Top all-time · #5017
Guardio Labs
Company blog · labs.guard.iosecurity
Guardio Labs is the company blog at labs.guard.io, writing about security. Since 2023, 16 different Hacker News readers have linked it 18 times, most often “"EtherHiding" – Hiding Web2 Malicious Code in Web3 Smart Contracts”. No feed was found, so read it on the site itself.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
Guardio Labs' research blog on online scams and threat tactics. HN commenters cite its posts on spoofed phishing emails and fake browser-update scams that use blockchain-hosted code. Comments only cite it.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Guardio Labs is the research arm of Guardio, uncovering the hidden infrastructure of scams, phishing, and malware across the digital landscape.
Most-linked posts?
- "EtherHiding" – Hiding Web2 Malicious Code in Web3 Smart Contracts4 people · 4 mentions · first linked 2023-10-16
- Phishing Campaign Exploits Proofpoint to Send Spoofed Emails4 people · 4 mentions · first linked 2024-07-29
What Hacker News says?
I saw one of these emails too. It was sent by an onmicrosoft.com server, linked to a phishing site, but passed SPF/DKIM/DMARC for Paypal. Microsoft obviously isn't "forging" it. It's valid: https://labs.guard.io/echospoofing-a-massive-phishing-campai...
Comment linking /echospoofing-a-massive-phishing-campaign-exploiting-proofpoints-email-protection-to-dispatch-3dd6b5417db6
on “Github scam investigation: Thousands of “mods” and “cracks” stealing data”Submitted Phishing Campaign Exploits Proofpoint to Send Spoofed Emails as a story · 11 points
HN discussionAccording to the following blog post, it uses a web API exposed by the Binance Smart Chain (BSC) platform: https://labs.guard.io/etherhiding-hiding-web2-malicious-code... This diagram show the full flow of the attack: https://miro.medium.com/v2/resize:fit:1400/format:webp/1*by4... Because reads from blockchain are "free" (meaning, there is no cryptocurrency payment required to read data from the smart contracts on B…
Comment linking /etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16
on “The Fake Browser Update Scam Gets a Makeover”Submitted "EchoSpoofing": exploiting email protection to perfectly spoof emails as a story · 4 points
HN discussionSubmitted Exploring Telegram's Dark Markets: ground for Modern Phishing Operations as a story · 4 points
HN discussionSubmitted Exploiting 0-Day Opera Vulnerability with a Cross-Browser Extension Store Attack as a story · 3 points
HN discussionSubmitted Microsoft Edge's Marketing API Exploited for Covert Extension Installation as a story · 3 points
HN discussionSubmitted Microsoft Edge's Marketing API Exploited for Covert Extension Installation as a story · 2 points
HN discussionSubmitted “FakeGPT”: Malicious Chrome Extension Stealing Facebook Ad Accounts as a story · 2 points
HN discussionSubmitted "DeceptionAds" – A Glimpse to the Dark Side of Internet Advertising as a story · 1 points
HN discussionSubmitted "EchoSpoofing" – A Phishing Campaign as a story · 1 points
HN discussionSubmitted "MyFlaw" – Cross Platform 0-Day RCE Vulnerability Discovered in Opera's Browser as a story · 1 points
HN discussionSubmitted "EtherHiding" – Hiding Web2 Malicious Code in Web3 Smart Contracts as a story · 1 points
HN discussionSubmitted "EtherHiding" – Hiding Web2 Malicious Code in Web3 Smart Contracts as a story · 1 points
HN discussionSubmitted "EtherHiding" – Hiding Web2 Malicious Code in Web3 Smart Contracts as a story · 1 points
HN discussionSubmitted Vulnerability in Salesforce email services used to phish Facebook accounts as a story · 1 points
HN discussionSubmitted “Malverposting”: Facebook Ads Fuel This Evolving Stealer Campaign as a story · 1 points
HN discussionSubmitted “MasquerAds” – Google’s Ad-Words Abused by Threat Actors as a story · 1 points
HN discussion
