In this article:See more ▼Post may contain affiliate links which give us commissions at no cost to you.Preppy fonts capture that quintessential East Coast elite vibe – think Nantucket summers, yacht clubs, and monogrammed everything. These typefaces embody the perfect balance of tradition and refinement that makes preppy design so timeless and aspirational. But here’s the thing: not all fonts can pull off that coveted preppy aesthetic. The best preppy fonts have a certain je ne sais quoi – they’re classic without being stuffy, elegant without being pretentious, and refined without being inaccessible. In this comprehensive guide, we’ll explore the most gorgeous preppy fonts that’ll have your designs looking like they belong in the pages of Town & Country magazine. So grab your pearls and let’s dive into this typographic treasure trove! 👋 Psst... Did you know you can get unlimited downloads of 59,000+ fonts and millions of other creative assets for just $16.95/mo? Learn more »The Preppiest Fonts That Define 2025 Let’s start with the crème de la crème – the fonts that truly embody that preppy spirit. I’ve curated this list based on their ability to channel that classic New England charm while remaining versatile enough for modern design needs. Gatsby Prelude Gatsby Prelude is an elegant and modern Art Deco font duo. It combines sans-serif characters with decorative elements, perfect for creating sophisticated designs with a touch of vintage glamour.Burtuqol Burtuqol is a vintage slab serif font that exudes a retro charm. Its bold, chunky serifs and aged appearance make it ideal for projects requiring a nostalgic or timeworn aesthetic.Gafler Gafler is a classy vintage serif font with decorative elements. It combines elegance with a touch of old-world charm, making it perfect for high-end branding and classic design projects.Get 300+ Fonts for FREEEnter your email to download our 100% free "Font Lover's Bundle". For commercial & personal use. No royalties. No fees. No attribution. 100% free to use anywhere. Kagnue Kagnue is a modern and classy serif font. It offers a fresh take on traditional serif typefaces, blending contemporary design with timeless elegance for versatile use in various design contexts.The Blendinroom The Blendinroom is a retro serif typeface featuring luxurious ligatures. Its vintage-inspired design and intricate details make it ideal for creating sophisticated, old-world aesthetics in design projects.MODER BULES MODER BULES is a playful sans-serif font with a fun, childlike appeal. Its quirky design makes it perfect for kids-oriented projects or Halloween-themed designs, adding a touch of whimsy to typography.Nickey Vintage Nickey Vintage is a decorative display font with a strong vintage flair. Its bold, eye-catching characters make it ideal for headlines, logos, and designs that require a striking retro aesthetic.Ladger Ladger is a casual script font that exudes luxury and elegance. Its flowing lines and graceful curves make it perfect for logo designs, high-end branding, and projects requiring a touch of sophistication.Hadnich Hadnich is a modern script font with a brush-like quality. Its versatile design makes it suitable for various applications, from signage to branding, offering a contemporary take on handwritten typography.Belly and Park Belly and Park is a condensed beauty classic font family featuring both serif and sans-serif styles. Its vintage-inspired design and narrow characters make it ideal for creating elegant, space-efficient layouts.Loubag Loubag is a modern retro font family encompassing sans-serif, serif, and decorative styles. Its bold, fashion-forward design makes it perfect for creating eye-catching headlines and trendy branding materials.Petter And Sons Petter And Sons is a romantic beauty script font with decorative elements. Its elegant, flowing design makes it ideal for wedding invitations, luxury branding, and projects requiring a touch of refined beauty.Preteoria Preteoria is a modern cursive font with a sleek, contemporary feel. Its smooth curves and clean lines make it versatile for various design applications, from branding to digital media projects.Delauney Delauney is an Art Deco-inspired sans-serif font that captures the essence of the roaring twenties. Its geometric shapes and sleek lines make it perfect for creating designs with a bold, metropolitan flair.Amadi Vintage Amadi Vintage is a chic and beautiful serif font with a timeless appeal. Its elegant design and vintage-inspired details make it ideal for creating sophisticated, classic-looking designs and branding materials.LEDERSON LEDERSON is a vintage-inspired shadow font. Its weathered look and strong character make it perfect for designs requiring an authentic, aged aesthetic.Fancyou Fancyou is a versatile serif font with alternate characters. Its elegant design and customizable options make it suitable for a wide range of projects, from formal invitations to modern branding materials.Catterpie Font Catterpie is a handwritten script font that mimics natural handlettering. Its fluid, signature-like style makes it perfect for creating personal, authentic-looking designs and branding materials.Jemmy Wonder Jemmy Wonder is a Victorian-inspired serif font with a strong vintage character. Its ornate details and old-world charm make it ideal for creating designs with a classic, nostalgic feel.Monthey Monthey is a bold, elegant vintage display serif font. Its chunky characters and 70s-inspired design make it perfect for creating eye-catching headlines and retro-themed branding materials.Madville Madville is a classy script font with a versatile design. Its elegant curves and smooth transitions make it suitable for a wide range of projects, from formal invitations to modern branding materials.Crowk Crowk is a luxury serif font with a timeless, elegant appeal. Its refined design and classic proportions make it ideal for high-end branding, editorial layouts, and sophisticated design projects.Peachy Fantasy Peachy Fantasy is an Art Nouveau-inspired display font with decorative elements. Its vintage charm and unique character make it perfect for creating eye-catching headlines and artistic design projects.Cormier Cormier is a decorative sans-serif font with a strong artistic flair. Its unique design and fashion-forward aesthetic make it ideal for creating bold, attention-grabbing headlines and branding materials.Syntage Syntage is a decorative modern luxury font with both serif and ornamental elements. Its retro-inspired design and luxurious details make it perfect for high-end branding and sophisticated design projects.Jeniffer Selfies Jeniffer Selfies is a retro-inspired bold font combining sans-serif and script styles. Its playful design and vintage feel make it ideal for creating nostalgic, fun-loving designs and branding materials.The Rilman The Rilman is a ligature-rich rounded sans-serif font with a 90s-inspired design. Its retro charm and smooth edges make it perfect for creating playful, nostalgic designs and branding materials.Milky Croffle Milky Croffle is a classic beauty elegant serif font. Its refined design and timeless appeal make it ideal for creating sophisticated layouts, high-end branding, and projects requiring a touch of traditional elegance. What Makes a Font Feel Preppy? You might be wondering what exactly gives a font that unmistakable preppy vibe. After years of working with typography, I’ve identified several key characteristics that define the preppy aesthetic: Classic Serif Structure: Most preppy fonts are serifs, drawing inspiration from traditional typography used in prestigious publications and academic institutions. These serifs aren’t just decorative – they’re a nod to centuries of refined typographic tradition. Elegant Proportions: Preppy fonts tend to have well-balanced letterforms with moderate contrast between thick and thin strokes. They’re neither too delicate nor too bold – just perfectly poised, like a well-tailored blazer. Timeless Appeal: The best preppy fonts don’t scream “trendy.” Instead, they whisper “timeless.” They’re the typography equivalent of a strand of pearls – always appropriate, never out of style. Sophisticated Details: Look for subtle refinements in letterforms – graceful curves, well-crafted terminals, and thoughtful spacing. These details separate truly preppy fonts from their more pedestrian cousins. Heritage Inspiration: Many preppy fonts draw inspiration from historical typefaces used by Ivy League universities, prestigious publishing houses, and old-money families. This connection to tradition is what gives them their authentic preppy pedigree. Where to Use Preppy Fonts (And Where Not To) Preppy fonts aren’t one-size-fits-all solutions, but when used appropriately, they’re absolutely magical. Here’s where they shine brightest: Wedding Invitations: Nothing says “elegant affair” quite like a beautifully chosen preppy serif. These fonts are perfect for formal invitations, save-the-dates, and wedding stationery that needs to feel sophisticated and timeless. Luxury Branding: Brands targeting affluent audiences or positioning themselves as premium often benefit from preppy typography. Think boutique hotels, high-end fashion, or artisanal goods. Editorial Design: Magazines, newsletters, and publications focusing on lifestyle, fashion, or culture can leverage preppy fonts to establish credibility and sophistication. Corporate Identity: Professional services, law firms, financial institutions, and consulting companies often choose preppy fonts to convey trustworthiness and establishment credibility. Academic Materials: Universities, prep schools, and educational institutions naturally gravitate toward preppy typography that reflects their traditional values and heritage. However, preppy fonts might not be the best choice for: Tech Startups: The traditional nature of preppy fonts can feel at odds with innovation and disruption. Modern sans serifs usually work better for tech companies. Children’s Brands: While elegant, preppy fonts might feel too formal for products targeting young children. Playful, rounded fonts are typically more appropriate. Casual Brands: If your brand personality is laid-back and approachable, overly formal preppy fonts might create distance between you and your audience. How to Choose the Perfect Preppy Font Selecting the right preppy font requires careful consideration of several factors. Here’s my tried-and-true process: Consider Your Audience: Are you designing for actual prep school alumni, or are you trying to capture that aspirational preppy aesthetic for a broader audience? Your target demographic should influence how traditional or accessible your font choice is. Evaluate the Context: A wedding invitation can handle more ornate details than a business card. Consider where your text will appear and how much personality the context can support. Test Readability: Preppy doesn’t mean hard to read. Always test your chosen font at various sizes to ensure it remains legible. Your typography should enhance communication, not hinder it. Think About Pairing: Will you be using this font alone or pairing it with others? Consider how your preppy serif will work alongside sans serifs for body text or script fonts for accents. Consider Your Medium: Some preppy fonts work beautifully in print but struggle on screens. Others are optimized for digital use but lose their charm in print. Choose accordingly. Pairing Preppy Fonts Like a Pro The magic of preppy typography often lies in thoughtful font pairing. Here are some winning combinations that never fail: Classic Serif + Clean Sans Serif: Pair your preppy serif headline font with a crisp, readable sans serif for body text. This creates hierarchy while maintaining sophistication. Traditional Serif + Script Accent: Use a refined script font sparingly for special elements like signatures or decorative text, balanced by a solid preppy serif for main content. Serif + Serif Variation: Sometimes pairing two serifs from the same family – perhaps a regular weight for body text and a bold condensed version for headlines – creates beautiful, cohesive designs. Remember, less is often more with preppy design. Stick to two or three fonts maximum, and let the inherent elegance of your chosen typefaces do the heavy lifting. The Psychology Behind Preppy Typography Understanding why preppy fonts work so well psychologically can help you use them more effectively. These typefaces tap into powerful associations: Trust and Reliability: The traditional nature of preppy fonts suggests stability and permanence. When people see these fonts, they subconsciously associate them with established institutions and time-tested values. Sophistication and Education: Preppy fonts are reminiscent of academic institutions and intellectual pursuits. They suggest refinement, education, and cultural awareness. Exclusivity and Status: Let’s be honest – part of the preppy aesthetic’s appeal is its association with privilege and exclusivity. These fonts can make designs feel more premium and aspirational. Quality and Craftsmanship: The careful attention to typographic detail in preppy fonts suggests similar attention to quality in whatever they’re representing. Modern Takes on Classic Preppy Style While preppy fonts are rooted in tradition, the best designers know how to give them contemporary flair. Here are some ways to modernize preppy typography: Unexpected Color Palettes: Pair traditional preppy fonts with modern colors. Think sage green and cream instead of navy and white, or soft blush tones for a fresh take. Generous White Space: Give your preppy fonts room to breathe with plenty of white space. This modern approach to layout keeps traditional fonts feeling fresh and uncluttered. Mixed Media Integration: Combine preppy typography with photography, illustrations, or graphic elements for a more contemporary feel while maintaining that sophisticated foundation. Strategic Contrast: Pair your refined preppy fonts with unexpected elements – maybe a bold geometric shape or modern photography – to create dynamic tension. Preppy Font Alternatives for Every Budget Not every preppy project has a premium font budget, and that’s okay! Here are some strategies for achieving that coveted preppy look without breaking the bank: Google Fonts Gems: Fonts like Playfair Display, Crimson Text, and Libre Baskerville offer sophisticated serif options that can work beautifully for preppy designs. Font Pairing Magic: Sometimes combining two free fonts thoughtfully can create a more expensive-looking result than using a single premium font poorly. Focus on Execution: A free font used with excellent spacing, hierarchy, and layout will always look better than an expensive font used carelessly. Common Preppy Font Mistakes to Avoid Even with the perfect preppy font, poor execution can ruin the effect. Here are the most common mistakes I see designers make: Overdoing the Decoration: Just because a font has elegant details doesn’t mean you need to add more flourishes. Let the typeface’s inherent sophistication speak for itself. Ignoring Hierarchy: Preppy design relies on clear, elegant hierarchy. Don’t make everything the same size or weight – create visual flow through thoughtful typography scaling. Poor Spacing: Cramped text kills the elegant feel of preppy fonts. Give your typography generous leading and appropriate margins. Wrong Context: Using an ultra-formal preppy font for a casual pizza restaurant’s menu will feel jarring and inappropriate. Match your font choice to your content and audience. The Future of Preppy Typography As we look ahead in 2025, preppy fonts continue to evolve while maintaining their classic appeal. We’re seeing interesting trends emerge: Variable Font Technology: Modern preppy fonts are increasingly available as variable fonts, allowing designers to fine-tune weight, width, and optical size for perfect customization. Screen Optimization: Classic preppy fonts are being redrawn and optimized for digital screens without losing their traditional charm. Inclusive Preppy: Designers are expanding the preppy aesthetic beyond its traditional boundaries, creating fonts that maintain sophistication while feeling more accessible and diverse. Sustainable Design: The timeless nature of preppy fonts aligns perfectly with sustainable design principles – these typefaces won’t look dated next year, making them environmentally responsible choices. Conclusion: Embracing Timeless Elegance Preppy fonts represent more than just letterforms – they’re a gateway to timeless elegance and sophisticated communication. Whether you’re designing wedding invitations for a Martha’s Vineyard ceremony or creating brand identity for a boutique law firm, the right preppy font can elevate your work from merely professional to genuinely distinguished. The beauty of preppy typography lies in its ability to feel both traditional and fresh, formal yet approachable. These fonts have stood the test of time because they tap into something fundamental about how we perceive quality, tradition, and sophistication. As you explore the world of preppy fonts, remember that the best typography choices support your message rather than overshadowing it. Choose fonts that enhance your content’s inherent qualities and speak to your audience’s aspirations and values. So whether you’re channeling that old-money aesthetic or simply want to add a touch of refined elegance to your designs, preppy fonts offer a wealth of possibilities. After all, good typography, like good manners, never goes out of style.

Researchers unexpectedly discovered toxic airborne pollutants in Oklahoma. The image above depicts a field in Oklahoma. Credit: Shutterstock University of Colorado Boulder researchers made the first-ever airborne detection of Medium Chain Chlorinated Paraffins (MCCPs) in the Western Hemisphere. Sometimes, scientific research feels a lot like solving a mystery. Scientists head into the field with a clear goal and a solid hypothesis, but then the data reveals something surprising. That’s when the real detective work begins. This is exactly what happened to a team from the University of Colorado Boulder during a recent field study in rural Oklahoma. They were using a state-of-the-art instrument to track how tiny particles form and grow in the air. But instead of just collecting expected data, they uncovered something completely new: the first-ever airborne detection of Medium Chain Chlorinated Paraffins (MCCPs), a kind of toxic organic pollutant, in the Western Hemisphere. The teams findings were published in ACS Environmental Au. “It’s very exciting as a scientist to find something unexpected like this that we weren’t looking for,” said Daniel Katz, CU Boulder chemistry PhD student and lead author of the study. “We’re starting to learn more about this toxic, organic pollutant that we know is out there, and which we need to understand better.” MCCPs are currently under consideration for regulation by the Stockholm Convention, a global treaty to protect human health from long-standing and widespread chemicals. While the toxic pollutants have been measured in Antarctica and Asia, researchers haven’t been sure how to document them in the Western Hemisphere’s atmosphere until now. From Wastewater to Farmlands MCCPs are used in fluids for metal working and in the construction of PVC and textiles. They are often found in wastewater and as a result, can end up in biosolid fertilizer, also called sewage sludge, which is created when liquid is removed from wastewater in a treatment plant. In Oklahoma, researchers suspect the MCCPs they identified came from biosolid fertilizer in the fields near where they set up their instrument. “When sewage sludges are spread across the fields, those toxic compounds could be released into the air,” Katz said. “We can’t show directly that that’s happening, but we think it’s a reasonable way that they could be winding up in the air. Sewage sludge fertilizers have been shown to release similar compounds.” MCCPs little cousins, Short Chain Chlorinated Paraffins (SCCPs), are currently regulated by the Stockholm Convention, and since 2009, by the EPA here in the United States. Regulation came after studies found the toxic pollutants, which travel far and last a long time in the atmosphere, were harmful to human health. But researchers hypothesize that the regulation of SCCPs may have increased MCCPs in the environment. “We always have these unintended consequences of regulation, where you regulate something, and then there’s still a need for the products that those were in,” said Ellie Browne, CU Boulder chemistry professor, CIRES Fellow, and co-author of the study. “So they get replaced by something.” Measurement of aerosols led to a new and surprising discovery Using a nitrate chemical ionization mass spectrometer, which allows scientists to identify chemical compounds in the air, the team measured air at the agricultural site 24 hours a day for one month. As Katz cataloged the data, he documented the different isotopic patterns in the compounds. The compounds measured by the team had distinct patterns, and he noticed new patterns that he immediately identified as different from the known chemical compounds. With some additional research, he identified them as chlorinated paraffins found in MCCPs. Katz says the makeup of MCCPs are similar to PFAS, long-lasting toxic chemicals that break down slowly over time. Known as “forever chemicals,” their presence in soils recently led the Oklahoma Senate to ban biosolid fertilizer. Now that researchers know how to measure MCCPs, the next step might be to measure the pollutants at different times throughout the year to understand how levels change each season. Many unknowns surrounding MCCPs remain, and there’s much more to learn about their environmental impacts. “We identified them, but we still don’t know exactly what they do when they are in the atmosphere, and they need to be investigated further,” Katz said. “I think it’s important that we continue to have governmental agencies that are capable of evaluating the science and regulating these chemicals as necessary for public health and safety.” Reference: “Real-Time Measurements of Gas-Phase Medium-Chain Chlorinated Paraffins Reveal Daily Changes in Gas-Particle Partitioning Controlled by Ambient Temperature” by Daniel John Katz, Bri Dobson, Mitchell Alton, Harald Stark, Douglas R. Worsnop, Manjula R. Canagaratna and Eleanor C. Browne, 5 June 2025, ACS Environmental Au. DOI: 10.1021/acsenvironau.5c00038 Never miss a breakthrough: Join the SciTechDaily newsletter.

The government has axed a scheme for upgrading energy efficiency in public sector buildings. The Public Sector Decarbonisation Scheme (PSDS) delivered more than £2.5bn in its first three phases for measures such as heat pumps, solar panels, insulation and double glazing, with further funding of nearly £1bn recently announced. But the Department for Energy Security and Net Zero (DESNZ) has told Building Design that the scheme has been dropped after the spending review, leaving uncertainty about how upgrades will be funded when the current phase expires in 2028. Source: UK Government/FlickrEd Miliband’s Department for Energy Security and Net Zero is responsible for the scheme The department said it would set out plans for the period after 2028 in due course. In a post on LinkedIn, Dave Welkin, director of sustainability at Gleeds, said he had waited for the release of the spending review with a “sense of trepidation” and was unable to find mention of public sector decarbonisation when Treasury documents were released. “I hoped because it was already committed in the Budget that its omission wasn’t ominous,” he wrote. Yesterday, he was told by Salix Finance, the non-departmental public body that delivers funding for the scheme, that it was no longer being funded. It comes after the withdrawal of funding for the Low Carbon Skills Fund (LCSF) in May. According to the government’s website, PSDS and LCSF were intended to support the reduction of emissions from public sector buildings by 75% by 2037, compared to a 2017 baseline. “Neither LCSF or PSDS were perfect by any means, but they did provide a vital source of funding for local authorities, hospitals, schools and many other public sector organisations to save energy, carbon and money,” Welkin said. “PSDS has helped replace failed heating systems in schools, keeping students warm. It’s replaced roofs on hospitals, helping patients recover from illness. It’s replaced windows in our prisons, improving security and stopping drugs getting behind bars.” However, responding to Welkin’s post, Steve Connolly, chief executive at Arriba Technologies, a low carbon heating and cooling firm, said that the scheme was being “mismanaged” with a small number of professional services firms “scooping up disproportionately large grants for their clients”. The fourth phase of the scheme was confirmed last September, with allocations confirmed only last month. This latest phase, which covers the financial years between 2025/26 and 2027/28, saw the distribution of £940m across the country. A DESNZ spokesperson said: “Our settlement is about investing in Britain’s renewal to create energy security, sprint to clean power by 2030, encourage investment, create jobs and bring down bills for good. “We will deliver £1bn in current allocations of the Public Sector Decarbonisation Scheme until 2028 and, through Great British Energy, have invested in new rooftop solar power and renewable schemes to lower energy bills for schools and hospitals across the UK. “We want to build on this progress by incentivising the public sector to decarbonise, so they can reap the benefits in lower bills and emissions, sharing best practice across government and exploring the use of repayable finance, where appropriate.” A government assessment of phase 3a and 3b projects identified a number of issues with the scheme, including delays and cost inflation, with more than a tenth being abandoned subsequent to grants being offered. Stakeholders interviewed for the report also identified “difficulties in obtaining skilled contractors and equipment”, especially air source heat pumps. The first come first served approach to awarding funding was also said to be “encouraging applicants to opt for more straightforward projects” and “potentially undermining the achievement of PSDS objective by restricting the opportunity for larger [and] more complex measures which may have delivered greater carbon reduction benefits”. But the consensus among stakeholders and industry representatives interviewed for the report was that the scheme was “currently key to sustaining the existing UK heat pump market” and that it was “seen as vital in enabling many public sector organisations to invest in heat decarbonisation”.

Jun 16, 2025Ravie LakshmananMalware / DevOps Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that's capable of harvesting sensitive developer-related information, such as credentials, configuration data, and environment variables, among others. The package, named chimera-sandbox-extensions, attracted 143 downloads and likely targets users of a service called Chimera Sandbox, which was released by Singaporean tech company Grab last August to facilitate "experimentation and development of [machine learning] solutions." The package masquerades as a helper module for Chimera Sandbox, but "aims to steal credentials and other sensitive information such as Jamf configuration, CI/CD environment variables, AWS tokens, and more," JFrog security researcher Guy Korolevski said in a report published last week. Once installed, it attempts to connect to an external domain whose domain name is generated using a domain generation algorithm (DGA) in order to download and execute a next-stage payload. Specifically, the malware acquires from the domain an authentication token, which is then used to send a request to the same domain and retrieve the Python-based information stealer. The stealer malware is equipped to siphon a wide range of data from infected machines. This includes - JAMF receipts, which are records of software packages installed by Jamf Pro on managed computers Pod sandbox environment authentication tokens and git information CI/CD information from environment variables Zscaler host configuration Amazon Web Services account information and tokens Public IP address General platform, user, and host information The kind of data gathered by the malware shows that it's mainly geared towards corporate and cloud infrastructure. In addition, the extraction of JAMF receipts indicates that it's also capable of targeting Apple macOS systems. The collected information is sent via a POST request back to the same domain, after which the server assesses if the machine is a worthy target for further exploitation. However, JFrog said it was unable to obtain the payload at the time of analysis. "The targeted approach employed by this malware, along with the complexity of its multi-stage targeted payload, distinguishes it from the more generic open-source malware threats we have encountered thus far, highlighting the advancements that malicious packages have made recently," Jonathan Sar Shalom, director of threat research at JFrog Security Research team, said. "This new sophistication of malware underscores why development teams remain vigilant with updates—alongside proactive security research – to defend against emerging threats and maintain software integrity." The disclosure comes as SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download additional payloads. The packages in question are listed below - eslint-config-airbnb-compat (676 Downloads) ts-runtime-compat-check (1,588 Downloads) solders (983 Downloads) @mediawave/lib (386 Downloads) All the identified npm packages have since been taken down from npm, but not before they were downloaded hundreds of times from the package registry. SafeDep's analysis of eslint-config-airbnb-compat found that the JavaScript library has ts-runtime-compat-check listed as a dependency, which, in turn, contacts an external server defined in the former package ("proxy.eslint-proxy[.]site") to retrieve and execute a Base64-encoded string. The exact nature of the payload is unknown. "It implements a multi-stage remote code execution attack using a transitive dependency to hide the malicious code," SafeDep researcher Kunal Singh said. Solders, on the other hand, has been found to incorporate a post-install script in its package.json, causing the malicious code to be automatically executed as soon as the package is installed. "At first glance, it's hard to believe that this is actually valid JavaScript," the Veracode Threat Research team said. "It looks like a seemingly random collection of Japanese symbols. It turns out that this particular obfuscation scheme uses the Unicode characters as variable names and a sophisticated chain of dynamic code generation to work." Decoding the script reveals an extra layer of obfuscation, unpacking which reveals its main function: Check if the compromised machine is Windows, and if so, run a PowerShell command to retrieve a next-stage payload from a remote server ("firewall[.]tel"). This second-stage PowerShell script, also obscured, is designed to fetch a Windows batch script from another domain ("cdn.audiowave[.]org") and configures a Windows Defender Antivirus exclusion list to avoid detection. The batch script then paves the way for the execution of a .NET DLL that reaches out to a PNG image hosted on ImgBB ("i.ibb[.]co"). "[The DLL] is grabbing the last two pixels from this image and then looping through some data contained elsewhere in it," Veracode said. "It ultimately builds up in memory YET ANOTHER .NET DLL." Furthermore, the DLL is equipped to create task scheduler entries and features the ability to bypass user account control (UAC) using a combination of FodHelper.exe and programmatic identifiers (ProgIDs) to evade defenses and avoid triggering any security alerts to the user. The newly-downloaded DLL is Pulsar RAT, a "free, open-source Remote Administration Tool for Windows" and a variant of the Quasar RAT. "From a wall of Japanese characters to a RAT hidden within the pixels of a PNG file, the attacker went to extraordinary lengths to conceal their payload, nesting it a dozen layers deep to evade detection," Veracode said. "While the attacker's ultimate objective for deploying the Pulsar RAT remains unclear, the sheer complexity of this delivery mechanism is a powerful indicator of malicious intent." Crypto Malware in the Open-Source Supply Chain The findings also coincide with a report from Socket that identified credential stealers, cryptocurrency drainers, cryptojackers, and clippers as the main types of threats targeting the cryptocurrency and blockchain development ecosystem. Some of the examples of these packages include - express-dompurify and pumptoolforvolumeandcomment, which are capable of harvesting browser credentials and cryptocurrency wallet keys bs58js, which drains a victim's wallet and uses multi-hop transfers to obscure theft and frustrate forensic tracing. lsjglsjdv, asyncaiosignal, and raydium-sdk-liquidity-init, which functions as a clipper to monitor the system clipboard for cryptocurrency wallet strings and replace them with threat actor‑controlled addresses to reroute transactions to the attackers "As Web3 development converges with mainstream software engineering, the attack surface for blockchain-focused projects is expanding in both scale and complexity," Socket security researcher Kirill Boychenko said. "Financially motivated threat actors and state-sponsored groups are rapidly evolving their tactics to exploit systemic weaknesses in the software supply chain. These campaigns are iterative, persistent, and increasingly tailored to high-value targets." AI and Slopsquatting The rise of artificial intelligence (AI)-assisted coding, also called vibe coding, has unleashed another novel threat in the form of slopsquatting, where large language models (LLMs) can hallucinate non-existent but plausible package names that bad actors can weaponize to conduct supply chain attacks. Trend Micro, in a report last week, said it observed an unnamed advanced agent "confidently" cooking up a phantom Python package named starlette-reverse-proxy, only for the build process to crash with the error "module not found." However, should an adversary upload a package with the same name on the repository, it can have serious security consequences. Furthermore, the cybersecurity company noted that advanced coding agents and workflows such as Claude Code CLI, OpenAI Codex CLI, and Cursor AI with Model Context Protocol (MCP)-backed validation can help reduce, but not completely eliminate, the risk of slopsquatting. "When agents hallucinate dependencies or install unverified packages, they create an opportunity for slopsquatting attacks, in which malicious actors pre-register those same hallucinated names on public registries," security researcher Sean Park said. "While reasoning-enhanced agents can reduce the rate of phantom suggestions by approximately half, they do not eliminate them entirely. Even the vibe-coding workflow augmented with live MCP validations achieves the lowest rates of slip-through, but still misses edge cases." Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post. SHARE    

While IO Interactive may be heavily focused on its inaugural James Bond game, 2026’s 007 First Light, it’s still providing ambitious new levels and updates for Hitman: World of Assassination and its new science fiction action game MindsEye. To continue to build hype for First Light and IOI’s growing partnership with the James Bond brand, the latest World of Assassination level is a Bond crossover, as Hitman protagonist Agent 47 targets Le Chiffre, the main villain of the 2006 movie Casino Royale. Available through July 6, 2025, the Le Chiffre event in World of Assassination features actor Mads Mikkelsen reprising his fan-favorite Bond villain role, not only providing his likeness but voicing the character as he confronts the contract killer in France. Den of Geek attended the first-ever in-person IO Interactive Showcase, a partner event with Summer Game Fest held at The Roosevelt Hotel in Hollywood. Mikkelsen and the developers shared insight on the surprise new World of Assassination level, with the level itself playable in its entirety to attendees on the Nintendo Switch 2 and PlayStation Portal. The developers also included an extended gameplay preview for MindsEye, ahead of its June 10 launch, while sharing some details about the techno-thriller. Matching his background from Casino Royale, Le Chiffre is a terrorist financier who manipulates the stock market by any means necessary to benefit himself and his clients. After an investment deal goes wrong, Le Chiffre tries to recoup a brutal client’s losses through a high-stakes poker game in France, with Agent 47 hired to assassinate the criminal mastermind on behalf of an unidentified backer. The level opens with 47 infiltrating a high society gala linked to the poker game, with the contract killer entering under his oft-used assumed name of Tobias Rieper, a facade that Le Chiffre immediately sees through. At the IO Interactive Showcase panel, Mikkelsen observed that the character of Le Chiffre is always one that he enjoyed and held a special place for him and his career. Reprising his villainous role also gave Mikkelsen the chance to reunite with longtime Agent 47 voice actor David Bateson since their ‘90s short film Tom Merritt, though both actors recorded their respective lines separately. Mikkelsen enjoyed that Le Chiffre’s appearance in World of Assassination gave him a more physical role than he had in Casino Royale, rather than largely placing him at a poker table. Of course, like most Hitman levels, there are multiple different ways that players can accomplish their main objective of killing Le Chiffre and escaping the premises. The game certainly gives players multiple avenues to confront the evil financier over a game of poker before closing in for the kill, but it’s by no means the only way to successfully assassinate him. We won’t give away how we ultimately pulled off the assassination, but rest assured that it took multiple tries, careful plotting, and with all the usual trial-and-error that comes from playing one of Hitman’s more difficult and immersively involved levels. Moving away from its more grounded action titles, IO Interactive also provided a deeper look at its new sci-fi game MindsEye, developed by Build a Rocket Boy. Set in the fictional Redrock City, the extended gameplay sneak peek at the showcase featured protagonist Adam Diaz fighting shadowy enemies in the futuristic city’s largely abandoned streets. While there were no hands-on demos at the showcase itself, the preview demonstrated Diaz using his abilities and equipment, including an accompanying drone, to navigate the city from a third-person perspective and use an array of weapons to dispatch those trying to hunt him down. MindsEye marks the first game published through IOI Partners, an initiative that has IOI publish games from smaller, external developers. The game did not have a hands-on demo at the showcase and, given its bug-heavy and poorly-received launch, this distinction is not particularly surprising. Build a Robot Boy has since pledged to support the game through June to fix its technical issues but, given the game’s hands-on access at the IOI Showcase, there were already red flags surrounding the game’s performance. With that in mind, most of the buzz at the showcase was unsurprisingly centered around 007 First Light and updates to Hitman: World of Assassination, and IO Interactive did not disappoint in that regard. Even with Hitman: World of Assassination over four years old now, the game continues to receive impressive post-release support from IO Interactive, both in bringing the title to the Nintendo Switch 2 and with additional DLC. At the showcase, IOI hinted at additional special levels for World of Assassintation with high-profile guest targets like Le Chiffre, without identifying who or if they’re also explicitly tied to the James Bond franchise. But with 007 First Light slated for its eagerly anticipated launch next year, it’s a safe bet that IOI has further plans to hype its own role in building out the James Bond legacy for the foreseeable future. The Hitman: World of Assassination special Le Chiffre level is available now through July 6, 2025 on all the game’s major platforms, including the Nintendo Switch 2. MindsEye is now on sale for PlayStation 5, Xbox Series X|S, and PC.

Last year, MACK Books published Architecture from Below, which anthologized writings by the French Brazilian architect, theorist, and painter Sérgio Ferro. (Douglas Spencer reviewed it for AN.) Now, MACK follows with Design and the Building Site and Complementary Essays, the second in the trilogy of books dedicated to Ferro’s scholarship. The following excerpt of the author’s 2023 preface to the English edition, which preserves its British phrasing, captures Ferro’s realization about the working conditions of construction sites in Brasília. The sentiment is likely relatable even today for young architects as they discover how drawings become buildings. Design and the Building Site and Complementary Essays will be released on May 22. If I remember correctly, it was in 1958 or 1959, when Rodrigo and I were second- or third year architecture students at FAUUSP, that my father, the real estate developer Armando Simone Pereira, commissioned us to design two large office buildings and eleven shops in Brasilia, which was then under construction. Of course, we were not adequately prepared for such an undertaking. Fortunately, Oscar Niemeyer and his team, who were responsible for overseeing the construction of the capital, had drawn up a detailed document determining the essential characteristics of all the private sector buildings. We followed these prescriptions to the letter, which saved us from disaster. Nowadays, it is hard to imagine the degree to which the construction of Brasilia inspired enthusiasm and professional pride in the country’s architects. And in the national imagination, the city’s establishment in the supposedly unpopulated hinterland evoked a re-founding of Brazil. Up until that point, the occupation of our immense territory had been reduced to a collection of arborescent communication routes, generally converging upon some river, following it up to the Atlantic Ocean. Through its ports, agricultural or extractive commodities produced by enslaved peoples or their substitutes passed towards the metropolises; goods were exchanged in the metropolises for more elaborate products, which took the opposite route. Our national identity was summed up in a few symbols, such as the anthem or the flag, and this scattering of paths pointing overseas. Brasilia would radically change this situation, or so we believed. It would create a central hub where the internal communication routes could converge, linking together hithertoseparate junctions, stimulating trade and economic progress in the country’s interior. It was as if, for the first time, we were taking care of ourselves. At the nucleus of this centripetal movement, architecture would embody the renaissance. And at the naval of the nucleus, the symbolic mandala of this utopia: the cathedral. Rodrigo and I got caught up in the euphoria. And perhaps more so than our colleagues, because we were taking part in the adventure with ‘our’ designs. The reality was very different — but we did not know that yet. At that time, architects in Brazil were responsible for verifying that the construction was in line with the design. We had already monitored some of our first building sites. But the construction company in charge of them, Osmar Souza e Silva’s CENPLA, specialized in the building sites of modernist architects from the so-called Escola Paulista led by Vilanova Artigas (which we aspired to be a part of, like the pretentious students we were). Osmar was very attentive to his clients and his workers, who formed a supportive and helpful team. He was even more careful with us, because he knew how inexperienced we were. I believe that the CENPLA was particularly important in São Paulo modernism: with its congeniality, it facilitated experimentation, but for the same reason, it deceived novices like us about the reality of other building sites. Consequently, Rodrigo and I travelled to Brasilia several times to check that the constructions followed ‘our’ designs and to resolve any issues. From the very first trip, our little bubble burst. Our building sites, like all the others in the future capital, bore no relation to Osmar’s. They were more like a branch of hell. A huge, muddy wasteland, in which a few cranes, pile drivers, tractors, and excavators dotted the mound of scaffolding occupied by thousands of skinny, seemingly exhausted wretches, who were nevertheless driven on by the shouts of master builders and foremen, in turn pressured by the imminence of the fateful inauguration date. Surrounding or huddled underneath the marquees of buildings under construction, entire families, equally skeletal and ragged, were waiting for some accident or death to open up a vacancy. In contact only with the master builders, and under close surveillance so we would not speak to the workers, we were not allowed to see what comrades who had worked on these sites later told us in prison: suicide abounded; escape was known to be futile in the unpopulated surroundings with no viable roads; fatal accidents were often caused by weakness due to chronic diarrhoea, brought on by rotten food that came from far away; outright theft took place in the calculation of wages and expenses in the contractor’s grocery store; camps were surrounded by law enforcement. I repeat this anecdote yet again not to invoke the benevolence of potential readers, but rather to point out the conditions that, in my opinion, allowed two students (Flávio Império joined us a little later) still in their professional infancy to quickly adopt positions that were contrary to the usual stance of architects. As the project was more Oscar Niemeyer’s than it was our own, we did not have the same emotional attachment that is understandably engendered between real authors and their designs. We had not yet been imbued with the charm and aura of the métier. And the only building sites we had visited thus far, Osmar’s, were incomparable to those we discovered in Brasilia. In short, our youthfulness and unpreparedness up against an unbearable situation made us react almost immediately to the profession’s satisfied doxa. Unprepared and young perhaps, but already with Marx by our side. Rodrigo and I joined the student cell of the Brazilian Communist Party during our first year at university. In itself, this did not help us much: the Party’s Marxism, revised in the interests of the USSR, was pitiful. Even high-level leaders rarely went beyond the first chapter of Capital. But at the end of the 1950s, the effervescence of the years to come was already nascent:  […] this extraordinary revival […] the rediscovery of Marxism and the great dialectical texts and traditions in the 1960s: an excitement that identifies a forgotten or repressed moment of the past as the new and subversive, and learns the dialectical grammar of a Hegel or an Adorno, a Marx or a Lukács, like a foreign language that has resources unavailable in our own. And what is more: the Chinese and Cuban revolutions, the war in Vietnam, guerrilla warfare of all kinds, national liberation movements, and a rare libertarian disposition in contemporary history, totally averse to fanaticism and respect for ideological apparatuses of (any) state or institution. Going against the grain was almost the norm. We were of course no more than contemporaries of our time. We were soon able to position ourselves from chapters 13, 14, and 15 of Capital, but only because we could constantly cross-reference Marx with our observations from well-contrasted building sites and do our own experimenting. As soon as we identified construction as manufacture, for example, thanks to the willingness and even encouragement of two friends and clients, Boris Fausto and Bernardo Issler, I was able to test both types of manufacture — organic and heterogeneous — on similar-sized projects taking place simultaneously, in order to find out which would be most convenient for the situation in Brazil, particularly in São Paulo. Despite the scientific shortcomings of these tests, they sufficed for us to select organic manufacture. Arquitetura Nova had defined its line of practice, studies, and research. There were other sources that were central to our theory and practice. Flávio Império was one of the founders of the Teatro de Arena, undoubtedly the vanguard of popular, militant theatre in Brazil. He won practically every set design award. He brought us his marvelous findings in spatial condensation and malleability, and in the creative diversion of techniques and material—appropriate devices for an underdeveloped country. This is what helped us pave the way to reformulating the reigning design paradigms.  We had to do what Flávio had done in the theatre: thoroughly rethink how to be an architect. Upend the perspective. The way we were taught was to start from a desired result; then others would take care of getting there, no matter how. We, on the other hand, set out to go down to the building site and accompany those carrying out the labor itself, those who actually build, the formally subsumed workers in manufacture who are increasingly deprived of the knowledge and know-how presupposed by this kind of subsumption. We should have been fostering the reconstitution of this knowledge and know-how—not so as to fulfil this assumption, but in order to reinvigorate the other side of this assumption according to Marx: the historical rebellion of the manufacture worker, especially the construction worker. We had to rekindle the demand that fueled this rebellion: total self-determination, and not just that of the manual operation as such. Our aim was above all political and ethical. Aesthetics only mattered by way of what it included—ethics. Instead of estética, we wrote est ética [this is ethics]. We wanted to make building sites into nests for the return of revolutionary syndicalism, which we ourselves had yet to discover. Sérgio Ferro, born in Brazil in 1938, studied architecture at FAUUSP, São Paulo. In the 1960s, he joined the Brazilian communist party and started, along with Rodrigo Lefevre and Flávio Império, the collective known as Arquitetura Nova. After being arrested by the military dictatorship that took power in Brazil in 1964, he moved to France as an exile. As a painter and a professor at the École Nationale Supérieure d’Architecture de Grenoble, where he founded the Dessin/Chantier laboratory, he engaged in extensive research which resulted in several publications, exhibitions, and awards in Brazil and in France, including the title of Chevalier des Arts et des Lettres in 1992. Following his retirement from teaching, Ferro continues to research, write, and paint.

Jun 13, 2025Ravie LakshmananWeb Security / Network Security Cybersecurity researchers are calling attention to a "large-scale campaign" that has been observed compromising legitimate websites with malicious JavaScript injections. According to Palo Alto Networks Unit 42, these malicious injects are obfuscated using JSFuck, which refers to an "esoteric and educational programming style" that uses only a limited set of characters to write and execute code. The cybersecurity company has given the technique an alternate name JSFireTruck owing to the profanity involved. "Multiple websites have been identified with injected malicious JavaScript that uses JSFireTruck obfuscation, which is composed primarily of the symbols [, ], +, $, {, and }," security researchers Hardik Shah, Brad Duncan, and Pranay Kumar Chhaparwal said. "The code's obfuscation hides its true purpose, hindering analysis." Further analysis has determined that the injected code is designed to check the website referrer ("document.referrer"), which identifies the address of the web page from which a request originated. Should the referrer be a search engine such as Google, Bing, DuckDuckGo, Yahoo!, or AOL, the JavaScript code redirects victims to malicious URLs that can deliver malware, exploits, traffic monetization, and malvertising. Unit 42 said its telemetry uncovered 269,552 web pages that have been infected with JavaScript code using the JSFireTruck technique between March 26 and April 25, 2025. A spike in the campaign was first recorded on April 12, when over 50,000 infected web pages were observed in a single day. "The campaign's scale and stealth pose a significant threat," the researchers said. "The widespread nature of these infections suggests a coordinated effort to compromise legitimate websites as attack vectors for further malicious activities." Say Hello to HelloTDS The development comes as Gen Digital took the wraps off a sophisticated Traffic Distribution Service (TDS) called HelloTDS that's designed to conditionally redirect site visitors to fake CAPTCHA pages, tech support scams, fake browser updates, unwanted browser extensions, and cryptocurrency scams through remotely-hosted JavaScript code injected into the sites. The primary objective of the TDS is to act as a gateway, determining the exact nature of content to be delivered to the victims after fingerprinting their devices. If the user is not deemed a suitable target, the victim is redirected to a benign web page. "The campaign entry points are infected or otherwise attacker-controlled streaming websites, file sharing services, as well as malvertising campaigns," researchers Vojtěch Krejsa and Milan Špinka said in a report published this month. "Victims are evaluated based on geolocation, IP address, and browser fingerprinting; for example, connections through VPNs or headless browsers are detected and rejected." Some of these attack chains have been found to serve bogus CAPTCHA pages that leverage the ClickFix strategy to trick users into running malicious code and infecting their machines with a malware known as PEAKLIGHT (aka Emmenhtal Loader), which is known to server information stealers like Lumma. Central to the HelloTDS infrastructure is the use of .top, .shop, and .com top-level domains that are used to host the JavaScript code and trigger the redirections following a multi-stage fingerprinting process engineered to collect network and browser information. "The HelloTDS infrastructure behind fake CAPTCHA campaigns demonstrates how attackers continue to refine their methods to bypass traditional protections, evade detection, and selectively target victims," the researchers said. "By leveraging sophisticated fingerprinting, dynamic domain infrastructure, and deception tactics (such as mimicking legitimate websites and serving benign content to researchers) these campaigns achieve both stealth and scale." Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post. SHARE    

As President Donald Trump kicked off a birthday military parade on the streets of Washington, DC, what’s estimated as roughly 2,000 events were held across the US and beyond — protesting Trump and Elon Musk’s evisceration of government services, an unprecedented crackdown by Immigration and Customs Enforcement (ICE), and countless other actions from the administration in its first five months. Held under the title “No Kings” (with, as you’ll see, one conspicuous exception), they’re the latest in several mass protests, following April’s Hands Off events and a wave of Tesla Takedown demonstrations in March.As The Verge’s Tina Nguyen went to downtown DC, we also sent reporters to No Kings demonstrations spanning the country, plus a “No Tyrants” event in the UK. How would they unfold after promises of “very heavy force” against protesters in the capital, after the deployment of thousands of military troops in a move a judge has bluntly called illegal, and after promises to “liberate” the city of Los Angeles from its “burdensome leadership” by local elected officials? What about the overnight killing of a Minnesota Democratic state representative and her husband, and the shooting of a Democratic state senator and his wife?The answer, at the events we attended, was fairly calmly — even against a backdrop of chaos.Downtown Los Angeles, CaliforniaAn inflatable baby Donald Trump, dressed in a diaper, hovered over throngs of people rallying outside of Los Angeles City Hall. Demonstrators outnumbered clumps of California National Guard members in fatigues posted up along sidewalks. “Go home to your families, we don’t need you in our streets,” one young person wearing a long braid down her back tells them while marching past. “Trump come catch these hands foo!” the back of her sign reads. I can’t see what the front says, but I can tell there’s an empty bag of Cheetos pasted to it.The big baby joins the march, floating through the streets of Downtown LA over demonstrators. A flatbed truck rolls ahead of it, the band — maybe LA’s own Ozomatli? — singing “We don’t like Trump” to the tune of “We Want The Funk.” Ducking inside Grand Central Market from the march, I talk to Puck and Twinkle Toes — two demonstrators in line for the public restrooms. Twinkle Toes tells me she’s part of an activist clown collective called Imp and Circumstance, wearing pink and white clown makeup and a striped pink and white bow wrapped around a loose hair bun atop her head. She’s here exercising her right to free speech, she says. Demonstrators in Los Angeles marched alongside an inflatable Donald Trump baby dressed in a diaper.“The more people that are out here, the more we know that this is not okay. That we don’t want an autocrat. We want democracy,” Puck tells me, adding that the Pride March in Hollywood last weekend was “nothing but love and sunshine” despite protests and burning driverless cars making headlines in downtown. “The news tries to make you think all of LA is rioting. It’s not.” Puck says.Back out on the streets, a young man quickly writes “Fuck ICE” on a black wall with white spray paint before a group of older demonstrators wearing floppy hats shushes him away — warning him that tagging will only attract more law enforcement.Further along, another older man with tufts of white hair sticking out under his Lakers cap walks stiffly and slowly along under the summer sun. A Mexican flag draped across his shoulders, he crosses Hope Street. A young man wearing a Nike cap makes his way over to ask if he wants water; the old man accepts a bottle and keeps walking without stopping. The march has looped around downtown, and is coming to an end back at City Hall. As I make my way to my bus stop, a line of police vehicles — sirens blasting — whizzes past me, back toward the crowd still gathering around City Hall.The Los Angeles Police Department issued a dispersal order for parts of downtown Los Angeles later in the afternoon, citing people “throwing rocks, bricks, bottles and other objects.” Law enforcement reportedly cleared crowds using gas, and the LAPD authorized the use of “less lethal” force.— Justine CalmaPortland, OregonFour different “No Kings” protests in the greater Portland area on Saturday drew massive crowds of tens of thousands across the city. Various activists, government officials, and representatives for politicians spoke at the rallies, which also featured music and live performances. (One advertised free drag shows.) Protesters of all ages came with dogs, strollers, flags, banners, and hand-made signs. At the downtown waterfront, some tourist boats appeared to still be departing, but the bike rental stand (which also sells ice cream) was closed for the day with a hand-lettered explanation reading “No crowns, no thrones, no kings” and “Americans against oligarchy.” Women appearing to be organizers passed out free American flags; many attendees came with their own American flags modified to fly upside down. Most protesters brought signs expressing a wide range of sentiments on the theme of “No Kings.” Some signs were surprisingly verbose (“If the founders wanted a unitary executive (a king) we’d all still be British”) while others were more succinct (“Sic semper tyrannis”). Others opted for simple images, such as a picture of a crown crossed out, or — less frequently — a guillotine. Image: Sarah JeongThe waterfront park area was filled with people from the shoreline to the curb of the nearest street, where protesters held up signs to passing cars that honked in approval. The honking of a passing fire truck sent the crowd into an uproarious cheer. Portland is about a thousand miles from the border with Mexico, but the flag of its distant neighbor nation has emerged as protest iconography in solidarity with Los Angeles. The rainbow pride flag was flown as often as the Mexican flag. Military veterans were scattered throughout the crowd, some identifying themselves as having seen action in conflicts spanning from Vietnam to Afghanistan. Emanuel, an Air Force veteran, told me that he had turned out in defense of the constitution and due process, saying, “Nobody has any rights if one person doesn’t have any rights.” Image: Sarah JeongAnger was directed at ICE and the mass deportations all throughout the day, in signage, in chants, and in rally speeches. The previous night, about 150 people protested at a local ICE facility — coincidentally located by the Tesla dealership — a mile south of downtown, near a highway exit. The ICE facility protests, which have been continuous for some days, have been steadily building up. A couple of “No Kings” signs were present on Friday. (The following day, a handful of “Chinga la migra” signs would show up at the “No Kings” protests). Demonstrators stood on the curb urging passing cars to “Honk if you hate fascists,” successfully eliciting car horns every few seconds, including some from a pristine white Tesla. Federal law enforcement in camo and helmets, their faces obscured, maced and shot at protesters with pepper balls, targeting them through the gates and sniping at them from the rooftop of the building. A handful of protesters — many wearing gas masks and respirators — formed phalanx formations in the driveway, wielding umbrellas and handmade shields. On Saturday, a speaker at one of the “No Kings” rallies advertised the occupation of the ICE facility, saying, “We’re a sanctuary city.” The crowd — replete with American flags both upside down and right side up — cheered. — Sarah JeongNew Port Richey, FloridaNearly every intersection on Pasco County’s State Road 54 looks the same: a cross-section of strip malls, each anchored by a Walmart or Target or Publix, surrounded by a mix of restaurants, nail salons, and gas stations. It’s not an environment that is particularly conducive to protests, but hundreds of people turned out in humid, 90-plus degree weather anyway. The overall size of the crowd is hard to determine, but it’s larger than I — and other attendees — anticipated, given the local demographics. (Trump won 61 percent of the vote in Pasco County in 2024.) New Port Richey, FL. Image: Gaby Del ValleEveryone is on the sidewalk; an organizer with a megaphone tells people to use crosswalks if they’re going to attempt to brave the six-lane highway. Two days earlier, Governor Ron DeSantis said Floridians could legally run over protesters on the street if they feel “threatened.” New Port Richey, FL. Image: Gaby Del ValleSo far, most drivers seem friendly. There are lots of supportive honks. One woman rolls down her window and thanks the protesters. “I love you! I wish I could be with you, but I have to work today!” she yells as she drives away. Not everyone is amenable. A man in a MAGA hat marches through the crowd waving a “thin green line” flag and yelling “long live the king!” as people in the crowd call him a traitor. A pickup truck drives by blasting “Ice Ice Baby,” waving another pro-law enforcement flag. The protesters have flags, too: American flags large and small, some upside down; Mexican; Ukrainian; Palestinian; Canadian; different configurations of pride and trans flags. Their signs, like their flags, illustrate their diverse reasons for attending: opposition to Trump’s “big beautiful” funding bill, DOGE’s budget cuts, and ICE arrests; support for immigrants, government workers, and Palestinians. One woman wears an inflatable chicken suit. Her friend pulls an effigy of Trump — dressed to look both like an eighteenth-century monarch, a taco, and a chicken — alongside her.New Port Richey, FL. Image: Gaby Del ValleMost of the demonstrators are on the older side, but there are people of all ages in attendance. “I thought it was going to be maybe 20 people with a couple of signs,” Abby, 24, says, adding that she’s pleasantly surprised at both the turnout and the fact that most of the protesters are of retirement age. Abe, 20, tells me this is his first protest. Holding a sign that says “ICE = GESTAPO,” he tells me he came out to support a friend who is Mexican. Three teenagers walk by with signs expressing support for immigrants: “While Trump destroys America, we built it.” “Trump: 3 felonies. My parents: 0.” As I drive away, I notice nine counter-protesters off to the side, around the corner from the main event. They wave their own flags, but the demonstrators seemingly pay them no mind.— Gaby Del ValleHistoric Filipinotown, Los AngelesWearing a camo baseball cap — “Desert Storm Veteran” emblazoned on the front — Joe Arciaga greets a crowd of about 100 people in Los Angeles’ Historic Filipinotown around 9:00AM.“Good morning everyone, are you ready for some beautiful trouble?” Arciaga says into the megaphone, an American flag bandana wrapped around his wrist. The faces of Filipino labor leaders Philip Vera Cruz and Larry Itliong, who organized farm workers alongside Cesar Chavez, peer over his shoulders from a mural that lines the length of Unidad Park where Arciaga and a group called Lakas Collective helped organize this neighborhood No Kings rally. “I’m a Desert Storm veteran, and I’m a father of three and a grandfather of three, and I want to work for a future where democracy is upheld, due process, civil rights, the preservation of the rule of law — That’s all I want. I’m not a billionaire, I’m just a regular Joe, right?”, he tells The Verge.Joe Arciaga speaks to people at a rally in Historic Filipinotown, Los Angeles. Image: Justine Calma“I am mad as hell,” he says, when I ask him about the Army 250th anniversary parade Donald Trump has organized in Washington, DC coinciding with the president’s birthday. “The guy does not deserve to be honored, he’s a draft dodger, right?” Arciaga says. He’s “livid” that the President and DOGE have fired veterans working for federal agencies and slashed VA staff.Arciaga organizes the crowd into two lines that file out of the park to stand along Beverly Blvd., one of the main drags through LA. Arciaga has deputized a handful of attendees with security or medical experience with whistles to serve as “marshals” tasked with flagging and de-escalating any potentially risky situation that might arise. Johneric Concordia, one of the co-founders of the popular The Park’s Finest barbecue joint in the neighborhood, is MCing out on Beverly Blvd. He and Arciaga direct people onto the sidewalks and off the asphalt as honking cars zip by. In between chants of “No hate! No fear! Immigrants are welcome here!” and rap songs from LA artist Bambu that Concordia plays from a speaker, Concordia hypes up the organizers. “Who’s cool? Joe’s cool?” He spits into the microphone connected to his speaker. “Who’s streets? Our streets!” the crowd cheers. An hour later, a man sitting at a red light in a black Prius rolls down his window. “Go home!” he yells from the intersection. “Take your Mexican flag and go home!”The crowd mostly ignores him. One attendee on the corner holds up his “No Kings” sign to the Prius without turning his head to look at him. A few minutes later, a jogger in a blue t-shirt raises his fist as he passes the crowd. “Fuck yeah guys,” he says to cheers.By 10AM, the neighborhood event is coming to a close. Demonstrators start to trickle away, some fanning out to other rallies planned across LA today. Concordia is heading out too, microphone and speaker still in hand, “If you’re headed to downtown, watch out for suspicious crew cuts!” — Justine CalmaSan Francisco, California1/10Most of the crowd trickled out after 2pm, which was the scheduled end time of the protest, but hundreds stayed in the area. Image: Vjeran PavicLondon, UKLondon’s protest was a little different than most: it was almost entirely bereft of “No Kings” signs, thanks to the fact that about two miles away much larger crowds were gathered to celebrate the official birthday of one King Charles III. “We don’t have anything against King Charles,” Alyssa, a member of organizers Indivisible London, told me. And so, “out of respect for our host country as immigrants,” they instead set up shop in front of the US embassy with a tweaked message: “No kings, no crowns” became “no tyrants, no clowns.” London, UK. Image: Dominic PrestonOf the hundreds gathered, not everyone got the memo, with a few painted signs decrying kings and crowns regardless, and one brave Brit brandishing a bit of cardboard with a simple message: “Our king is better than yours!”London, UK. Image: Dominic PrestonStill, most of the crowd were on board, with red noses, clown suits, and Pennywise masks dotted throughout, plus costumes ranging from tacos to Roman emperors. “I think tyrants is the better word, and that’s why I dressed up as Caesar, because he was the original,” says Anna, a Long Island native who’s lived in London for three years. “Nobody likes a tyrant. Nobody. And they don’t do well, historically, but they destroy a lot.”For 90 minutes or so the crowd — predominantly American, judging by the accents around me — leaned into the circus theme. Speakers shared the stage with performers, from a comic singalong of anti-Trump protest songs to a protracted pantomime in which a woman in a banana costume exhorted the crowd to pelt a Donald Trump impersonator with fresh peels. London, UK. Image: Dominic PrestonDuring a break in festivities, Alyssa told the crowd, “The most threatening sound to an oligarch is laughter.”— Dominic PrestonProspect Park, Brooklyn, New YorkThe No Kings protest at Brooklyn’s Grand Army Plaza was a calmer affair. Instead of gathering under the picturesque memorial arch, protesters were largely sequestered to a corner right outside Prospect Park, with some streets blocked off by police. The weekly farmers market was in full swing, meaning people cradling bundles of rhubarb were swerving in and out of protest signs that read things like, “Hating Donald Trump is Brat” and “Is it time to get out the pitch forks?” Like during the Hands Off protest in April, New York got rain on Saturday.Prospect Park, Brooklyn. Image: Mia SatoThe area where protesters were gathered made it difficult to count the crowd, but there were hundreds — perhaps a few thousand — people that streamed in and out. At one point, some protesters began marching down the street alongside Prospect Park, while others stayed at Grand Army Plaza to chant, cheer, and hold signs up at oncoming vehicles. With its proximity to the public library, the park, and densely populated neighborhoods, the massive intersection is a high-foot traffic area. Cars blared their horns as they passed, American flags waving in the chilly afternoon breeze.Jane, a Brooklyn resident who stood on the curb opposite the protesters, said she isn’t typically someone who comes out to actions like this: before the No Kings event, she had only ever been to one protest, the Women’s March. (Jane asked that The Verge use her first name only.) Prospect Park, Brooklyn. Image: Mia Sato“I’m deeply concerned about our country,” Jane said, pausing as a long stream of trucks and cars honked continuously in support of the protesters in the background. “I think Trump is behaving as an authoritarian. We’ve seen in Russia, in Hungary, in Hong Kong, that the slide from freedom to not freedom is very fast and very quick if people do not make their voices heard,” Jane said. “I’m concerned that that’s what’s happening in the United States.” Jane also cited cuts to Medicaid and funding for academic research as well as tariffs as being “unacceptable.”Prospect Park, Brooklyn. Image: Mia SatoThe event was peaceful — there were lots of kids present — and people were in good spirits despite the rain. Protest signs ran the gamut from general anti-Trump slogans (“I trust light tampons more than this administration”) to New York City-specific causes like “Andrew Cuomo can’t read” (there is a contenious mayoral election this month). One sign read, “Fix your hearts or die,” an iconic line from the late director, David Lynch’s, Twin Peaks: The Return. And of course, amid nationwide immigration raids that have been escalated by the involvement of the federal government, ICE was top of mind: one sign simply read, “Melt ICE,” and another protester held a large “NO ICE IN NYC” sign. Though it was smaller and more contained than other events, the protest didn’t lack conviction: attendees of all ages stood in the cold rain, chanting and blowing into vuvuzela, banging the lids of pots and pans. At one point a man stood on the median on the street, leading the group in chants of “No justice, no peace.” Cars laid on the horn as they drove by.— Mia SatoAkron, OhioIt’s been raining pretty hard the last few days in Akron, OH, so much that I didn’t think there’d be a large turnout for our chapter of the No Kings protest. But I was emphatically proven wrong as the crowds I saw dwarfed the Tesla Takedown protests last month. Officially, the protest was to take place in front of the John F. Seiberling Federal Building on Main Street in Downtown Akron. But the concentration of people spilled over from that small space down Main Street and up Market Street. All told, though there were no official counts, I estimate somewhere between 500 to 900 people in this blue enclave in Northeast Ohio.The mood was exuberant, buoyed by supporters who honked their horns as they passed. The chorus of horns was nonstop, and when a sanitation truck honked as it went by, cheers got louder. The chants the crowds were singing took on a local flare. Ohio is the home of the Ohio State Buckeyes and anywhere you go, shout “O-H” and you’ll invariably get an “I-O” response. The crowds used that convention to make their own chant, “OH-IO, Donald Trump has got to go.”There was no police presence here and the crowd was very good at policing itself. Ostensibly out of concern for the incidents where people have rammed their cars into protestor crowds, the people here have taken up crossing guard duties, aiding folks who wish to cross Main or Market Streets. Toward the end of my time at the protest, I saw an older gentleman wearing Kent State gear and holding a sign that read, “Remember another time the National Guard was called in?” His sign featured a drawing of the famous photo from the event in which four Kent State students during a protest of the Vietnam War were killed by National Guard troops. I caught up with him to ask him some questions and he told me his name was Chuck Ayers, a professional cartoonist, and was present at the shooting. Akron, OH. Image: Ash Parrish“When I saw the National Guard in front of the federal building in LA,” he told me, “It was just another flashback.”He did not tell me this at the time, but Ayers is a nationally recognized cartoonist, noted for co-creating the comic strip Crankshaft. He’s lived in Ohio his entire life and of course, drew that sign himself. As he was telling me about how seeing news of the National Guard being deployed in LA, I could see him strain to hold back his emotions. He said it still hurts to see this 55 years later, but that he was heartened to see so many people standing here in community and solidarity. He also said that given his pain and trauma he almost didn’t come. When I asked why he showed up when it so obviously causes him pain he said simply, “Because I have to.”— Ash ParrishOneonta, New YorkOn a northward drive to Oneonta — population roughly 15,000, the largest city in New York’s mainly rural Otsego County — one of the most prominent landmarks is a sprawling barn splashed in huge, painted block letters with TRUMP 2024. (The final digits have been faithfully updated every election since 2016.) It’s Trump country, but not uniformly Trumpy country, as evidenced by what I estimated as a hundreds-strong crowd gathered in a field just below Main Street that came together with a friendly county-fair atmosphere. Kids sat on their parents’ shoulders; American flags fluttered next to signs with slogans like SHADE NEVER MADE ANYONE LESS GAY, and attendees grumbled persistently about the event’s feeble sound system, set up on the bed of a pickup truck. It was the kind of conspicuously patriotic, far-from-urban protest that the Trump administration has all but insisted doesn’t exist.Image: Adi RobertsonBeyond a general condemnation of Trump, protest signs repped the same issues being denounced across the country. The wars in Gaza and Ukraine made an appearance, as did Elon Musk and Tesla. A couple of people called out funding cuts for organizations like NPR, one neatly lettered sign reminded us that WEATHER FORECASTING SAVES LIVES, another warned “Keep your nasty little hands off Social Security,” and a lot — unsurprisingly, given the past week’s events — attacked mass deportations and ICE. An attendee who identified himself as Bill, standing behind a placard that blocked most of him from sight, laid out his anger at the administration’s gutting of the Environmental Protection Agency. “I think if it was not for protests, there would be no change,” he told me.The event itself, supported by a coalition including the local chapter of Indivisible, highlighted topics like reproductive justice and LGBTQ rights alongside issues for groups often stereotyped as Republican blocs — there was a speech about Department of Veterans Affairs cuts and a representative from the local Office for the Aging (whose words were mostly lost to the sound system’s whims). Rules for a march around the modest downtown were laid out: no blocking pedestrians or vehicles, and for the sake of families doing weekend shopping, watch the language. “Fuck!” one person yelled indistinctly from the audience. “No, no,” the event’s emcee chided gently. The philosophy, as she put it, was one of persuasion. “We want to build the resistance, not make people angry at us.”Image: Adi RobertsonBut even in a place that will almost certainly never see a National Guard deployment or the ire of a Truth Social post, the Trump administration’s brutal deportation program had just hit close to home. Only hours before the protest commenced, ICE agents were recorded handcuffing a man and removing him in an unmarked black car — detaining what was reportedly a legal resident seeking asylum from Venezuela. The mayor of Oneonta, Mark Drnek, relayed the news to the crowd. “ICE! We see you!” boomed Drnek from the truckbed. “We recognize you for what you are, and we understand, and we reject your vile purpose.”The crowd cheered furiously. The stars and stripes waved.- Adi RobertsonSee More: Policy

Meet Martha Swope, the Legendary Broadway Photographer Who Captured Iconic Moments From Hundreds of Productions and Rehearsals She spent nearly 40 years taking theater and dance pictures, providing glimpses behind the scenes and creating images that the public couldn’t otherwise access Stephanie Rudig - Freelance Writer June 11, 2025 Photographer Martha Swope sitting on a floor covered with prints of her photos in 1987 Andrea Legge / © NYPL Martha Swope wanted to be a dancer. She moved from her home state of Texas to New York to attend the School of American Ballet, hoping to start a career in dance. Swope also happened to be an amateur photographer. So, in 1957, a fellow classmate invited her to bring her camera and document rehearsals for a little theater show he was working on. The classmate was director and choreographer Jerome Robbins, and the show was West Side Story. One of those rehearsal shots ended up in Life magazine, and Swope quickly started getting professional bookings. It’s notoriously tough to make it on Broadway, but through photography, Swope carved out a career capturing theater and dance. Over the course of nearly four decades, she photographed hundreds more rehearsals, productions and promotional studio shots. Unidentified male chorus members dancing during rehearsals for musical West Side Story in 1957 Martha Swope / © NYPL At a time when live performances were not often or easily captured, Swope’s photographs caught the animated moments and distilled the essence of a show into a single image: André De Shields clad in a jumpsuit as the title character in The Wiz, Patti LuPone with her arms raised overhead in Evita, the cast of Cats leaping in feline formations, a close-up of a forlorn Sheryl Lee Ralph in Dreamgirls and the row of dancers obscuring their faces with their headshots in A Chorus Line were all captured by Swope’s camera. She was also the house photographer for the New York City Ballet and the Martha Graham Dance Company and photographed other major dance companies such as the Ailey School. Her vision of the stage became fairly ubiquitous, with Playbill reporting that in the late 1970s, two-thirds of Broadway productions were photographed by Swope, meaning her work dominated theater and dance coverage. Carol Rosegg was early in her photography career when she heard that Swope was looking for an assistant. “I didn't frankly even know who she was,” Rosegg says. “Then the press agent who told me said, ‘Pick up any New York Times and you’ll find out.’” Swope’s background as a dancer likely equipped her to press the shutter at the exact right moment to capture movement, and to know when everyone on stage was precisely posed. She taught herself photography and early on used a Brownie camera, a simple box model made by Kodak. “She was what she described as ‘a dancer with a Brownie,’” says Barbara Stratyner, a historian of the performing arts who curated exhibitions of Swope’s work at the New York Public Library. An ensemble of dancers in rehearsal for the stage production Cats in 1982 Martha Swope / © NYPL “Dance was her first love,” Rosegg says. “She knew everything about dance. She would never use a photo of a dancer whose foot was wrong; the feet had to be perfect.” According to Rosegg, once the photo subjects knew she was shooting, “the anxiety level came down a little bit.” They knew that they’d look good in the resulting photos, and they likely trusted her intuition as a fellow dancer. Swope moved with the bearing of a dancer and often stood with her feet in ballet’s fourth position while she shot. She continued to take dance classes throughout her life, including at the prestigious Martha Graham School. Stratyner says, “As Graham got older, [Swope] was, I think, the only person who was allowed to photograph rehearsals, because Graham didn’t want rehearsals shown.” Photographic technology and the theater and dance landscapes evolved greatly over the course of Swope’s career. Rosegg points out that at the start of her own career, cameras didn’t even automatically advance the film after each shot. She explains the delicate nature of working with film, saying, “When you were shooting film, you actually had to compose, because you had 35 shots and then you had to change your film.” Swope also worked during a period of changing over from all black-and-white photos to a mixture of black-and-white and color photography. Rosegg notes that simultaneously, Swope would shoot black-and-white, and she herself would shoot color. Looking at Swope’s portfolio is also an examination of increasingly crisp photo production. Advances in photography made shooting in the dark or capturing subjects under blinding stage lights easier, and they allowed for better zooming in from afar. Martha Graham rehearses dancer Takako Asakawa and others in Heretic, a dance work choreographed by Graham, in 1986 Martha Swope / © NYPL It’s much more common nowadays to get a look behind the curtain of theater productions via social media. “The theater photographers of today need to supply so much content,” Rosegg says. “We didn’t have any of that, and getting to go backstage was kind of a big deal.” Photographers coming to document a rehearsal once might have been seen as an intrusion, but now, as Rosegg puts it, “everybody is desperate for you to come, and if you’re not there, they’re shooting it on their iPhone.” Even with exclusive behind-the-scenes access to the hottest tickets in town and the biggest stars of the day, Swope remained unpretentious. She lived and worked in a brownstone with her apartment above her studio, where the film was developed in a closet and the bathroom served as a darkroom. Rosegg recalls that a phone sat in the darkroom so they could be reached while printing, and she would be amazed at the big-name producers and theater glitterati who rang in while she was making prints in an unventilated space. From left to right: Paul Winfield, Ruby Dee, Marsha Jackson and Denzel Washington in the stage production Checkmates in 1988 Martha Swope / © NYPL Swope’s approachability extended to how she chose to preserve her work. She originally sold her body of work to Time Life, and, according to Stratyner, she was unhappy with the way the photos became relatively inaccessible. She took back the rights to her collection and donated it to the New York Public Library, where many photos can be accessed by researchers in person, and the entire array of photos is available online to the public in the Digital Collections. Searching “Martha Swope” yields over 50,000 items from more than 800 productions, featuring a huge variety of figures, from a white-suited John Travolta busting a disco move in Saturday Night Fever to Andrew Lloyd Webber with Nancy Reagan at a performance of Phantom of the Opera. Swope’s extensive career was recognized in 2004 with a special Tony Award, a Tony Honors for Excellence in Theater, which are given intermittently to notable figures in theater who operate outside of traditional awards categories. She also received a lifetime achievement award from the League of Professional Theater Women in 2007. Though she retired in 1994 and died in 2017, her work still reverberates through dance and Broadway history today. For decades, she captured the fleeting moments of theater that would otherwise never be seen by the public. And her passion was clear and straightforward. As she once told an interviewer: “I’m not interested in what’s going on on my side of the camera. I’m interested in what’s happening on the other side.” Get the latest Travel & Culture stories in your inbox.

Jun 14, 2025Ravie LakshmananMalware / Threat Intelligence A new malware campaign is exploiting a weakness in Discord's invitation system to deliver an information stealer called Skuld and the AsyncRAT remote access trojan. "Attackers hijacked the links through vanity link registration, allowing them to silently redirect users from trusted sources to malicious servers," Check Point said in a technical report. "The attackers combined the ClickFix phishing technique, multi-stage loaders, and time-based evasions to stealthily deliver AsyncRAT, and a customized Skuld Stealer targeting crypto wallets." The issue with Discord's invite mechanism is that it allows attackers to hijack expired or deleted invite links and secretly redirect unsuspecting users to malicious servers under their control. This also means that a Discord invite link that was once trusted and shared on forums or social media platforms could unwittingly lead users to malicious sites. Details of the campaign come a little over a month after the cybersecurity company revealed another sophisticated phishing campaign that hijacked expired vanity invite links to entice users into joining a Discord server and instruct them to visit a phishing site to verify ownership, only to have their digital assets drained upon connecting their wallets. While users can create temporary, permanent, or custom (vanity) invite links on Discord, the platform prevents other legitimate servers from reclaiming a previously expired or deleted invite. However, Check Point found that creating custom invite links allows the reuse of expired invite codes and even deleted permanent invite codes in some cases. This ability to reuse Discord expired or deleted codes when creating custom vanity invite links opens the door to abuse, allowing attackers to claim it for their malicious server. "This creates a serious risk: Users who follow previously trusted invite links (e.g., on websites, blogs, or forums) can unknowingly be redirected to fake Discord servers created by threat actors," Check Point said. The Discord invite-link hijacking, in a nutshell, involves taking control of invite links originally shared by legitimate communities and then using them to redirect users to the malicious server. Users who fall prey to the scheme and join the server are asked to complete a verification step in order to gain full server access by authorizing a bot, which then leads them to a fake website with a prominent "Verify" button. This is where the attackers take the attack to the next level by incorporating the infamous ClickFix social engineering tactic to trick users into infecting their systems under the pretext of verification. Specifically, clicking the "Verify" button surreptitiously executes JavaScript that copies a PowerShell command to the machine's clipboard, after which the users are urged to launch the Windows Run dialog, paste the already copied "verification string" (i.e., the PowerShell command), and press Enter to authenticate their accounts. But in reality, performing these steps triggers the download of a PowerShell script hosted on Pastebin that subsequently retrieves and executes a first-stage downloader, which is ultimately used to drop AsyncRAT and Skuld Stealer from a remote server and execute them. At the heart of this attack lies a meticulously engineered, multi-stage infection process designed for both precision and stealth, while also taking steps to subvert security protections through sandbox security checks. AsyncRAT, which offers comprehensive remote control capabilities over infected systems, has been found to employ a technique called dead drop resolver to access the actual command-and-control (C2) server by reading a Pastebin file. The other payload is a Golang information stealer that's downloaded from Bitbucket. It's equipped to steal sensitive user data from Discord, various browsers, crypto wallets, and gaming platforms. Skuld is also capable of harvesting crypto wallet seed phrases and passwords from the Exodus and Atomic crypto wallets. It accomplishes this using an approach called wallet injection that replaces legitimate application files with trojanized versions downloaded from GitHub. It's worth noting that a similar technique was recently put to use by a rogue npm package named pdf-to-office. The attack also employs a custom version of an open-source tool known as ChromeKatz to bypass Chrome's app-bound encryption protections. The collected data is exfiltrated to the miscreants via a Discord webhook. The fact that payload delivery and data exfiltration occur via trusted cloud services such as GitHub, Bitbucket, Pastebin, and Discord allows the threat actors to blend in with normal traffic and fly under the radar. Discord has since disabled the malicious bot, effectively breaking the attack chain. Check Point said it also identified another campaign mounted by the same threat actor that distributes the loader as a modified version of a hacktool for unlocking pirated games. The malicious program, also hosted on Bitbucket, has been downloaded 350 times. It has been assessed that the victims of these campaigns are primarily located in the United States, Vietnam, France, Germany, Slovakia, Austria, the Netherlands, and the United Kingdom. The findings represent the latest example of how cybercriminals are targeting the popular social platform, which has had its content delivery network (CDN) abused to host malware in the past. "This campaign illustrates how a subtle feature of Discord's invite system, the ability to reuse expired or deleted invite codes in vanity invite links, can be exploited as a powerful attack vector," the researchers said. "By hijacking legitimate invite links, threat actors silently redirect unsuspecting users to malicious Discord servers." "The choice of payloads, including a powerful stealer specifically targeting cryptocurrency wallets, suggests that the attackers are primarily focused on crypto users and motivated by financial gain." Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post. SHARE    