Cortex — Veille numérique

Cyber Arnaque

> wake up > take a shit > get out of bed > remember colleagues hardcore malware thingie > downloa...

e of it is the same .exe > .exe has itself inside of itself > only small difference > cant tell difference > confusion_intensifies.mp5 > has anti-vm code > cant get to work in emulation > written using delphi > delphi tform GUI thingy > weird af de-compilation > 16,000 functions present > most do basic stuff, like add or subtract > staticly links a bunch of random libraries > LOLWTF WHO WROTE THIS > bonk with really big stick > eventually find some good goop > new .exe randomly appears in-memory > ??? > grab from memory > c++ .exe, staticly linked > 500 functions > heavily obfuscated > has anti-code tampering in place > ??? > this in-memory .exe references 1st .exe goop > ask colleague about goop > "We discovered this Threat Actor likely created their own custom .exe encryptor and decryptor" I've been bonking this…

t.me23 juil.

Cybersécurité

Related research on GenAI detection and agent threats

SIEM rules for unusual egress and self-migrating command and control

Hi I've uploaded another 150,000 malwares to the internet. I haven't pushed the update file yet,...

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Security context built for AI

Dawg, I don't want to sound like a hater, but you need to CHILL OUT. Your goopies just got atten...

Also, apparently Meccha Chameleon people follow me on Telegram. Hello MecchaChameleon malware pe...

Everyone on X was yapping about this Meccha Chameleon malware thingie. Internet nerds have been d...

The reason many of you are seeing me discuss malware reverse engineering lately is because I've t...

In all seriousness seriousness, you should do this anyway whenever you accidentally malware your ...

Bro, I got a DM from some dude who thinks he infected his computer with malware. He shows me the ...

🍞BAKING 🍞 I had a ton of people ask me about the super cool and badass malware sample my belov...

Customer Zero: How Elastic InfoSec runs Agent Builder in its own production SOC

Use this hack to make AirTags easier to open

This super ultra mega rare fuck off ultra malware my colleague sent me has a really fancy schmanc...

Chaos ransomware msaRAT hides its C2 channel inside a legitimate browser process

> wake up > take a shit > get out of bed > remember colleagues hardcore malware thingie > downloa...

Overview of Chaos ransomware

Talos workshop: When AI finds vulnerabilities faster than humans can patch

Splunk workshop: When agents become insider threats