Ghidra 10.3.1 released!
🗣ryanmkurtz

Fun fact, if you use Windows 10's built-in LZX compression, you can reduce the program size down from 981MB to 371MB. It's absurd.
👤Dwedit


🎖@malwr

Google Ads: An effective phishing delivery mechanism for over a decade.
🗣Seaerkin2

They got me the other day through sponsored search results. Fake Amazon game link. At least I had 2fa on the account. Was an annoying hour or so while the scammers kept hammering the account.
👤routerg0d

Dang. Glad I use an ad blocker routinely now. :O
👤alvarkresh

I’ve seen drive by malware attacks served up by ad networks more than once.
👤vabello


🎖@malwr

Can we use large language models (LLMs) with IDA? Let's cover ChatGPT, Bard, the Gepetto plugin and the upcoming ask_ida plugin! https://youtu.be/bK80Bt9uRvo
🗣allthingsida


🎖@malwr

Team Cymru's S2 Research Team present a short update report providing insight into the operation of Vidar, demonstrating the evolution of its management infrastructure and evidence of steps taken by the threat actors to potentially cover their tracks. https://www.team-cymru.com/post/darth-vidar-the-aesir-strike-back
🗣virusbtn


🎖@malwr

Forensia - Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase http://www.kitploit.com/2023/06/forensia-anti-forensics-tool-for-red.html
🗣Dinosn


🎖@malwr

List of awesome reverse engineering resources

https://github.com/wtsxDev/reverse-engineering
🗣Dinosn


🎖@malwr

"Run in Sandbox: a quick way to run/extract files in Windows Sandbox from a right-click":

https://github.com/damienvanrobaeys/Run-in-Sandbox
🗣VessOnSecurity


🎖@malwr

Cado Security researchers look into an attack pattern that could be attributed to the threat actor Diicot (formerly “Mexals”), targeting SSH servers exposed to the internet with password authentication enabled. https://www.cadosecurity.com/tracking-diicot-an-emerging-romanian-threat-actor/
🗣virusbtn


🎖@malwr

AhnLab ASEC researchers analyse some cases of the document files used by Kimsuky during May to distribute malicious code. Malicious CHM files were used, with various topics including coins, taxation & contracts. https://asec.ahnlab.com/ko/53426/
🗣virusbtn


🎖@malwr

Android App Reverse Engineering 101

https://www.ragingrock.com/AndroidAppRE/

#CyberSecurity #malware
🗣0xAsm0d3us


🎖@malwr

Windows Triaging with PowerShell:

Part 1: Parsing Event Logs:

https://aditya-pratap9557.medium.com/windows-triaging-with-powershell-part-1-parsing-event-logs-a6748657d150

Part 2: Artifacts Collection:

https://aditya-pratap9557.medium.com/windows-triaging-with-powershell-part-2-artifacts-collection-d28a8a9010cd
🗣VessOnSecurity


🎖@malwr

GitHub - archcloudlabs/HackSpaceCon_Malware_Analysis_Course: Free training course offered at Hack Space Con 2023 https://github.com/archcloudlabs/HackSpaceCon_Malware_Analysis_Course
🗣akaclandestine


🎖@malwr

GitHub - mnrkbys/ma2tl: macOS forensic timeline generator using the analysis result DBs of mac_apt https://github.com/mnrkbys/ma2tl
🗣akaclandestine


🎖@malwr

eSentire researchers present a report on Resident, a malicious campaign targeting manufacturing, commercial & healthcare organizations. The Resident campaign is linked to Asylum Ambuscade/TA866. https://www.esentire.com/blog/esentire-threat-intelligence-malware-analysis-resident-campaign
🗣virusbtn


🎖@malwr

We welcome @doc_guard to VirusTotal! https://blog.virustotal.com/2023/06/virustotal-docguard.html by @karlhiramoto
🗣virustotal


🎖@malwr