#scriptkiddies — Public Fediverse posts

Yes, this happened:

May 23 09:54:39 skapet sshd-session[44948]: Failed password for invalid user root/1234567 from 109.248.231.249 port 52134 ssh2

Must have worked *somewhere* at least *once*, right?

#cybercrime #ssh #passwordgroping #passwordguessing #morons #scriptkiddies

I created the DNS record for a new web site 4 hours ago. It's already getting requests for blah-blah/wp-includes/wlwmanifest.xml etc... (I don't use wordpress) 😒
#webdev #scriptkiddies

Ah, yes, the illustrious "Dirty Frag"—because apparently, Linux's new hobby is collecting root #exploits like Pokémon. 🎮🐧 Quick, patch your servers before the script kiddies finish their juice boxes! 🍹💻
https://www.copahost.com/blog/dirty-frag-cve-2026-43284/ #DirtyFrag #Linux #PatchYourServers #ScriptKiddies #CyberSecurity #HackerNews #ngated

Ah, yes, the illustrious "Dirty Frag"—because apparently, Linux's new hobby is collecting root #exploits like Pokémon. 🎮🐧 Quick, patch your servers before the script kiddies finish their juice boxes! 🍹💻
https://www.copahost.com/blog/dirty-frag-cve-2026-43284/ #DirtyFrag #Linux #PatchYourServers #ScriptKiddies #CyberSecurity #HackerNews #ngated

Ah, yes, the illustrious "Dirty Frag"—because apparently, Linux's new hobby is collecting root #exploits like Pokémon. 🎮🐧 Quick, patch your servers before the script kiddies finish their juice boxes! 🍹💻
https://www.copahost.com/blog/dirty-frag-cve-2026-43284/ #DirtyFrag #Linux #PatchYourServers #ScriptKiddies #CyberSecurity #HackerNews #ngated

Ah, yes, the illustrious "Dirty Frag"—because apparently, Linux's new hobby is collecting root #exploits like Pokémon. 🎮🐧 Quick, patch your servers before the script kiddies finish their juice boxes! 🍹💻
https://www.copahost.com/blog/dirty-frag-cve-2026-43284/ #DirtyFrag #Linux #PatchYourServers #ScriptKiddies #CyberSecurity #HackerNews #ngated

Ah, yes, the illustrious "Dirty Frag"—because apparently, Linux's new hobby is collecting root #exploits like Pokémon. 🎮🐧 Quick, patch your servers before the script kiddies finish their juice boxes! 🍹💻
https://www.copahost.com/blog/dirty-frag-cve-2026-43284/ #DirtyFrag #Linux #PatchYourServers #ScriptKiddies #CyberSecurity #HackerNews #ngated

Attack of the killer script kiddies | The Verge https://www.theverge.com/ai-artificial-intelligence/915660/mythos-script-kiddies-hackers-attack-cybersecurity-ai #cybersecurity #AI #Mythos #scriptkiddies #AutomatedVulnerabilityScanners

yes, friends, this happened:

Apr 18 11:42:19 byteheap sshd-session[51555]: Failed keyboard-interactive/pam for invalid user mymagicpass228 from 178.20.210.185 port 10858 ssh2

#ssh #passwordguessers #passwordgropers #sshgropers #cybercrime #morons #groperbots #scriptkiddies

yes, friends, this happened:

Apr 18 11:42:19 byteheap sshd-session[51555]: Failed keyboard-interactive/pam for invalid user mymagicpass228 from 178.20.210.185 port 10858 ssh2

#ssh #passwordguessers #passwordgropers #sshgropers #cybercrime #morons #groperbots #scriptkiddies

yes, friends, this happened:

Apr 18 11:42:19 byteheap sshd-session[51555]: Failed keyboard-interactive/pam for invalid user mymagicpass228 from 178.20.210.185 port 10858 ssh2

#ssh #passwordguessers #passwordgropers #sshgropers #cybercrime #morons #groperbots #scriptkiddies

yes, friends, this happened:

Apr 18 11:42:19 byteheap sshd-session[51555]: Failed keyboard-interactive/pam for invalid user mymagicpass228 from 178.20.210.185 port 10858 ssh2

#ssh #passwordguessers #passwordgropers #sshgropers #cybercrime #morons #groperbots #scriptkiddies

yes, friends, this happened:

Apr 18 11:42:19 byteheap sshd-session[51555]: Failed keyboard-interactive/pam for invalid user mymagicpass228 from 178.20.210.185 port 10858 ssh2

#ssh #passwordguessers #passwordgropers #sshgropers #cybercrime #morons #groperbots #scriptkiddies

A kiddie and their script, part N of N!

Mar 9 17:54:52 skapet sshd-session[97161]: Failed password for invalid user %company% from 20.83.3.189 port 17677 ssh2

#scriptkiddies #sshgropers #passwordguessing #cybercrime #ssh #security

And if you need some reading material, https://nxdomain.no/~peter/hailmary_lessons_learned.html (or g-tracked https://bsdly.blogspot.com/2013/10/the-hail-mary-cloud-and-lessons-learned.html)

👨‍💻🎨 #Hackers are now Picasso with Visual Studio Code, apparently! The article tries to convince us that evil tech wizards are using VS Code to wreak havoc, but let's be real—it's probably just a bunch of script kiddies who discovered copy-paste. 🙄🔍
https://www.jamf.com/blog/threat-actors-expand-abuse-of-visual-studio-code/ #art #VSCode #techhumor #scriptkiddies #copyandpaste #HackerNews #ngated

This is what a #bugbounty hunt looks like, right? https://nxdomain.no/~peter/20251206_bugbounnty_hunter_at_work.txt #securityresearch #scriptkiddies #morons #wordpress #passwordgroping

This is what a #bugbounty hunt looks like, right? https://nxdomain.no/~peter/20251206_bugbounnty_hunter_at_work.txt #securityresearch #scriptkiddies #morons #wordpress #passwordgroping

This is what a #bugbounty hunt looks like, right? https://nxdomain.no/~peter/20251206_bugbounnty_hunter_at_work.txt #securityresearch #scriptkiddies #morons #wordpress #passwordgroping

This is what a #bugbounty hunt looks like, right? https://nxdomain.no/~peter/20251206_bugbounnty_hunter_at_work.txt #securityresearch #scriptkiddies #morons #wordpress #passwordgroping

This is what a #bugbounty hunt looks like, right? https://nxdomain.no/~peter/20251206_bugbounnty_hunter_at_work.txt #securityresearch #scriptkiddies #morons #wordpress #passwordgroping

@web3isgreat

Ehm, nobody asking the real question of "why was this 'attack' even possible?" after all it was already known and therefore none of the nodes should have accepted these malicious transactions/blocks to begin with.

How many other known attacks (still) work against #cardano? Is now the question a lot of people will have.

Lets see how many #scriptkiddies will find interest in that project now.

Going to be fun watching :)

#infosec

Hack to #school: #Parents told to keep their little #scriptkiddies in line
Information Commissioner's Office (ICO) looked at 215 data breach cases at #schools between Jan 2022 - Aug 2024, noting that 57% were caused by students, and almost a third (30%) were caused by stolen login details.
In the case of stolen logins – either by #students seeing others input credentials and remembering or simply reading them noted down on paper – #pupils were behind 97% of these attacks.
https://www.theregister.com/2025/09/12/students_school_cyberattacks/

Hack to #school: #Parents told to keep their little #scriptkiddies in line
Information Commissioner's Office (ICO) looked at 215 data breach cases at #schools between Jan 2022 - Aug 2024, noting that 57% were caused by students, and almost a third (30%) were caused by stolen login details.
In the case of stolen logins – either by #students seeing others input credentials and remembering or simply reading them noted down on paper – #pupils were behind 97% of these attacks.
https://www.theregister.com/2025/09/12/students_school_cyberattacks/

Hack to #school: #Parents told to keep their little #scriptkiddies in line
Information Commissioner's Office (ICO) looked at 215 data breach cases at #schools between Jan 2022 - Aug 2024, noting that 57% were caused by students, and almost a third (30%) were caused by stolen login details.
In the case of stolen logins – either by #students seeing others input credentials and remembering or simply reading them noted down on paper – #pupils were behind 97% of these attacks.
https://www.theregister.com/2025/09/12/students_school_cyberattacks/

Hack to #school: #Parents told to keep their little #scriptkiddies in line
Information Commissioner's Office (ICO) looked at 215 data breach cases at #schools between Jan 2022 - Aug 2024, noting that 57% were caused by students, and almost a third (30%) were caused by stolen login details.
In the case of stolen logins – either by #students seeing others input credentials and remembering or simply reading them noted down on paper – #pupils were behind 97% of these attacks.
https://www.theregister.com/2025/09/12/students_school_cyberattacks/

Hack to #school: #Parents told to keep their little #scriptkiddies in line
Information Commissioner's Office (ICO) looked at 215 data breach cases at #schools between Jan 2022 - Aug 2024, noting that 57% were caused by students, and almost a third (30%) were caused by stolen login details.
In the case of stolen logins – either by #students seeing others input credentials and remembering or simply reading them noted down on paper – #pupils were behind 97% of these attacks.
https://www.theregister.com/2025/09/12/students_school_cyberattacks/

While procrastinating something, I noticed a wave of script kiddie traffic with a browser ID string matching a Github hosted "security scanning" project, but one without contact info. #github #security #scriptkiddies

Should I

Creator of 1995 #Phishing Tool 'AOHell' On #Piracy , #ScriptKiddies , and What He Thinks of #AI - Slashdot https://idle.slashdot.org/story/25/07/27/0015211/creator-of-1995-phishing-tool-aohell-on-piracy-script-kiddies-and-what-he-thinks-of-ai?utm_source=rss1.0mainlinkanon&utm_medium=feed

@Codeberg In later issue titles (not shown) they’ve foregone the AI and just default to the same racial slur. (So you know what kind of lowlife scum are behind the attack.) It’s not just my repositories either so I wouldn’t visit Codeberg until this is dealt with if I were you unless you want to subject yourself to that crap. I’ll let you all know when it’s been dealt with.

#codeberg #AI #spam #technofascism #bigots #scriptKiddies

Cybersecurity Isn’t a Fad—It’s a Fight #CybersecurityNoobs #ScriptKiddies #CyberSecurityEngineers #PenetrationTesting #CyberSkills #NoobsInCyberSecurity #DeadSwitch #LearnCybersecurity #CyberSecurityTools #SecurityExperts #CyberWarriors #RealHackers #IndustryStandards #HackerCulture

http://tomsitcafe.com/2025/04/13/%f0%9f%a4%a1-cybersecurity-isnt-a-fad-its-a-fight/

Cybersecurity Isn’t a Fad—It’s a Fight #CybersecurityNoobs #ScriptKiddies #CyberSecurityEngineers #PenetrationTesting #CyberSkills #NoobsInCyberSecurity #DeadSwitch #LearnCybersecurity #CyberSecurityTools #SecurityExperts #CyberWarriors #RealHackers #IndustryStandards #HackerCulture

http://tomsitcafe.com/2025/04/13/%f0%9f%a4%a1-cybersecurity-isnt-a-fad-its-a-fight/

Cybersecurity Isn’t a Fad—It’s a Fight #CybersecurityNoobs #ScriptKiddies #CyberSecurityEngineers #PenetrationTesting #CyberSkills #NoobsInCyberSecurity #DeadSwitch #LearnCybersecurity #CyberSecurityTools #SecurityExperts #CyberWarriors #RealHackers #IndustryStandards #HackerCulture

http://tomsitcafe.com/2025/04/13/%f0%9f%a4%a1-cybersecurity-isnt-a-fad-its-a-fight/

And following the result of the poll, here is the whole thing in the raw: https://nxdomain.no/~peter/bugbounty/2[email protected][email protected] #bugbounty #bugbunnies #scriptkiddies #scammers #spammers #scambunnies

A message just inboxed here with

"To: undisclosed-recipients: ;
Subject: Request to Join Your Private Bug Bounty Program"

Should I put the entire message on display somewhere and post the link to the fediverse?

#scriptkiddies #bugbunnies #bugbounty #scammers #spammers #scambunnies

#ScriptKiddies are running the government #USA #DOGE
https://www.404media.co/anyone-can-push-updates-to-the-doge-gov-website-2/

#BOLO Another #DarkAI chatbot has been born #GhostGPT. Similar to #WormGPT I started discussing at my company over a year ago, it is an unrestricted AI with zero guardrails. DO NOT USE THESE CHATBOTS! THEY ARE DANGEROUS!

Expect another increase in #novel #malware and #scriptkiddies "playing around".
 
https://www.darkreading.com/cloud-security/cyberattackers-ghostgpt-write-malicious-code

#BOLO Another #DarkAI chatbot has been born #GhostGPT. Similar to #WormGPT I started discussing at my company over a year ago, it is an unrestricted AI with zero guardrails. DO NOT USE THESE CHATBOTS! THEY ARE DANGEROUS!

Expect another increase in #novel #malware and #scriptkiddies "playing around".
 
https://www.darkreading.com/cloud-security/cyberattackers-ghostgpt-write-malicious-code

#BOLO Another #DarkAI chatbot has been born #GhostGPT. Similar to #WormGPT I started discussing at my company over a year ago, it is an unrestricted AI with zero guardrails. DO NOT USE THESE CHATBOTS! THEY ARE DANGEROUS!

Expect another increase in #novel #malware and #scriptkiddies "playing around".
 
https://www.darkreading.com/cloud-security/cyberattackers-ghostgpt-write-malicious-code

#BOLO Another #DarkAI chatbot has been born #GhostGPT. Similar to #WormGPT I started discussing at my company over a year ago, it is an unrestricted AI with zero guardrails. DO NOT USE THESE CHATBOTS! THEY ARE DANGEROUS!

Expect another increase in #novel #malware and #scriptkiddies "playing around".
 
https://www.darkreading.com/cloud-security/cyberattackers-ghostgpt-write-malicious-code

#BOLO Another #DarkAI chatbot has been born #GhostGPT. Similar to #WormGPT I started discussing at my company over a year ago, it is an unrestricted AI with zero guardrails. DO NOT USE THESE CHATBOTS! THEY ARE DANGEROUS!

Expect another increase in #novel #malware and #scriptkiddies "playing around".
 
https://www.darkreading.com/cloud-security/cyberattackers-ghostgpt-write-malicious-code

Hackers Use XWorm RAT to Exploit Script Kiddies, Pwning 18,000 Devices – Source:hackread.com https://ciso2ciso.com/hackers-use-xworm-rat-to-exploit-script-kiddies-pwning-18000-devices-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #ScriptKiddies #CyberAttacks #CyberAttack #Hackread #security #malware #trojan #XWorm #Scam #RAT

Hackers Use XWorm RAT to Exploit Script Kiddies, Pwning 18,000 Devices https://hackread.com/hackers-script-kiddes-xworm-rat-compromise-devices/ #Cybersecurity #ScriptKiddies #CyberAttacks #CyberAttack #Security #Malware #TROJAN #XWorm #Scam #RAT

oh, such interesting finds about that site - https://nxdomain.no/~peter/google-abuse/20240930_sherazkhaannn42%40gmail.com_bsdly%40bsdly.net.txt #pentestscam #fakepentest #spam #scam #scriptkiddies

I think a script kiddy made a really bizarre mistake in their script.

I've got requests hitting my server that include `%ADd+allow_url_include=1` in the query string.

Now, `-d allow_url_include=1` would set an INI value in PHP when calling the interpreter. But you might want to hide the obvious `-d` switch. So you URL encode it, right?

Only they've used the "shy hyphen" (U+00AD) that is normally invisible rather than a regular hyphen (U+002D)! 🤦

#SysAdmin #WebDev #ScriptKiddies #Fail

This is what happens when a script kiddies gets caught. Don't be a script kiddie.

#YukiYunaWaYushaDeAru #meme #scriptkiddies

#DarkAI is a thing. I've talked about it before, and this article supports every theory I've mentioned over the years. #CyberCriminals are using #GenerativeAI to create sophisticated #BEC campaigns, #NovelMalware, and lowers the entry for new cyber criminals and especially #ScriptKiddies or people with zero technical experience to create and commit malicious fraud campaigns against a much wider swath of targets than ever before. The ONLY way to combat these emerging threats is through user awareness trainings and a #DefenseInDepth approach to your security platform for #EnterpriseSecurity. For yourselves personally - invest in a solid #antivirus solution, whether that's Microsoft's #Defender (consumer version), or a platform like #Avast who is affordable, very good, and works on desktop and mobile. You also want to look into a #VPN to protect your data streams. These DarkAI's aren't here to play, they are here to cause chaos. #BeCyberAware #BeCyberSafe and #DontGetPhished!!

https://www.darkreading.com/application-security/gpt-based-malware-trains-dark-web

#DarkAI is a thing. I've talked about it before, and this article supports every theory I've mentioned over the years. #CyberCriminals are using #GenerativeAI to create sophisticated #BEC campaigns, #NovelMalware, and lowers the entry for new cyber criminals and especially #ScriptKiddies or people with zero technical experience to create and commit malicious fraud campaigns against a much wider swath of targets than ever before. The ONLY way to combat these emerging threats is through user awareness trainings and a #DefenseInDepth approach to your security platform for #EnterpriseSecurity. For yourselves personally - invest in a solid #antivirus solution, whether that's Microsoft's #Defender (consumer version), or a platform like #Avast who is affordable, very good, and works on desktop and mobile. You also want to look into a #VPN to protect your data streams. These DarkAI's aren't here to play, they are here to cause chaos. #BeCyberAware #BeCyberSafe and #DontGetPhished!!

https://www.darkreading.com/application-security/gpt-based-malware-trains-dark-web

#DarkAI is a thing. I've talked about it before, and this article supports every theory I've mentioned over the years. #CyberCriminals are using #GenerativeAI to create sophisticated #BEC campaigns, #NovelMalware, and lowers the entry for new cyber criminals and especially #ScriptKiddies or people with zero technical experience to create and commit malicious fraud campaigns against a much wider swath of targets than ever before. The ONLY way to combat these emerging threats is through user awareness trainings and a #DefenseInDepth approach to your security platform for #EnterpriseSecurity. For yourselves personally - invest in a solid #antivirus solution, whether that's Microsoft's #Defender (consumer version), or a platform like #Avast who is affordable, very good, and works on desktop and mobile. You also want to look into a #VPN to protect your data streams. These DarkAI's aren't here to play, they are here to cause chaos. #BeCyberAware #BeCyberSafe and #DontGetPhished!!

https://www.darkreading.com/application-security/gpt-based-malware-trains-dark-web

#DarkAI is a thing. I've talked about it before, and this article supports every theory I've mentioned over the years. #CyberCriminals are using #GenerativeAI to create sophisticated #BEC campaigns, #NovelMalware, and lowers the entry for new cyber criminals and especially #ScriptKiddies or people with zero technical experience to create and commit malicious fraud campaigns against a much wider swath of targets than ever before. The ONLY way to combat these emerging threats is through user awareness trainings and a #DefenseInDepth approach to your security platform for #EnterpriseSecurity. For yourselves personally - invest in a solid #antivirus solution, whether that's Microsoft's #Defender (consumer version), or a platform like #Avast who is affordable, very good, and works on desktop and mobile. You also want to look into a #VPN to protect your data streams. These DarkAI's aren't here to play, they are here to cause chaos. #BeCyberAware #BeCyberSafe and #DontGetPhished!!

https://www.darkreading.com/application-security/gpt-based-malware-trains-dark-web

#DarkAI is a thing. I've talked about it before, and this article supports every theory I've mentioned over the years. #CyberCriminals are using #GenerativeAI to create sophisticated #BEC campaigns, #NovelMalware, and lowers the entry for new cyber criminals and especially #ScriptKiddies or people with zero technical experience to create and commit malicious fraud campaigns against a much wider swath of targets than ever before. The ONLY way to combat these emerging threats is through user awareness trainings and a #DefenseInDepth approach to your security platform for #EnterpriseSecurity. For yourselves personally - invest in a solid #antivirus solution, whether that's Microsoft's #Defender (consumer version), or a platform like #Avast who is affordable, very good, and works on desktop and mobile. You also want to look into a #VPN to protect your data streams. These DarkAI's aren't here to play, they are here to cause chaos. #BeCyberAware #BeCyberSafe and #DontGetPhished!!

https://www.darkreading.com/application-security/gpt-based-malware-trains-dark-web