Cybersécurité

A colleague of mine notified me of actual super rare mega fuck off ultra malware identified in th...

lt to reverse engineer. He asked if I felt like trying to bonk it with a stick. Chat, can I bonk the sophisticated Threat Actor malware with a stick? This malware is believed to originate from a well-known and very active Threat Group, which has posed a significant threat to vendors and consumers, for quite some period of time. Their new malware strain is believed to be augmented by AI, hence improving their malware development lifecycle and introducing enhanced capabilities. I guess we'll find out later tonight, or tomorrow, when I get a chance to look at it. We'll review it and see if the hype is real, or if it's just malware goop.

t.me23 juil.

> get DM > "i think i found malware" > look inside > fake raonfit (???) website? > clickfix > goo...

present > ai slop > all in korean idk wtf is going on but this is janky af

t.me22 juil.

Incident response engineered for high-stakes moments—and the readiness behind them

New proactive services from Microsoft Incident Response turn security uncertainty into readiness with expert‑led preparation and advanced intelligence.

Raising the bar for trusted incident response

Stärken Sie Ihre Abwehr mit Microsoft Incident Response, das reaktive und proaktive Dienste bietet. Untersuchen und reagieren Sie auf Cyberbedrohungen, stellen Sie Systeme wieder her und erhöhen Sie die Resilienz.

Domain-based threat intelligence free for all

Today we are making domain-based threat intelligence available to all Cloudflare Client-Side Security customers, regardless of whether you use the Advanced offering. In 2025, we saw many non-enterprise customers affected by client-side attacks, particularly those customers running webshops on the Magento platform. These attacks persisted for days or even weeks after they were publicized. Small and medium-sized companies often lack the enterprise-level resources and expertise needed to maintain a

more verbose stuff https://malwaresourcecode.com/home/my-projects/malware-reversing-shorts/2026-...

t.me22 juil.

> get dm > "i got malwared, me stuff no good" > ok send > sends link > look inside > python scrip...

dot-py > ??? > look inside > drops stuff called "nig" > drops xmr miner > drops more python scripts > obfuscated with pyarmor (again) > bonk with stick > spits out more goop > over 10 files > all the files do p much the same stuff > ??? > use ai slop machine and tools to get original src > look inside > repetitive code > notes in code > debug print statements > sniff sniff > ai slop Chat, this is yet another Threat Actor using AI to slop up some malware. The only difference is this Threat Actor used professional level tools (although trial version) and put slightly more effort into the C2 and masquerading stuff. If you'd like to see the source code I've reconstructed (and slightly more verbose writing), see post below this one.

t.me22 juil.

1. The Durable Threat Is Access Optionality

This activity began in early February and has continued in recent days. What organizations should expect next from Iran-aligned groups and the steps they should take to guard against cyberattacks.

CodeMender in AI Threat Defense

Google AI Threat Defense gives cybersecurity teams an autonomous, continuous security system designed to outpace AI-driven attacks.

Fragmented command: The structural vulnerability AI exploits

Consider how most financial institutions, crypto platforms and digital asset intermediaries actually organize their defenses: A cybersecurity team focused on identity compromise, endpoint protection and infrastructure threats; a fraud team focused on account takeover, mule networks and scam typologies; an AML or financial crimes team focused on wallet screening, sanctions exposure and suspicious activity reporting; and an AI risk or digital trust team, if one exists at all, focused on synthetic

Yesterday I was experimenting with using X articles for sharing malware bonkings. People wanted m...

nderstand, the X algorithm doesn't do much for highlighting articles. I was under the impression they wanted people to write articles. When I used their article thingie my engagement was through the floor. I don't understand how any of this works. Regardless, with X articles it isolates the homies on Telegram (they're probably all criminals, I don't know, Telegram nerds are schizos). Moving forward I'll probably just link to my goofy ass blog. It'll also make it easier for people to find it in the future (if they even care). I'm aiming to make them short, entertaining, and (hopefully) educational. Thank you to the people who continue to send me free malware. It is cool and badass.

t.me21 juil.

I'm pretty impressed. The past four malware goopies people sent me were partially AI slop. Despi...

noobs, imagine how much it's augmenting the actual skilled Threat Actors

t.me21 juil.

This malwares c2 is bukkakegrandma

t.me20 juil.

this is the malware equivalent of saying check out my website and linking 127.0.0.1

t.me20 juil.

> get dm > "is this malware?" > look inside > malicious libre office macro > looks funny tho > ra...

> malware delivered from a live website these dumb fucks vibe coded a malware payload and had it connect back to a local ip address. are they actually fucking retarded???

t.me20 juil.

As an example, if I search "malware intro", the first page is from CISCO. CISCO writes that there...

Fileless malware These definitions are too vague, I think a better explanation (although a little bit trickier...) - Infector - Stager - Module - Stealer - Spyware - Ransomware - Loader - Toolkit However, this doesn't accurately capture the nuance of web based malware or IOT and/or ICS/SCADA malware.

t.me20 juil.

We desperately need someone to update noob malware literature. The shit for malware noobs looks ...

It reads like someone describing swimming who hasn't ever been in a pool

t.me20 juil.