Inside a Russian-Speaking Operator's Ukrainian IP Camera Toolkit
A Russian-speaking operator's open directory exposed the tools used to exploit and watch Ukrainian IP cameras, alongside attempts to breach government and military sites.

https://hunt.io/blog/russian-speaking-operator-ukrainian-camera-toolkit


🎖@malwr

Feel free to forward posts 👍


🎖@malwr

Dynamic Analysis of VEH Dispatch and Exception-Context RIP Modification Using ROP Gadgets in ntdll.dll
Reverse engineering ntdll's VEH dispatch chain, RtlDispatchException, and RtlRestoreContext to understand VEHguard internals.

https://mooofin.github.io/portfolio/blog/vehguard.html?latex=1


🎖@malwr

Binary Ninja - The Binary Hiding in Your Registry: Cracking Windows UCPD's Dynamic Rules
Binary Ninja is a modern reverse engineering platform with a scriptable and extensible decompiler.

https://binary.ninja/2026/08/04/ucpd-dynamic-rules.html


🎖@malwr

Dissecting the JWR phishing framework

Cisco Talos recently identified an undocumented phishing framework, internally branded "JWR" by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms.

https://blog.talosintelligence.com/dissecting-the-jwr-phishing-framework/


🎖@malwr

Malware Crypting Services and the Threat Actors Who Sell Them

Insikt Group analyzes 24 threat actors selling malware crypting services. Learn about their evasion techniques, market dynamics, and how defenders can prioritize behavioral detection over static analysis.

https://www.recordedfuture.com/research/malware-crypting-services-threat-actors


🎖@malwr

When You Pay the Ransom - Taking Apart an Interlock ESXi Decryptor | Maldbg - Malware Analysis Blog
Taking apart a freshly compiled Interlock ESXi decryptor, and what it reveals about how the encryptor works.

https://maldbg.com/interlock-esxi-decryptor-internals


🎖@malwr

From P-Code to GNN: extract binary code semantics - Quarkslab's blog
pcode_graph is a Python library, published by Quarkslab, suitable to build semantic graphs from binary code. We present how to use it to detect function similarities in binaries.

https://blog.quarkslab.com/from-p-code-to-gnn-extract-binary-code-semantics.html


🎖@malwr

Applied Reverse Engineering: Crude T&E for Control-Flow Tracing - Reverse Engineering
The idea of inducing faults with sentinels by patching code sections at runtime predates most of us — it’s one of the oldest tricks in systems programming. Fault injection for code tracing goes back to early software emulation and debugging in the 80s and 90s. Single-stepping via the trap flag dates to the 8086 (1976) […]

https://revers.engineering/applied-re-crude-te-for-control-flow-tracing/


🎖@malwr