#100DaysofYARA Days 97: More LNK action, this one uses the LNK module in YARA to detect those files attempting to download or contact URLs 🐧 github.com/RustyNoob-619/…

#100DaysofYARA As we are slowing coming towards the end of the challenge, just wanted to thank vx-underground, abuse.ch & countless other awesome humans who continue to share malware... This is what has allowed my malware corpus to grow over time and with that the YARA 🐧

#100DaysofYARA Days 98: Detects Apple Seed backdoor DLL used by DPRK APT Kimsuky 🐧 github.com/RustyNoob-619/…

#100DaysofYARA Days 99: More on Apple Seed, this time focused on the EXE version based on the observed strings 🐧 github.com/RustyNoob-619/…

#100DaysofYARA Days 100: Last but not least, this YARA detects the Linux Auto-Color backdoor 🐧 github.com/RustyNoob-619/…

For the malware loving homosapiens, this platform is for you. You simply got to admire the efforts that the community is putting in to make sure awesome resources accessible to all, nicely done Gameel Ali 🤘 🐧

#APT #APT37 #RicochetChollima #ScarCruft #threat #malware #RokRAT 📍🇰🇵 💥🇰🇷🌏 ⛓️#Phishing > Dropbox link > ZIP + #LNK > Drop in tmp (BAT/DAT) > PS + BAT > #RAT + Load in mem + collection > #C2 🔗 Genians analysis: genians.co.kr/blog/threat_in…

We've received so many excellent workshop CFP responses for DEATHCon 2025, and we'll be sending acceptance messages by tomorrow, June 1st! After workshop leaders confirm acceptance, we'll be listing the workshops on deathcon.io/workshops.html over the next few weeks. Thanks all!

Back to all things Cyber after a month of break, feeling refreshed and pumped up 🐧

Saturday morning and I'm bit bored so why don't I look for #Phishing #CryptoScam websites for the #lol 🤣🤪using free tools? 1⃣ 📸urlscan.io (I don't have pro plan). Searching possible websites 2⃣📸At the first glance one suspect web found 3⃣235 similar websites found

#RandomThoughts In my opinion, one of the biggest challenges in the modern realm of CTI is retaining conventional intelligence while bolstering workflows using automation, GenAI and other machine learning components which are likely to introduce unknown biases in the process 🐧

Super excited for this one! M4nbat and I are gonna be doing our first ever public workshop in 2 weeks at BSides Bournemouth on C2 hunting & rumor has it that the winner of CTF gets a pretty neat CTI coin Should be a fun one, hoping to meet some of you awesome bunch 🐧

I literally don't listen to podcasts of any sorts. But this one is super interesting and I am absolutely hooked onto it... If you are in threat intelligence, you do not wanna miss out on this, just too good🐧

Hoping to seeing some of you awesome bunch at BSides Bournemouth tomorrow for C2 tracking and more importantly grabbing some tequila shots🐧