LNK file that abuses ftp.exe to execute scripts, reconstructs payloads from split files, and deploys QUICAgent, a custom Go-based backdoor. The implant retrieves C2 infrastructure through Cloudflare Workers, communicates over HTTP/3 using QUIC protocol, and employs RC4 encryption. Deleted documents recovered from the VHD reveal interest in ASEAN affairs, BIMSTEC, and Myanmar diplomatic activities. Three related campaigns were identified between April and July 2026, sharing similar TTPs and infrastructure.

Pulse ID: 6a8322d9d5990a6d109e0a87
Pulse Link: https://otx.alienvault.com/pulse/6a8322d9d5990a6d109e0a87
Pulse Author: AlienVault
Created: 2026-08-17 15:03:53

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #China #Cloud #CyberSecurity #Encryption #Government #HTTP #ICS #InfoSec #InformationTechnology #LNK #Malware #Myanmar #OTX #OpenThreatExchange #RAT #bot #AlienVault

Just toured Robber’s Cave in Lincoln, Nebraska. The cave is a sandstone one as Nebraska used to be a shallow sea. There was lots of local history involving horse thieves, a brewery, gambling, prostitution, etc. The cave was supposedly 55°F, but you do some hiking and climbing so that it feels much warmer.

#cave #RobbersCave #LNK #LincolnNebraska #tourism #Nebraska

Priced out in Lincoln, Nebraska: How the capital city became the state’s hardest place to afford a home

Lancaster County’s stagnant wages and high prices have made its homes the least affordable in the state.

#housing #LNK #LincolnNebraska #affordability

https://flatwaterfreepress.org/priced-out-in-lincoln-how-the-capital-city-became-the-states-hardest-place-to-afford-a-home/

Ain't nobody in #LNK eating finer than my boy and me tonight.

Integrating AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM

The Kimsuky threat group has integrated artificial intelligence capabilities into its attack operations, establishing local large language model environments using Ollama, GPT4All, and Msty. Evidence indicates the group is accumulating technologies to incorporate AI across attack operations, including AI-generated decoy documents and retrieval-augmented generation for document analysis. The campaign, dubbed Operation GitPower, continues targeting foreign diplomatic missions and sectors including military, security, and virtual assets. Attacks utilize malicious LNK files contained in ZIP archives, executing obfuscated PowerShell scripts that abuse Git-based repositories as command-and-control infrastructure. The group distributes encrypted AsyncRAT payloads disguised as image files through GitHub. Linguistic indicators including North Korean vocabulary patterns such as "싸이트", "가입리력", and "로출되였는지" support attribution to North Korean state-sponsored operations under the Reconnaissance General Bureau.

Pulse ID: 6a79d612a1f9e2ac4e744aa8
Pulse Link: https://otx.alienvault.com/pulse/6a79d612a1f9e2ac4e744aa8
Pulse Author: AlienVault
Created: 2026-08-10 13:45:54

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AsyncRAT #CyberSecurity #GitHub #InfoSec #Kimsuky #Korea #LNK #Military #NorthKorea #OTX #OpenThreatExchange #PowerShell #RAT #UK #ZIP #bot #AlienVault

Analysis of the Connection Between Xctdoor and Past CRAT Attack Cases

A threat actor designated as Larva-26005, linked to North Korea, has been distributing Xctdoor backdoor malware to users in Korea since at least 2020. The campaign evolved from using CRAT malware alongside Hansom ransomware to deploying Xctdoor variants written in C++ and Go. Distribution methods include spear phishing emails with LNK files disguised as documents and security software installers. The malware utilizes DLL side-loading, deploys multiple script-based droppers, and installs XcLoader and Xctdoor backdoors in AppX package paths. Both CRAT and Xctdoor share identical code obfuscation techniques and installation paths. The backdoors provide comprehensive remote access capabilities including file operations, command execution, keylogging, screenshot capture, and credential theft. Recent attacks target corporate users through compromised web servers and ERP solutions.

Pulse ID: 6a748055fc990bd246b92b6c
Pulse Link: https://otx.alienvault.com/pulse/6a748055fc990bd246b92b6c
Pulse Author: AlienVault
Created: 2026-08-06 12:38:45

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #CyberSecurity #Email #InfoSec #Korea #LNK #Malware #NorthKorea #OTX #OpenThreatExchange #Phishing #RAT #RansomWare #SpearPhishing #bot #AlienVault

Gardeners Encouraged to Share Extra Produce with Lincoln Food Pantries | KLIN https://www.allforgardening.com/1917231/gardeners-encouraged-to-share-extra-produce-with-lincoln-food-pantries-klin/ #garden #gardening #huskers #Lincoln #LNK #Nebraska #news #Radio

Analysis of a Phishing Email Attack Case

The Larva-24009 threat actor, also known as HeptaX, has been conducting phishing email campaigns since 2023, targeting Korean and global users to install malware. Active through 2026, the actor uses LNK files disguised as documents with topics like hospital surveys, blockchain, project proposals, and resumes to target enterprises. Upon execution, obfuscated PowerShell commands deploy backdoors and download additional scripts from command-and-control servers. The attack chain includes persistence mechanisms via Task Scheduler, remote access through QuasarRAT and UltraVNC, and information theft using NirSoft tools, custom keyloggers, and screenshot capabilities. The actor also creates backdoor RDP accounts and exfiltrates credentials, browser data, and user files. Version 2.1 of their Notifier malware utilizes Telegram API for status reporting. The campaigns demonstrate consistent tactics and infrastructure across multiple years of operation.

Pulse ID: 6a70c6f0d15cdde2874f628e
Pulse Link: https://otx.alienvault.com/pulse/6a70c6f0d15cdde2874f628e
Pulse Author: AlienVault
Created: 2026-08-03 16:50:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #BlockChain #Browser #CyberSecurity #Email #Hospital #ICS #InfoSec #InformationTheft #KeyLogger #Korea #LNK #Malware #OTX #OpenThreatExchange #Phishing #PowerShell #RAT #RDP #SMS #Telegram #VNC #bot #AlienVault

If you're looking for an in-person tech support role in #LNK with a starting salary in the $65k-$70k range, you may be interested in this job in the Legislative Technology Center: https://nebraskalegislature.gov/job_board/index.php?page=show&listing_id=54

RE: https://lincolnite.net/@mrwilson/116975565410116977

The meal was lovely. I appreciate that Chef Lawrence visits each table to introduce himself and talk about the day's specials. We had salmon cakes, ratatouille, and the pulled pork pasta special, all of which we enjoyed. I'm eager to get back and try more of the menu. #LNK

I am so looking forward to my first visit to L's Kitchen this evening. I hear great things about it. #LNK

Throw those windows open today, #LNK! Air out the joint and enjoy the pleasant weather.

I appreciate what the City of #LNK tried to do with its minimum wage ordinance, but I really hope it doesn't intend to waste resources on fighting its loss in court. The case is a certain loser. Put those resources to good use elsewhere.

I was looking at Pinewood Bowl events and I noticed that the John Mulaney / Mike Birbiglia show still has 100s of tix remaining. I'm surprised. Shouldn't a show like that be expected to sell out?

Now that I look, ALL of the shows have 100s of tix remaining. I thought PB shows usually sold out? #LNK

Bar poker? In this economy?

(Playing poker at Grata tonight. It's been a minute.)

#poker #TexasHoldEm #LNK

Judging by the amount of weight I've lost today, it's no real gamble to wager that our pal Dewpoint-in-the-70s has returned to #LNK.

Hey #LNK gardeners, how's the insect situation in your gardens? I feel like I'm seeing far fewer insects than usual -- fewer bees, fewer wasps, fewer beetles, fewer spiders (I know, not insects)... Heck, even the obnoxious Japanese beetles seem to be turning in a half-ass effort this year.

The possible lone exception is lightning bugs, which seem to be having a small resurgence.

Be aware, #LNK.

For the few of you in #LNK who aren't at Memorial Stadium to watch the Bananas take on the Firefighters tonight: https://www.youtube.com/live/9OiifgilVpY