Business email compromises where where the threat actor manipulates the IBAN/Account Number on invoices are now pretty common.
The cooler version is doing this on the users client...
...in memory
...by developing your own document parser
G0rb :possum:
npub1p5…ky8t3
2026-10-13 15:27:49 UTC
Author Public Key
npub1p5jzgxh7d267v34epvwgvvr60wdzcztu42hu993u3sgu2www2n5szky8t3Seen on
wss://relay.momostr.pinkPublished at
2026-10-13 15:27:49 UTCEvent JSON
{
"id": "67395ee6af46c4ee5c4d9c168b2ea5726ff13f41ee674ead0e5f4ddc4f7e47e0",
"pubkey": "0d24241afe6ab5e646b90b1c86307a7b9a2c097caaafc2963c8c11c539ce54e9",
"created_at": 1791905269,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@g0rb/117434303746862883",
"web"
],
[
"proxy",
"https://infosec.exchange/users/g0rb/statuses/117434303746862883",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/g0rb/statuses/117434303746862883",
"pink.momostr"
],
[
"-"
]
],
"content": "Business email compromises where where the threat actor manipulates the IBAN/Account Number on invoices are now pretty common.\n\nThe cooler version is doing this on the users client...\n\n...in memory\n...by developing your own document parser",
"sig": "b5b7ca1f8424dded33be63b460378bd9fddc3de6290bd77e9fbe9275d99cdf9898b3bb073f5b3bb90489cda4698713a17dfa02142405755819e09543fd60dadc"
}