Siluri Sanguine

Art by: @artofcorinne

I am writing a side fic to my main Veilguard fic focusing on Illario Dellamorte and a De Riva crow he meets when he is assigned a task that is meant to prove his loyalty.

Kaelin De Riva knows who Illario is. She is fully and entirely aware of what he did. So when he joins their team in Minrathous she is skeptical.

unofficial artfight on @xkatchy of her de Riva Rook OC Cioba.

Wedding Dress

1882

🎨 Calendar Artist: doriandotexe

Dorian is a full-time artist from the UK. They have been a long-time fan of Dragon Age ever since Origins released. He is thrilled to finally be part of this project after missing the application deadline every year previously!

Some studies, having fun with my beloved husb-I mean, my beloved Señor Dellamorte~🐦‍⬛💜

Shadow Dragon Week - Day 2: Freedom | Chains

Dawes Mercar on the infamous Nessus job. Thank you for hosting, @shadow-dragon-week!

Day 1 🐍 Day 2 🐍 Day 3 🐍 Day 4 🐍 Day 5 🐍 Day 6

Thanks to @shadow-dragon-week for hosting!

Day 2: Freedom/Chains

Rating: Mature Words: 407 Warnings: Implied Sexual Content, Mention of Tevinter Slavery, Drinking

Read on Ao3, or in full below (more below the cut)!

9 Haring, 9:43 Dragon

The warehouse Wicked Grace was a bust, as far as cards go, at least. Would’ve enjoyed taking on a magister or two in that arena, but they didn’t show.

Elek—or so I’m told—must have reached out to a friend or two about whatever I’d so carelessly whispered in his bed, because someone else waited for me. Called herself Marisa, sent on behalf of someone named The Viper (ridiculous name) from the Shadow Dragons (less ridiculous), the Lucerni’s underground arm.

We talked. For a long, long while.

The last time I stayed up all night without drinking my way through a bottle or two, just talking… likely not since my days in the Circle?

It was a good talk though.

Told me these Shadow Dragons she’s involved with have eyes on Cassian. They have for some time, and they’ve been waiting for an opportune moment. Know what he’s doing, though they don’t know names, just a rough idea of numbers. Wish I had that luxury.

"A date in the light of the night city"

Microsoft has removed 119 extensions from the Edge add-on store which were all tied to one adware campaign.

In a paper titled “Inside StegoAd: How We Disrupted a Massive Malicious Extension Campaign,” Microsoft researchers detail how they uncovered and dismantled a sophisticated malware campaign that abused browser extensions to infect users. According to Microsoft, the campaign involved 119 malicious browser extensions which were downloaded by 2.6 million users.

The extensions all promised, and delivered, some kind of basic functionality: ad blockers, VPNs, translators, video downloaders, calculators, coupon extensions and so on. But after a while they turned out to be “sleepers” and secretly started downloading additional malware.

Among the payload was malware involved in ad fraud, but also extensions that ran arbitrary JavaScript pushed from the server, which stole Google credentials and second-factor codes at sign-in, harvested WordPress admin logins, and exfiltrated cookies in bulk for session hijacking.

The name of the campaign “StegoAd” is derived from the words advertising and steganography, which means techniques of hiding secrets in something that doesn’t immediately cause suspicion. In this case, hiding code in images.

And not only did the cybercriminals try to stay under the radar by waiting for some time, and hiding malicious code inside images, they also left some victims alone. Some of the extensions only went rogue in about 10% of installs, which would actually execute the next stage of the malware, while the other ~90% would be left alone (at least for that execution attempt). And, in some cases, they re-used names of well-known legitimate extensions to install an additional level of trust.

Browser extensions are a source of wealth for cybercriminals because it compares to installing a small program that lives inside your browser, which can see and report about everything you do on the internet.

Now I hear some of you thinking: I don’t use Edge. Or I’ve used it just once, to download and install my favorite browser. But although Microsoft discovered and analyzed the campaign, the techniques used in this campaign are applicable to Chromium-based browsers in general.

This campaign was less about exploiting a browser vulnerability and more about tricking users into installing a trusted-looking extension, then using sophisticated concealment techniques to avoid detection long enough to compromise systems.