Correct me if I'm wrong, but this doesn't look like this has anything to do with Syncthing vulnerabilities. Instead it looks like a hack that uses a preconfigured Syncthing installation to transfer sensitive data. Disturbing nonetheless.
It's a convenient file transfer/sync tool. Copying data has to happen somehow, I'm not surprised someone thought to use syncthing for that purpose >.<, since it can do that. But its not really different than any other tool here.
26 Comments
spaghettiwestern@sh.itjust.works · 102 pts · 2y
Correct me if I'm wrong, but this doesn't look like this has anything to do with Syncthing vulnerabilities. Instead it looks like a hack that uses a preconfigured Syncthing installation to transfer sensitive data. Disturbing nonetheless.
just_another_person@lemmy.world · 74 pts · 2y
It's a Phishing scam using a tool. It's no more exploiting SyncThing than TCP/IP.
Holzkohlen@feddit.de · 12 pts · 2y
Bet they also utilize electricity these bastards! What's next? Physics? Oh the humanity!
laurelraven@lemmy.blahaj.zone · 3 pts · 2y
Its physics all the way down
Venator@lemmy.nz · 3 pts · 2y
Relevant xkcd
Venator@lemmy.nz · 1 pts · 2y
Relevant edited xkcd
blackbarn@lemm.ee · 10 pts · 2y
Just like using a remote desktop tool in a scam I suppose
treadful@lemmy.zip · 5 pts · 2y
Looks like a specially modified SyncThing was just used for exfil.
Deebster@programming.dev · 18 pts · 2y
The article uses the word modified, but it sounds like it's just talking about configuring it and using it as normal.
vext01@lemmy.sdf.org · 0 pts · 2y
Indeed.
Nobilmantis@feddit.it · 79 pts · 2y
Okay bro im not reading past this its 2024
treadful@lemmy.zip · 20 pts · 2y
Just click this link bro. Just one more link man. Just click it I need it.
tgxn@lemmy.tgxn.net · 6 pts · 2y
Your links do nothing! I'm invincible!
Steamymoomilk@sh.itjust.works · 8 pts · 2y
Best i can do is chineese bootleg subway surfers riddled with malware and ads.
Cargon@lemmy.ml · 7 pts · 2y
Gets drenched in liquid nitrogen
Steamymoomilk@sh.itjust.works · 0 pts · 2y
todd_bonzalez@lemm.ee · 4 pts · 2y
olof@lemmy.ml · 63 pts · 2y
Please dont link with a Google Amp link.
mp3@lemmy.ca · 58 pts · 2y
Non-shit link: https://www.bleepingcomputer.com/news/security/ukraine-says-hackers-abuse-syncthing-tool-to-steal-data/
can@sh.itjust.works · 22 pts · 2y
Non-amp link.
OP, edit this in.
aodhsishaj@lemmy.world · 8 pts · 2y
Please
queue@lemmy.blahaj.zone · 9 pts · 2y
Fixed!
olof@lemmy.ml · 2 pts · 2y
Thanks!
queue@lemmy.blahaj.zone · 6 pts · 2y
Done.
queue@lemmy.blahaj.zone · 10 pts · 2y
Sorry about that, on my mobile firefox it looked fine. Fucking google.
autonomoususer@lemmy.world · 12 pts · 2y
They can't even type Syncthing right.
sapient_cogbag@infosec.pub · 5 pts · 2y
It's a convenient file transfer/sync tool. Copying data has to happen somehow, I'm not surprised someone thought to use syncthing for that purpose >.<, since it can do that. But its not really different than any other tool here.
Caboose12000@lemmy.world · -2 pts · 2y
This is upsetting