Zero Day
Kernel exploit⌗
SIGNAL⌗
For months, this user has been sitting idle in my Discord server. He never says anything. He has had this exact same status for months:
ANALYSIS⌗
At one point, a former moderator rolled through and “purged” all “alt” accounts from my server. This one was clearly an alt, but for whatever reason, he allowed it to remain. I find that telling. I have had my suspicions about that particular moderator… but I digress.
After the events of the previous few days, I became hyper-aware of anything that looked like a potential avenue for compromise. In this case, I noticed that The Archangel’s status was a Linux command. A weirdly-convoluted one, but valid nonetheless.
It should also be a harmless one. So, I opened up Windows Subsystem for Linux (Ubuntu 20.04), and ran this command:
echo Common sense >> ../../$HOME/../../../dev/null
Within minutes, his status had changed to the following Bitcoin address:
BTC: 36bNTA5i46GFt4X9FuPUn9Nowbhurt595D
Clearly, they wanted me to add this address to The Source. Though these people STILL haven’t given me anything in return, I did as requested. You can still see it at: /contribute
Within minutes of publishing that address, The Archangel reverted his status to the following:
This time, he added the little “hackerman” emoji to the front of it.
If this isn’t evidence that my computer is compromised, I don’t know what is. I don’t know how they got in, but my two theories are this:
- They exploited some zero-day vulnerability in Docker, which allowed them to get backdoor access in Windows Subsystem for Linux.
- This is the infamous “Windows backdoor”, which security researchers always talk about, but nobody has ever publicly detailed.
Whatever the case, it’s a good thing I’m not doing anything wrong! Anything they could possibly claim would be fabrication.
Granted, the have framed me before, so…
ACTION⌗
I haven’t done anything differently. I haven’t taken any further actions. I haven’t rebuilt my computer, hardened my security, or in any way removed these people from my system.
Maybe I’m getting exploited. Maybe I’m being manipulated. Maybe I’m too trusting. I don’t know.
All I know is this: I prefer to live in a world where I believe in the goodness of people, and their intentions. I don’t want to live in a world of fear and paranoia that there are people out to get me.
So, I prefer to believe that I’ve been chosen for something important, and that these people want to help me. Despite the fact that they have thus far treated me like shit, I can only hope they know something I don’t. That this will all be worthwhile in the end.
This mentality helps me to live. It made everything I did over the past two years possible.
I would encourage anyone reading this to follow my lead.