# spoofing A cybersecurity technique in which an attacker impersonates an authorized user or induces a user or resource to take an incorrect action. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Protecting organizations from AI-assisted executive impersonation and invoice fraud DevFeed: [Protecting organizations from AI-assisted executive impersonation and invoice fraud]() Original publisher: [Read original article]() Author: Microsoft Security Research Published: 2026-09-10T17:23:05Z Content type: article Language: en Sources: [Microsoft Security Blog]() Topics: [spoofing]() Tags: [ai](), [enterprise](), [executive](), [fraud](), [generative-ai](), [scam](), [security](), [social-engineering]() ### AI overview Microsoft examines an email-fraud campaign that used AI-assisted executive impersonation, fabricated invoices, and fake supporting conversations to prompt ACH payments. ### Source excerpt Microsoft examines an AI-assisted business email compromise campaign that used executive impersonation and fake invoices to target finance teams with ACH payment fraud. The post Protecting organizations from AI-assisted executive impersonation and invoice fraud appeared first on Microsoft Security Blog. ## Detect and disrupt AI-themed attacks with Microsoft Defender DevFeed: [Detect and disrupt AI-themed attacks with Microsoft Defender]() Original publisher: [Read original article]() Author: Rob Lefferts Published: 2026-09-10T16:00:00Z Content type: article Language: en Sources: [Microsoft Security Blog]() Topics: [Malware](), [Threat Research](), [spoofing](), [Microsoft]() Tags: [adversary-in-the-middle-aitm](), [ai](), [attacks](), [chatgpt](), [claude](), [copilot](), [credential-theft](), [deepseek](), [defender](), [github](), [malware](), [microsoft](), [phishing](), [security](), [social-engineering]() ### AI overview Microsoft describes AI-themed phishing, malvertising, credential theft, and malware campaigns that impersonate popular AI services and tools. It argues that attackers are exploiting trust and urgency around AI brands rather than compromising the referenced services. ### Source excerpt See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack chain. The post Detect and disrupt AI-themed attacks with Microsoft Defender appeared first on Microsoft Security Blog. ## Defending against AI-fueled social engineering DevFeed: [Defending against AI-fueled social engineering]() Original publisher: [Read original article]() Author: Joe DeFever Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Social engineering](), [spoofing]() Tags: [agentic-ai-alerting-security-analytics](), [ai](), [attacks](), [phishing](), [security](), [soc](), [social-engineering]() ### AI overview The article describes how AI enables personalized spear phishing, smishing, and deepfake-based impersonation at greater scale. It argues that defenders should detect behavioral signals rather than rely solely on static signatures and known patterns. ### Source excerpt AI is supercharging social engineering. Learn how SOC teams can detect deepfakes, spear phishing, and smishing before they cause real damage. ## This month in security with Tony Anscombe - August 2026 edition DevFeed: [This month in security with Tony Anscombe - August 2026 edition]() Original publisher: [Read original article]() Author: Editor Published: 2026-08-31T08:55:00Z Content type: news Language: en Sources: [WeLiveSecurity]() Topics: [Cybersecurity](), [Critical Infrastructure](), [hugging face](), [Artificial Intelligence](), [OpenAI](), [Flight](), [Network](), [spoofing](), [incident]() Tags: [ai](), [airline](), [critical-infrastructure](), [cybersecurity](), [hugging-face](), [incident](), [network](), [openai](), [spoof](), [video]() ### AI overview Tony Anscombe reviews major cybersecurity stories from August 2026, including the Hugging Face hack involving OpenAI agents, attacks on critical infrastructure, a spoofed airline Wi-Fi network, and the shutdown of fraudulent call centers in Ukraine. ### Source excerpt Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity news ## The day after the zero-days DevFeed: [The day after the zero-days]() Original publisher: [Read original article]() Author: Niels Provos Published: 2026-08-28T04:42:57Z Content type: opinion Language: en Sources: [APNIC Blog]() Topics: [Vulnerabilities](), [Orchestration](), [Security](), [Artificial Intelligence](), [Code](), [spoofing](), [anthropic](), [Open Source](), [Frontier Model]() Tags: [agent](), [ai](), [anthropic](), [guest-post](), [model](), [open-source](), [security](), [spoofing](), [tech-matters](), [vulnerabilities](), [vulnerability](), [workflow]() ### AI overview The article reflects on three decades of vulnerability research, contrasting a historically manual TCP source-routing spoofing discovery with an AI-assisted discovery of a long-standing OpenBSD kernel bug. It argues that vulnerability discovery is primarily an orchestration problem, demonstrates the capability with the open-source IronCurtain framework and several language models, and warns that defenders and attackers should assume capability parity. ### Source excerpt Guest Post: Patching faster cannot keep up with AI-driven discovery. Leverage structural invariants to make bug classes irrelevant. ## Time: The cornerstone of digital sovereignty and independence DevFeed: [Time: The cornerstone of digital sovereignty and independence]() Original publisher: [Read original article]() Author: Luca Cicchelli Published: 2026-08-18T01:45:10Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [digital sovereignty](), [systems](), [1.1.1.1](), [spoofing](), [Cybersecurity](), [5G](), [Cloud](), [Artificial Intelligence]() Tags: [5g](), [ai](), [cloud](), [cybersecurity](), [digital-sovereignty](), [energy](), [gnss](), [guest-post](), [ixps](), [operational](), [spoofing](), [systems](), [tech-matters](), [time]() ### AI overview Time is presented as a foundational requirement for digital sovereignty and independent operation. The article explains how synchronized time supports telecommunications, finance, energy, cloud and AI systems, and transport, while dependence on GNSS introduces risks from interference, jamming, and spoofing. ### Source excerpt Guest Post: Though often overlooked, time underpins telecommunications, finance, energy, cloud, AI, and transport systems. As dependence on GNSS increases, organizations need resilient, traceable time sources to strengthen cybersecurity, improve operational continuity, and support digital sovereignty. ## Disrupting a Criminal Scam Operation DevFeed: [Disrupting a Criminal Scam Operation]() Original publisher: [Read original article]() Published: 2026-07-31T00:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [ChatGPT](), [OpenAI](), [spoofing]() Tags: [chatgpt](), [openai](), [safety](), [scam](), [scams](), [southeast-asia]() ### AI overview OpenAI describes disrupting a Cambodia-based criminal scam operation that used ChatGPT to create fake personas, generate and translate scam messages, produce promotional content, and support administrative work. The operation involved investment, romance, gambling, and impersonation schemes, with possible links to human trafficking and forced criminality. ### Source excerpt OpenAI disrupted a Cambodia-based scam operation using ChatGPT to support investment, romance, gambling, and impersonation schemes. ## Inside an AI coal mine security camera network powered by plaintext passwords DevFeed: [Inside an AI coal mine security camera network powered by plaintext passwords]() Original publisher: [Read original article]() Author: Eaton Published: 2026-07-08T17:07:38Z Content type: opinion Language: en Sources: [Eaton Works Feed]() Topics: [Security](), [Vulnerabilities](), [API](), [passwords](), [spoofing](), [JavaScript]() Tags: [api](), [breach](), [browser](), [chrome](), [javascript](), [passwords](), [security](), [spoofing](), [vulnerabilities]() ### AI overview This security write-up examines Coal India's Project DigiCoal camera-monitoring platform, developed by DeepSight AI Labs and Accenture. It reports that the RPI Dashboard exposed user accounts and plaintext, weak, duplicated passwords through an unauthenticated API. The article also describes bypassing client-side access controls to view camera alerts and feeds across seven coal mines. ### Source excerpt Coal India's intelligent CCTV platform developed by DeepSight AI Labs and Accenture had plaintext passwords and no API authentication. ## How Android helps keep you safe from impersonation scams with fake call detection DevFeed: [How Android helps keep you safe from impersonation scams with fake call detection]() Original publisher: [Read original article]() Author: Oren Schetrit Published: 2026-06-02T18:00:00Z Content type: release Language: en Sources: [Security]() Topics: [spoofing]() Tags: [ai](), [android](), [android-security](), [attacks](), [audio](), [fraud](), [mobile-security](), [none](), [scams](), [spoof](), [voice](), [voice-cloning]() ### AI overview Android introduces fake call detection to flag suspected spoofed calls between contacts using Phone by Google, aiming to counter AI voice-cloning impersonation scams. ### Source excerpt Warning that says 'someone may be pretending to call from your contact's number' ## What's New in Android Security and Privacy in 2026 DevFeed: [What's New in Android Security and Privacy in 2026]() Original publisher: [Read original article]() Author: Eugene Liderman Published: 2026-05-12T17:00:00Z Content type: article Language: en Sources: [Security]() Topics: [Android](), [Android Security](), [Security](), [spoofing](), [Social engineering](), [threat detection](), [On-device AI](), [Chrome]() Tags: [ai](), [android](), [android-security](), [fraud](), [none](), [on-device-ai](), [security](), [social-engineering](), [spoofing](), [threat-detection]() ### AI overview The article describes planned Android security and privacy enhancements for 2026, including verified financial calls to combat spoofed banking scams. Android can verify incoming calls through participating financial apps and automatically end calls that are not genuine. It also highlights expanded Live Threat Detection, which uses on-device AI to analyze app behavior and warn about suspicious activity. ### Source excerpt New Android security and privacy features ## This month in security with Tony Anscombe - April 2026 edition DevFeed: [This month in security with Tony Anscombe - April 2026 edition]() Original publisher: [Read original article]() Author: Editor Published: 2026-04-30T09:00:00Z Content type: news Language: en Sources: [WeLiveSecurity]() Topics: [spoofing]() Tags: [attacks](), [critical-infrastructure](), [cybersecurity](), [helpdesk](), [iran](), [microsoft](), [microsoft-teams](), [scams](), [security](), [us](), [video]() ### AI overview A monthly video security roundup covers Microsoft Teams helpdesk impersonation scams, Iran-linked targeting of Rockwell PLCs at U.S. critical-infrastructure organizations, and FBI figures on cyber-enabled crime. ### Source excerpt Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some of what made the headlines this month ## As breakout time accelerates, prevention-first cybersecurity takes center stage DevFeed: [As breakout time accelerates, prevention-first cybersecurity takes center stage]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2026-04-07T09:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Cybersecurity](), [Threat Research](), [Artificial Intelligence](), [Automation](), [MFA](), [passwords](), [Reconnaissance](), [Social engineering](), [spoofing](), [ransomware]() Tags: [ai](), [ai-automation](), [attacks](), [authentication](), [automation](), [business-security](), [cybersecurity](), [exploits](), [malware](), [mfa](), [passwords](), [phishing](), [ransomware](), [social-engineering](), [tools]() ### AI overview Threat actors are using AI, automation, credential theft, phishing, zero-day exploits, reconnaissance, and AI-powered scripts to accelerate attacks. The article argues that shrinking breakout times require defenders to adopt a prevention-first cybersecurity strategy. ### Source excerpt Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy. ## A cunning predator: How Silver Fox preys on Japanese firms this tax season DevFeed: [A cunning predator: How Silver Fox preys on Japanese firms this tax season]() Original publisher: [Read original article]() Author: Dominik Breitenbacher Takahiro Sajima Published: 2026-03-27T07:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Cybersecurity](), [Threat Research](), [Social engineering](), [spoofing](), [Business Security]() Tags: [awareness](), [business](), [business-security](), [cybersecurity](), [finance](), [government](), [japan](), [phishing](), [spoofing]() ### AI overview Silver Fox is conducting a targeted spearphishing campaign against Japanese manufacturers and other businesses during tax-filing and organizational-change season. The attackers use convincing tax- and HR-themed emails, links, and attachments to exploit expected business communications and increase the likelihood of compromise. ### Source excerpt Silver Fox is back in Japan, spoofing tax and HR emails timed to the one season when no one thinks twice about opening them ## Face value: What it takes to fool facial recognition DevFeed: [Face value: What it takes to fool facial recognition]() Original publisher: [Read original article]() Author: Tomáš Foltýn Published: 2026-03-13T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Cybersecurity](), [Security & Privacy](), [Artificial Intelligence](), [spoofing]() Tags: [ai](), [conference](), [cybersecurity](), [financial-services](), [fraud](), [fraud-prevention](), [identity](), [privacy](), [real-time](), [uk]() ### AI overview ESET cybersecurity advisor Jake Moore demonstrates how facial recognition can be misused and defeated. His tests used identity-finding smart glasses, an AI-generated face to bypass bank onboarding, and real-time face-swapping software to evade a facial recognition watchlist. ### Source excerpt ESET's Jake Moore used smart glasses, deepfakes and face swaps to 'hack' widely-used facial recognition systems - and he'll demo it all at RSAC 2026 ## Taxing times: Top IRS scams to look out for in 2026 DevFeed: [Taxing times: Top IRS scams to look out for in 2026]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2026-02-10T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [spoofing](), [Malware](), [Artificial Intelligence](), [Authentication]() Tags: [ai](), [authentication](), [fraud](), [malware](), [phishing](), [scams](), [spoofing](), [tax](), [tax-return]() ### AI overview The article outlines common IRS and tax-return scams, including impersonation through phone, email, text, and social media; demands for urgent payment; requests for personal or financial information; fraudulent refund claims; and attempts to deliver malware. It also warns that AI-assisted scams can make deceptive messages and calls harder to recognize. ### Source excerpt It's time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy. ## Drowning in spam or scam emails? Here's probably why DevFeed: [Drowning in spam or scam emails? Here's probably why]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2026-01-27T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Security](), [Cybercrime](), [Malware](), [spoofing](), [obfuscation](), [pii](), [data](), [Internet](), [Netflix]() Tags: [cybercrime](), [data](), [digital-security](), [internet](), [malware](), [obfuscation](), [phishing](), [pii](), [scam](), [security](), [spoofing]() ### AI overview This article explains why inboxes can suddenly be flooded with spam and scam emails. It identifies data breaches, leaked personal information, updated phishing kits, spam-filter bypasses, and targeted campaigns as possible causes, and describes risks including credential theft, financial fraud, and malware installation. ### Source excerpt Has your inbox recently been deluged with unwanted and even outright malicious messages? Here are 10 possible reasons - and how to stem the tide. ## Doppel's AI defense system stops attacks before they spread DevFeed: [Doppel's AI defense system stops attacks before they spread]() Original publisher: [Read original article]() Published: 2025-10-28T10:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [Artificial Intelligence](), [threat detection](), [Large Language Model](), [Fine-tuning](), [OpenAI](), [Social engineering](), [human feedback](), [spoofing]() Tags: [ai](), [fine-tuning](), [gpt](), [human-feedback](), [internet](), [phishing](), [social-engineering](), [threat-detection]() ### AI overview Doppel uses OpenAI GPT-5 and o4-mini models, together with reinforcement fine-tuning and human-graded feedback, to detect, classify, and remove deepfake, phishing, spoofed-domain, and impersonation threats. The system reduces analyst workloads by 80%, triples threat-handling capacity, and cuts response times from hours to minutes. ### Source excerpt Doppel uses GPT-5 and reinforcement fine-tuning to stop deepfake and impersonation attacks, cutting analyst workloads by 80% and reducing response times from hours to minutes. ## Homographic Spoofing: a new Ruby toolkit DevFeed: [Homographic Spoofing: a new Ruby toolkit]() Original publisher: [Read original article]() Author: Jacopo Beschi Published: 2024-06-25T17:00:00Z Content type: tutorial Language: en Sources: [37signals Dev]() Topics: [spoofing](), [Ruby](), [Security](), [Open Source](), [email](), [domain](), [ASCII]() Tags: [ascii](), [domain](), [email](), [open-source](), [phishing](), [ruby](), [security](), [spoofing]() ### AI overview This article explains homograph attacks, in which visually similar Unicode characters are used to spoof identities in domains or email. It describes browser and email-client protections using Punycode and UTS #39, then introduces an open-source Ruby gem implementing those guidelines for IDNs and email addresses. ### Source excerpt What is a homograph attack and how to protect from it with a new gem. ## Port Scan with Spoofed IP Addresses DevFeed: [Port Scan with Spoofed IP Addresses]() Original publisher: [Read original article]() Published: 2024-03-18T23:00:00Z Content type: opinion Language: en Sources: [Dennis Felsing]() Topics: [spoofing](), [Cybersecurity](), [networking](), [incident]() Tags: [cybersecurity](), [game-servers](), [incident](), [network](), [networking](), [spoofing]() ### AI overview The article describes how spoofed-source port scans can cause abuse reports to be misattributed to a victim's VPS, potentially leading a hoster to suspend or terminate the server. It presents the scenario in a satirical, adversarial tone and discusses defensive traffic-blocking measures. ### Source excerpt Or how to make naïve hosters shut down your victim's server. Do you want to bring down your victim's game servers? Do they host their game servers on cheap VPSes at hosters who are not that experienced with networking? Is running an actual DoS against the server too expensive and illegal for you? Just grab a server for yourself from a questionable hoster with IP address spoofing allowed on their network. Next run a port scan using nmap (man page) with a spoofed source address (-S or -D for multiple decoys) using your victim's IP address(es). As the target of the port scan choose a university with a cybersecurity department that likes to send security incident reports to abuse mail addresses. To the target university of the port scan it will look like the scan came from your victim, since you are spoofing their IP address, so they will send a serious sounding email to the victim's hoster: As a consequence your victim's VPS will most likely be shut down for a few hours or even days. To prevent this your victim will try to block all of their incoming and outgoing TCP traffic on their VPS, and also block the reporting university's IP range entirely: $ iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination DROP all -- 147.251.0.0/16 anywhere DROP tcp -- anywhere anywhere tcp ctstate NEW multiport dports !27685,6546,ssh Chain OUTPUT (policy ACCEPT) target prot opt source destination DROP all -- anywhere 147.251.0.0/16 And yet you can rerun your port scan against the university's network every day, which will trigger automatic abuse mails to the victim's hoster, who will still trust these abuse mails more than the victim, since the hoster is unlikely to be able to monitor the network traffic of the VPS to check if those packets actually originated there. At some point the hoster will be so annoyed that they simply terminate the VPS and throw out the customer, victory! Congratulations, you have brought down some small-fish game servers in the DDNet commu ## Reflecting on Threats: The Frame DevFeed: [Reflecting on Threats: The Frame]() Original publisher: [Read original article]() Author: Adam Published: 2023-04-10T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [systems](), [standard](), [passwords](), [spoofing](), [bug](), [Pull Request](), [YAML]() Tags: [bug](), [code](), [password](), [spoofing](), [standard](), [yaml]() ### AI overview The author reflects on how the framing and subtitle of the Threats book shaped its content. The article discusses the value of shared engineering terminology and argues that common understandings, standards, and available tools can support more consistent threat assessment and evaluation of software flaws. ### Source excerpt Reflecting on the framing of the Threats book ## Threats: The Table of Contents DevFeed: [Threats: The Table of Contents]() Original publisher: [Read original article]() Author: Adam Published: 2023-01-16T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [spoofing]() Tags: [books](), [contents](), [guide](), [spoofing](), [table]() ### AI overview The article presents the table of contents for Threats: What Every Engineer Should Learn From Star Wars. It explains that the book covers threats such as spoofing and authenticity, with each chapter organized around the threat, mechanisms, scenarios or technologies, and defenses. The book is announced as available for preorder and sale on January 25th. ### Source excerpt Like the Force, each threat has a light side, and a dark side. ## GPT-3 DevFeed: [GPT-3]() Original publisher: [Read original article]() Author: Adam Published: 2022-12-09T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [ChatGPT](), [Library](), [spoofing](), [Back end](), [Kubernetes]() Tags: [backend](), [chatgpt](), [client](), [gpt](), [gpt-3](), [kubernetes](), [libraries](), [library](), [service](), [spoofing]() ### AI overview The article reports that GPT-3 was used to generate sample STRIDE threat libraries for backend-to-backend services in Kubernetes and client-side threats. It notes that the output may be imperfect and requires human judgment. ### Source excerpt Text captured from GPT-3 ## The Threats book is complete DevFeed: [The Threats book is complete]() Original publisher: [Read original article]() Author: Adam Published: 2022-12-08T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [Security](), [spoofing](), [Authorization](), [Parsing](), [Computing]() Tags: [book](), [complete](), [parsing](), [permissions](), [security](), [spoofing]() ### AI overview The author announces that the Threats book is complete and describes its goal of making security and threat concepts accessible to engineers who are not security specialists. The article discusses topics including privilege, permissions, safe parsing, and STRIDE-related spoofing examples. ### Source excerpt Threats is almost in bookstores ## Update on DoS Attacks against our Online Game DevFeed: [Update on DoS Attacks against our Online Game]() Original publisher: [Read original article]() Published: 2022-05-15T22:00:00Z Content type: article Language: en Sources: [Dennis Felsing]() Topics: [spoofing](), [servers](), [Open Source](), [Protocol (disambiguation)](), [client]() Tags: [attacks](), [https](), [ipv4](), [ipv6](), [open-source](), [server](), [servers](), [spoofing](), [udp]() ### AI overview This update describes ongoing DoS attacks against the open-source DDraceNetwork online game. It explains how spoofed UDP connection attempts overload single-threaded game servers and outlines an HTTPS-based IP whitelist, along with limitations involving capacity, IPv4, IPv6, and ISP address translation. ### Source excerpt In my previous post 8 months ago I described how our open source online game DDraceNetwork has been suffering under DoS attacks for about 8 years, basically since its inception. Recently the attacks have gotten much worse, forcing us to work on further approaches. Since many players made suggestions recently, I'm writing this blog post to summarize what we are attempting and to ask for help again. These traffic graphs are from two of the servers we are running, note the logarithmic x-axis. Each spike represents an incoming DoS attack, as you can see some of them last for nearly a day. Recently the attacks have been relatively weak in terms of incoming bandwidth, using spoofed IP addresses imitating our UDP-based connection process. At first the CPU gets overloaded since the server suddenly has to try and handle hundreds of thousands of connection attempts per second. Since our game servers are mostly running on cheap VPSes and each game server runs single-threaded, it is quite easy to overload a system in this manner. HTTPS-based Whitelist To prevent spoofing we collect all players' IP addresses and whitelist those. Since we also develop the game client, we can modify the client to connect to a server via HTTPs for this whitelisting. The iptables rules and ipset setup on the game servers for this whitelist look something like this: ipset create official iphash ipset create whitelist-ip iphash iptables -N serverinfo iptables -A serverinfo -m hashlimit --hashlimit-above 40/s --hashlimit-mode dstport --hashlimit-name si_dstport -j DROP iptables -N game iptables -A game -m set --match-set official src -j ACCEPT iptables -A game -m set --match-set whitelist-ip src -m u32 --u32 "38=0x67696533" -j serverinfo iptables -A game -m set --match-set whitelist-ip src -m u32 --u32 "38=0x66737464" -j serverinfo iptables -A game -m set --match-set whitelist-ip src -j ACCEPT # Still allow non-whitelisted players when there is no attack iptables -A game -m limit --limit 10000 -j ACCEP [Next page]()