Twitxy
Saved
@KirkDerpca's profile picture
View on X

Kirk

Verified account This account is verified. Learn more

@KirkDerpca

Security Research - We like the internet - derp.ca

Founder ohey.ca 🍁
Toronto Joined March 2026
316 Following 377 Followers 754 Posts

Latest posts 5

Pinned post

Kirk Verified account @KirkDerpca
Now providing the #ClickFix Lure commands from live pages on Ohey > ohey.ca/threats/clickf…

This adds to the #EtherHiding contracts tracker > ohey.ca/threats/etherh…

Both updated daily #FreeIntel

MCP > github.com/Oheyresearch/o…

Also available in Claude as a connector under Ohey Research.
ohey.ca ClickFix command tracker | Ohey 311 hosts that ClickFix lure commands download from, with the kits behind them, site counts, dates and the latest defanged command for each, updated daily.
Kirk Verified account @KirkDerpca
The web-based iOS exploit Coruna & Darksword are expanding into iOS26 with "C10" - seen on a Coruna flagged site this morning but not yet activated.

The code details CVE-2026-10001 from Google Chrome as a vector.

ohey.ca/research/darks…
ohey.ca DarkSword router's iOS 26 route, C10, is switched off | Ohey A DarkSword and Coruna router on 154.222.16[.]220 sends iOS 26 to a chain it calls C10. Its config has C10 off, and its iOS 26 plugin carries a Chrome CVE.
Kirk Verified account @KirkDerpca
The contracts tracker is now over 170.

We created a connector and were approved in Claude so you can access the research natively in your sessions <3
Kirk Verified account @KirkDerpca Nov 1
Found some more contracts checking the couch cushions. Upto 167 daily with 194 current etherhiding C2 hosts and 382 from history.
View quoted post on X
Kirk Verified account @KirkDerpca
What they are describing for engineer A "fake homebrew" aligns with the known #ClickFix Amos / MacSync campaigns which also had ties to the HBO Maxx incident.
Wazz Verified account @WazzCrypto 6d
The domino that caused the Binance $6 Billion hack was a malicious Google ad.

1) Google has been getting away with profiting from ads for literal malware and phishing sites for far too long

2) Engineer A is retarded
View quoted post on X