The Justice Department and FBI announced a law enforcement operation that, alongside international partners, deleted “PlugX” malware from thousands of infected computers worldwide implanted by Chinese hackers known as “Mustang Panda” or “Twill Typhoon." www.justice.gov/opa/pr/justi...

Dear Threat Researchers! We wish you a fruitful year full of impactful research! Stay healthy, stay happy and don't stop being awesome! 🥂🕺💃🎇🎆 #HappyNewYear2025 #CTI #PIVOTcon25 #ThreatResearch #ThreatIntel

Day 1 of giving the murder of crows 🐦‍⬛ a present 🎁 until we are friends. Today’s present: Part of a Hash Brown

Joe knows ball

A while back, I made a thing that turns #BinDiff matches into YARA rules: https://github.com/google/vxsig #100DaysOfYARA

Man I love Polyphia. open.spotify.com/track/0BE86K...

🎙️ I'm excited to announce the launch of a new podcast - Behind the Binary! #BehindTheBinary focuses on the stories of the people, technology, and events that have shaped the world of reverse engineering. You can find it on Spotify👇 open.spotify.com/show/3yWgmIu...

New episode of DISCARDED where I chat with Genina Po about how she catches phish 🎣 We dive into how to write detections, what to hunt for when finding phish kits, and some of her recent research on phishing scams. Tune in wherever you get your podcasts! Apple: podcasts.apple.com/us/podcast/d...

Such a thorough analysis of #RaspberryRobin in this article that taught me a lot 👇 😂

2024-11-25 (Monday): My thanks to the criminals who email malware directly to my inbox. This one is #AgentTesla using #FTP for #data_exfiltration. Sends to FTP server approx every 10 minutes. Attached disk image file: bazaar.abuse.ch/sample/7a11d... Extracted EXE: bazaar.abuse.ch/sample/2362b...

@hultquist.bsky.social hitting us with the hottest phishing lure of all time

Almost embarrassed to post this, but I've always used Fiddler or Burp for capturing things like this... I didn't have admin rights and was trying to capture network traffic from a pop-up, so Dev Tools wasn't working Apparently this is built into Chrome/Edge! So cool :) edge://net-export/

Trying to rebuild my following here. Tag other security researchers and professionals in the comments please. I’ll follow back :)

🧵Today’s blogpost focuses on a newer ransomware variant named SafePay. Needless to say, ransomware sucks. When this new variant appeared, it gained our attention. 👀 Let’s dig into what happened and what makes it tick ⬇️:

Prized possession.

Started out with this set of block words. Quickly learned that there will be many more.

Meh. A lot of engagement farming here already. Splendid

#Latrodectus campaign from today gist.github.com/myrtus0x0/cd.... If anything comes of it, I'll put in thread

Used my AirPods to take a hearing test today. Not surprised at the amount of hearing I have lost. Interesting to see if quantified.

Probably going to be much more candid on here. We will see.

It is now 2:45 and I have failed to eat breakfast or lunch but I did manage to write emulation for the server side for a piece of malware I track.

Got this bad boy tattooed on me a little over a week ago.

I’m here to shitpost about malware and information security.

Hello World!