Web Brosâ Latest Genius Move: Drop a Zip, Ship Malware
Cloudflare, Vercel, and Netlify have all launched their own âDropâ services: upload a zip, get a live site instantly on their edge networks. Authentication and abuse protection? Thatâs for later. Right now itâs pure vibes.
This is peak industry brain rot. In a world already drowning in phishing, malware, and scam sites, these platforms just rolled out the easiest, fastest way for bad actors to host malicious content. Drag-and-drop phishing kits on workers.dev, instant fake login pages on Vercel, malware droppers on Netlify â all live in seconds with zero friction.
No real verification. No serious upfront checks. Just âmove fast and let the internet clean up our mess." The hopium these web bros are smoking must be nuclear grade quality. Theyâve spent years building trust in their platforms, only to turn them into free malware CDNs for anyone with a zip file.This isnât democratizing the web. This is handing phishers and scammers the keys with a smile. Brilliant strategy, truly.
Nota bene â apparently real world bad actors beat red teams in abusing those new "services". Slow clap Apparently all the web bros are drinking the same hopium-flavored cool aid, where no phishers, c2s, implants and bad actors exist whatsoever. https://cloudflare.com/drop/ Same concept from vercel and netlify https://vercel.com/drop https://app.netlify.com/drop https://x.com/JCyberSec_/statu... Try a DAP.LIVE or URLSCAN.IO query to see abuse and workers.dev (and pages.dev and r2.dev for that matter) â for each valid deployment, there are hundreds of confirmed fraud scams. Nice statistics, which will only get worse now. Good job.