ChadRudy

First noticed by then, see here for context https://communities.win/c/ConsumeProduct/p/142BTB1ZSP/x/c
 
TL;DR scored.co media server can serve malformed exploit files as jpeg. The file in the link above was nuked so it is safe to click.
 
Assume your Apple devices have been compromised and act accordingly.

Just created an account to secure my username. Looking at the settings menu, I see that Access logging is enabled by default and you have to manually opt-out.
 
I assume most people are using a VPN, But still: Having IP logging off by default is probably a good idea