Skip to main content
To Customer Support To Customer Support

Welcome

News, Announcements, Tech Discussions

44923 Topics
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Bangkok busts SMS Blaster sending 1 million scam texts from a van

November 24, 2024 By Bill Toulas The Thailand police located a van and arrested its driver for using an SMS blaster device to spam over 100,000 SMS phishing texts an hour to people living in Bangkok.The device, which reportedly had a range of approximately three kilometers (10,000 feet), could send out messages at a rate of 100,000 every hour.Over three days, the scammers sent almost one million SMS text messages to mobile devices in range that stated, "Your 9,268 points are about to expire! Hurry up and redeem your gift now."SMS blaster in back of a van in BangkokSource: Khaosod EnglishThe text messages contained a link to a phishing website that contained the string 'aisthailand,' impersonating Advanced Info Service (AIS), Thailand's largest mobile phone operator. >>Full Article<<

30
Jasper_The_Rasper
Moderator
7 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
North Korea Deploying Fake IT Workers in China, Russia, Other Countries

The North Korean fake IT workers have infiltrated businesses in China, Russia, and other countries aside from the US. November 25, 2024 By Ionut Arghire The North Korean fake IT worker scheme is spread globally, with businesses in China, Russia, and other countries also affected, Microsoft says.Recent reports have shown that hundreds of companies in the US, UK, and Australia have hired fake IT workers from North Korea, who generated millions in revenue for the Pyongyang regime between 2020 and 2023.In addition to generating funds that fuel North Korea’s weapons program, the fake IT workers may also steal data from the hiring companies and extort them, Microsoft said in a presentation at the CYBERWARCON conference last week. >>Full Article<<

30
Jasper_The_Rasper
Moderator
7 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Microsoft 365 outage impacts Exchange Online, Teams, Sharepoint

November 25, 2024 By Sergiu Gatlan Microsoft is working on fixing an ongoing and widespread Microsoft 365 outage that is impacting multiple services and features, including Exchange Online, Microsoft Teams, and SharePoint Online.Since this outage started roughly six hours ago, Downdetector has received thousands of reports, with affected users saying they're also experiencing problems connecting with other services, such as OneDrive, Purview, Copilot, and Outlook Web and Desktop."We're investigating an issue impacting users attempting to access Exchange Online or functionality within Microsoft Teams calendar. For more information, please refer to MO941162 in the admin center," the company said when it acknowledged the issues 6 hours ago."While we continue to work on mitigating the issue, we've added a comprehensive list of impacted services and scenarios to the more info section." >>Full Article<<

10
Jasper_The_Rasper
Moderator
7 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Vulnerabilities Expose mySCADA myPRO Systems to Remote Hacking

Critical vulnerabilities patched by mySCADA in its myPRO HMI/SCADA product can allow remote and unauthenticated takeover of the system. November 25, 2024 By Eduard Kovacs The myPRO product of Czech industrial automation company mySCADA is affected by several critical vulnerabilities, including ones that can allow a remote, unauthenticated attacker to take complete control of the targeted system. myPRO is a human-machine interface (HMI) and supervisory control and data acquisition (SCADA) system designed for visualizing and controlling industrial processes. The product can run on Windows, macOS and Linux, including servers, PCs and embedded devices.Cybersecurity researcher Michael Heinzl, who has found many industrial control system (ICS) vulnerabilities over the past years, discovered that myPRO’s Manager and Runtime components are impacted by five types of flaws. >>Full Article<<

20
Jasper_The_Rasper
Moderator
7 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
FlipaClip animation app data breach exposes details of almost 900,000 users

November 25, 2024 By Graham CLULEY Flipaclip, an animation creation app that is particularly popular with youngsters, has exposed the details of over 890,000 users.A vulnerability in the frame-by-frame animation app, which is available for iOS and Android, was initially discovered this month by researcher "BobDaHacker" who responsibly reported it to FlipaClip's developers Visual Blasters.The vulnerability allowed unauthorised parties to access information about the app's users from an exposed Google Firebase server. >>Full Article<<

30
Jasper_The_Rasper
Moderator
7 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Russia-linked APT TAG-110 uses targets Europe and Asia

November 25, 2024 By Pierluigi Paganini Russia-linked threat actors TAG-110 employed custom malware HATVIBE and CHERRYSPY to target organizations in Asia and Europe.Insikt Group researchers uncovered an ongoing cyber-espionage campaign by Russia-linked threat actor TAG-110 that employed custom malware tools HATVIBE and CHERRYSPY.The campaign primarily targeted government entities, human rights groups, and educational institutions in Central Asia, East Asia, and Europe.The researchers pointed out that the campaign’s tactics, techniques and procedures align with the historical operations of UAC-0063, attributed to Russian APT APT28 (aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, and STRONTIUM).The APT used HATVIBE loader to deliver malware like CHERRYSPY, threat actors often rely on malicious emails or exploited web vulnerabilities. HATVIBE uses obfuscation (e.g., XOR encryption) and persists via scheduled tasks with mshta.exe. The loader communicates with C2 servers via HTTP PUT, sha

30
Jasper_The_Rasper
Moderator
7 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Salt Typhoon hackers backdoor telcos with new GhostSpider malware

November 25, 2024 By Bill Toulas The Chinese state-sponsored hacking group Salt Typhoon has been observed utilizing a new "GhostSpider" backdoor in attacks against telecommunication service providers.The backdoor was discovered by Trend Micro, which has been monitoring Salt Typhoon's attacks against critical infrastructure and government organizations worldwide.Along with GhostSpider, Trend Micro discovered that the threat group also uses a previously documented Linux backdoor named 'Masol RAT,'  a rootkit named 'Demodex,' and a modular backdoor shared among Chinese APT groups named 'SnappyBee.' >>Full Article<<

10
Jasper_The_Rasper
Moderator
7 days ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Alert CISA Adds One Known Exploited Vulnerability to Catalog Release Date November 25, 2024

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.CVE-2023-28461 Array Networks AG and vxAG ArrayOS Improper Authentication VulnerabilityThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by pri

30
TripleHelix
Moderator
8 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Hackers abuse Avast anti-rootkit driver to disable defenses

November 23, 2024 By Bill Toulas A new malicious campaign is using a legitimate but old and vulnerable Avast Anti-Rootkit driver to evade detection and take control of the target system by disabling security components.The malware that drops the driver is a variant of an AV Killer of no particular family. It comes with a hardcoded list of 142 names for security processes from various vendors.Since the driver can operate at kernel level, it provides access to critical parts of the operating system and allows the malware to terminate processes.Security researchers at cybersecurity company Trellix recently discovered a new attack that leverages the bring-your-own-vulnerable-driver (BYOVD) approach with an old version of the anti-rootkit driver to stop security products on a targeted system. Attack chainSource: Trellix >>Full Article<<

141
TripleHelix
Moderator
9 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Andrew Tate 'online university’ suffers breach: 800,000 users' data exposed

Hackers targeted the influencer's online university. By Matt Binder  on November 22, 2024 Far-right influencer and self-described misogynist Andrew Tate has become the target of an anonymous hacktivist group. Sensitive data from hundreds of thousands of subscribers to Tate’s “online university” was stolen.On Thursday, hackers announced their breach of Tate's "The Real World" website by flooding the private members' chatroom with pro-feminist emojis and transgender pride flags, as first reported by DailyDot. The hackers also uploaded an emoji featuring an AI-generated photo of Tate with an exaggerated rear end, draped in the trans pride flag. Tate was streaming on the right-wring video platform Rumble while the hackers took over his website's primary chatroom. >>Full Article<<

20
Jasper_The_Rasper
Moderator
10 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
QNAP pulls buggy QTS firmware causing widespread NAS issues

November 22, 2024 By Sergiu Gatlan ​QNAP has pulled a recently released firmware update after widespread customer reports that it's breaking connectivity and, in some cases, locking users out of their devices.QTS 5.2.2.2950 build 20241114, the buggy firmware causing these issues, was released this Tuesday for a long list of QTS network-attached storage (NAS) models to patch multiple security vulnerabilities and fix various known issues.However, according to users who have installed it since then, it also breaks various NAS features and capabilities, including the ability to connect to updated devices that are showing "Your login credentials are incorrect or account is no longer valid" errors even after resets.Others also see "Detected unauthorized changes when starting up the system" errors and have problems using built-in apps like Malware Remover, File Station, and Resource Monitor "because Python2 is not installed." >>Full Article<<

30
Jasper_The_Rasper
Moderator
10 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
US Takes Down Stolen Credit Card Marketplace PopeyeTools

The US government has announced the seizure of stolen credit card marketplace PopeyeTools and charges against its administrators. November 22, 2024 By Ionut Arghire The US Department of Justice this week announced the seizure of PopeyeTools, a marketplace for trading stolen credit card information, and charges against three of its administrators.PopeyeTools, DoJ announced, was disrupted after the US legally seized its .com, .co.uk, and .to domains that facilitated access to the marketplace.According to court documents, in or around 2016, PopeyeTools was already a significant online marketplace for trading financial information and tools that allowed miscreants to carry out cybercrime and fraud activities.Users of the illicit portal had access to stolen bank account, credit card, and debit card numbers, and to additional information that facilitated conducting fraudulent transactions. >>Full Article<<

30
Jasper_The_Rasper
Moderator
10 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Meta takes down more than 2 million accounts in fight against pig butchering

 November 22, 2024 By Pieter Arntz Meta provided insight this week into the company’s efforts in taking down more than 2 million accounts that were connected to pig butchering scams on their owned platforms, Facebook and Instagram.Pig butchering scams are big business, with hundreds of millions of dollars involved every year. The numbers are not precise because some researchers see these scams as a special kind of romance scam, while others classify them as investment fraud, muddying the numbers based on which group is counting what type of loss.Still, the general idea is that scammers use elaborate storylines to fatten up victims into believing they are in a romantic or otherwise close personal relationship. Once the victim places enough trust in the scammer, they bring the victim into a cryptocurrency investment scheme. Then comes the “butchering”—an attempt to “bleed” a target dry of their money. >>Full Article<<

20
Jasper_The_Rasper
Moderator
10 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
More than 2,000 Palo Alto Networks firewalls hacked exploiting recently patched zero-days

November 22, 2024 By Pierluigi Paganini Threat actors already hacked thousands of Palo Alto Networks firewalls exploiting recently patched zero-day vulnerabilities.Thousands of Palo Alto Networks firewalls have reportedly been compromised in attacks exploiting recently patched zero-day vulnerabilities (CVE-2024-0012 and CVE-2024-9474) in PAN-OS.CVE-2024-0012 is a vulnerability in Palo Alto Networks PAN-OS that allows unauthenticated attackers with network access to the management web interface to bypass authentication and gain administrator privileges. This access enables administrative actions, configuration tampering, or exploitation of other vulnerabilities like CVE-2024-9474. The issue affects PAN-OS versions 10.2, 11.0, 11.1, and 11.2 but does not impact Cloud NGFW or Prisma Access.CVE-2024-9474 is a privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall w

40
Jasper_The_Rasper
Moderator
10 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Microsoft president asks Trump to “push harder” against Russian hacks

Brad Smith wants US to take a tougher approach to state-sponsored cyberattacks.Tim Bradshaw, Financial Times – 22 Nov 2024 Microsoft’s president has called on Donald Trump to “push harder” against cyber attacks from Russia, China, and Iran amid a wave of state-sponsored hacks targeting US government officials and election campaigns.Brad Smith, who is also the Big Tech company’s vice chair and top legal officer, told the Financial Times that cyber security “deserves to be a more prominent issue of international relations” and appealed to the US president-elect to send a “strong message.”“I hope that the Trump administration will push harder against nation-state cyber attacks, especially from Russia and China and Iran,” Smith said. “We should not tolerate the level of attacks that we are seeing today.”Ransomware attacks against US businesses have surged in recent years, often perpetrated by criminal gangs that Smith said were “tolerated... and in some cases even facilitated” by the Russi

50
Jasper_The_Rasper
Moderator
10 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Hackers breach US firm over Wi-Fi from Russia in 'Nearest Neighbor Attack'

November 22, 2024 By Bill Toulas Russian state hackers APT28 (Fancy Bear/Forest Blizzard/Sofacy) breached a U.S. company through its enterprise WiFi network while being thousands of miles away, by leveraging a novel technique called "nearest neighbor attack."The threat actor pivoted to the target after first compromising an organization in a nearby building within the WiFi range.The attack was discovered on February 4, 2022, when cybersecurity company Volexity detected a server compromise at a customer site in Washington, DC that was doing Ukrainian-related work.APT28 is part of Russia's military unit 26165 in the General Staff Main Intelligence Directorate (GRU) and has been conducting cyber operations since at least 2004.The hackers, which Volexity tracks as GruesomeLarch, first obtained the credentials to the target's enterprise WiFi network through password-spraying attacks targeting a victim's public-facing service.However, the presence of multi-factor authentication (MFA) protect

30
Jasper_The_Rasper
Moderator
10 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Feds Charge Five Men in ‘Scattered Spider’ Roundup

See also - Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested November 21, 2024 By Brian Krebs Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass, MailChimp, Okta, T-Mobile and Twilio.A visual depiction of the attacks by the SMS phishing group known as Scattered Spider, and Oktapus. Image: Amitai Cohen twitter.com/amitaico.The five men, aged 20 to 25, are allegedly members of a hacking conspiracy dubbed “Scattered Spider” and “Oktapus,” which specialized in SMS-based phishing attacks that tricked employees at tech firms into entering their credentials and one-time passcodes at phishing websites.The targeted SMS scams asked employees to click a link and log in at a website that mimicked their employer’s Okta authentication page. Some SMS phishing messages told employees their VPN crede

20
Jasper_The_Rasper
Moderator
10 days ago
C
Administrator
ConnorMThreat Research Analyst
published in Security Industry News
Cyber News Rundown Week: Ymir ransomware targets RustyStealer victimsNews

Researchers have been tracking the Ymir ransomware family since it first appeared back in July of this year and have identified several unique traits of the variant. The noteworthy, unusual activity is the variant's ability to use in-memory execution to avoid detection and their use of PDF files for ransom notes, displayed as INCIDENT_REPORT.pdf. Additionally, Ymir seems to be launching secondary attacks on victims who have had their systems compromised by RustyStealer, an infostealer that hunts for and exfiltrates credentials, which are likely being used or sold to Ymir and other threat actors.Ahold Delhaize suffers critical cyberattackOfficials for the US branch of the global retail and wholesaler, Ahold Delhaize, have been scrambling to secure and identify the entry point for a cyberattack that began impacting their internal network at the end of last week. As the investigation continues, staff are working to return several of the company’s subsidiary brand’s e-commerce sites to nor

304
Ssherjj
Moderator
10 days ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Microsoft November 2024 Security Updates (Patch Tuesday)

This release consists of the following 89 Microsoft CVEs: Microsoft security update summary for November 2024November 12, 2024Here’s a summary of Microsoft security updates released on this date.Critical security updates.NET 9.0 installed on Linux .NET 9.0 installed on Mac OS .NET 9.0 installed on Windows Microsoft Visual Studio 2022 version 17.10 Microsoft Visual Studio 2022 version 17.11 Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.8 Windows 11 Version 22H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server

426
TripleHelix
Moderator
11 days ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Release notes for Microsoft Edge Security Updates November 21, 2024

Version 131.0.2903.63Fixed various bugs and performance issues.Stable channel security updates are listed here.FixesFixed an issue which prevented the "Delete browsing data" dialog window from closing after clicking the "Clear now" button. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel#version-1310290363-november-21-2024  Make sure to re-add back in the Privacy Protection area after every update. Click on GIF to see full size!  

50
TripleHelix
Moderator
11 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Exploitation Attempts Target Citrix Session Recording Vulnerabilities

Exploitation attempts seen for two recently patched Citrix Session Recording vulnerabilities tracked as CVE-2024-8068 and CVE-2024-8069. November 21, 2024 By Eduard Kovacs Exploitation attempts have been seen for two recently patched Citrix Session Recording vulnerabilities. The vulnerabilities, tracked as CVE-2024-8068 and CVE-2024-8069, were discovered by researchers at cybersecurity firm WatchTowr, which made public technical details and a proof-of-concept (PoC) exploit on November 12.WatchTowr described the vulnerabilities as affecting the Citrix Virtual Apps and Desktops virtualization solution, and warned that they can allow unauthenticated remote code execution.When it initially disclosed the vulnerabilities, WatchTowr said it had not been aware of CVE identifiers and did not know which versions of the Citrix product included patches for the flaws, leading many to believe that they had yet to be fixed. The company later updated its blog post with the CVEs and a link to Citrix’s

50
Jasper_The_Rasper
Moderator
11 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
After CrowdStrike Outage, Microsoft Debuts ‘Quick Machine Recovery’ Tool

Microsoft debuts Quick Machine Recovery tool to apply fixes even when machines are unable to boot, without needing physical access. November 21, 2024 By Ryan NaraineMicrosoft used the spotlight of its Ignite conference this week to introduce a new Quick Machine Recovery tool to help organizations remotely rebuild computer systems after major crises like the CrowdStrike outage earlier this year.The software maker said the feature will enable IT administrators to execute “targeted fixes” from Windows Update, even when machines are unable to boot, without needing physical access to the PC. It is a direct response to the CrowdStrike Falcon sensor crash that blue-screened millions of Windows machines around the world and caused major delays as IT staff struggled to manually fix broken computer systems.“This remote recovery will unblock your employees from broad issues much faster than what has been possible in the past,” Microsoft said of the Quick Machine Recovery planned for release into

30
Jasper_The_Rasper
Moderator
11 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Microsoft disrupts ONNX phishing-as-a-service infrastructure

November 21, 2024 By Sergiu Gatlan ​Microsoft has seized 240 domains used by customers of ONNX, a phishing-as-a-service (PhaaS) platform, to target companies and individuals across the United States and worldwide since at least 2017.According to Microsoft's Digital Defense Report 2024, ONNX (also known as Caffeine and FUHRER) was the top Adversary in the Middle (AitM) phishing service by volume of phishing messages during the first half of 2024. Tens to hundreds of millions of phishing emails targeted Microsoft 365 accounts each month and customers of various other tech companies."These 'do it yourself' kits make up a significant portion of the tens to hundreds of millions of phishing messages observed by Microsoft each month and the fraudulent ONNX operation was a top 5 supplier in the first half of 2024," Microsoft told BleepingComputer."The fraudulent ONNX operation offered phishing kits designed to target a variety of companies across the technology sector, including Google, DropBo

30
Jasper_The_Rasper
Moderator
11 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Chinese APT Gelsemium Deploys 'Wolfsbane' Linux Variant

In a sign of the times, a backdoor malware whose ancestors date back to 2005 has morphed to target Linux systems.   November 21, 2024 By Nate Nelson Two well-documented Chinese backdoors have recently been modified to operate on Linux systems.The advanced persistent threat (APT) "Gelsemium" is a decade old now, and the new malware tied to the group, Wolfsbane and Firewood, can trace their lineage back to 2005. Throughout its history, Gelsemium has focused on information gathering from Windows systems. Now, it has adjusted its tooling to operate just as effectively in Linux environments.This, experts say, is merely the latest manifestation of a long-brewing trend."The Linux malware landscape is certainly accelerating," says Jason Soroko, senior fellow at Sectigo. "The increase does make sense, as organizations have heavily adopted Linux for their back office server needs, both on premises and in the cloud. Adversaries are developing cross-platform malware to maximize their reach." >&

20
Jasper_The_Rasper
Moderator
11 days ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Alert CISA Adds Three Known Exploited Vulnerabilities to Catalog Release Date November 21, 2024

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.CVE-2024-44308·   Apple Multiple Products Code Execution Vulnerability·  CVE-2024-44309·   Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability·  CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityUsers and administrators are also encouraged to review the Palo Alto Threat Brief: Operation Lunar Peekrelated to CVE-2024-0012, the Palo Alto Security Bulletin for CVE-2024-0012, and the Palo Alto Security Bulletin for CVE-2024-9474for additional information. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities

30
TripleHelix
Moderator
11 days ago

Badges

Show all badges

Join the Conversation

Terms & Conditions