Google Removed Over 500 Chrome Extensions Due to Malware Concerns
🗣Reshamkadri

Chrome then uninstalled itself
👤8412risk

The article claims Duo has the list of extensions, but didn't link to it. Where is the list?

Edit: https://duo.com/labs/research/crxcavator-malvertising-2020
👤atoponce


🎖@malwr

Exploit Development: Panic! At The Kernel - Token Stealing Payloads Revisited on Windows 10 x64 and Bypassing SMEP

https://connormcgarr.github.io/x64-Kernel-Shellcode-Revisited-and-SMEP-Bypass/

🎖@malwr

Patching MacOS Sketch.App for unlimited Trial in Ghidra

https://duraki.github.io/posts/o/20200214-sketch.app-patch-in-ghidra.html

🎖@malwr

pykd 0.3.4.12
🗣ussrhero
This project can help to automate debugging and crash dump analysis using Python. It allows one to take the best from both worlds: the expressiveness and convenience of Python with the power of WinDbg!


🎖@malwr

US Gov Dumps Analysis and TTPs of North Korean Cyber Operations
MAR-10271944-3.v1 – North Korean Trojan: BUFFETLINEhttps://www.us-cert.gov/ncas/analysis-reports/ar20-045f

MAR-10265965-1.v1 – North Korean Trojan: BISTROMATHhttps://www.us-cert.gov/ncas/analysis-reports/ar20-045a

MAR-10265965-2.v1 – North Korean Trojan: SLICKSHOEShttps://www.us-cert.gov/ncas/analysis-reports/ar20-045b

MAR-10265965-3.v1 – North Korean Trojan: CROWDEDFLOUNDERhttps://www.us-cert.gov/ncas/analysis-reports/ar20-045c

MAR-10271944-1.v1 – North Korean Trojan: HOTCROISSANThttps://www.us-cert.gov/ncas/analysis-reports/ar20-045d

MAR-10271944-2.v1 – North Korean Trojan: ARTFULPIEhttps://www.us-cert.gov/ncas/analysis-reports/ar20-045e

MAR-10135536-8.v3 – North Korean Trojan: HOPLIGHThttps://www.us-cert.gov/ncas/analysis-reports/ar20-045g

from https://www.us-cert.gov/ncas/analysis-reports

samples https://www.virustotal.com/gui/user/CYBERCOM\_Malware\_Alert/comments
🗣digicat


🎖@malwr

labeless: Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping and interactive Python scripting capabilities.
🗣digicat

I love seeing new open source tools but we really have to start switching over to writing things for Ghidra so everyone can use and contribute to them
👤maverickleopard

ida already has this natively though?
👤tansim

https://research.checkpoint.com/2018/labeless-an-introduction/ 6 articles about this plugin
👤WK-lk


🎖@malwr

Iranian hackers have been hacking VPN servers to plant backdoors in companies around the world
🗣CodePerfect

I have tried warning people about this, no one wanted to listen. NoOoO mY vPn Is Da SaFeSt TiNg EvAh!!!!!!!! REEEEEEEEEEEEEEE /s
👤BeigeAlmighty

Is there any type of decentralized VPN server?
👤IndividualThoughts

No more nord vpn
👤DogMeatTalk


🎖@malwr