← Toutes les actualitésLire l'article ↗
> get dm > "i got malwared, me stuff no good" > ok send > sends link > look inside > python scrip...
Synthèse
> get dm > "i got malwared, me stuff no good" > ok send > sends link > look inside > python script > obfuscated with pyarmor > using trial version > lolwtf > bonk with stick > spits of goop > getthem-dot-py > ??? > look inside > drops stuff called "nig" > drops xmr miner > drops more python scripts > obfuscated with pyarmor (again) > bonk with stick > spits out more goop > over 10 files > all the files do p much the same stuff > ??? > use ai slop machine and tools to get original src > look inside > repetitive code > notes in code > debug print statements > sniff sniff > ai slop Chat, this is yet another Threat Actor using AI to slop up some malware. The only difference is this Threat Actor used professional level tools (although trial version) and put slightly more effort into the C2 and masquerading stuff. If you'd like to see the source code I've reconstructed (and slightly more verbose writing), see post below this one.
> get dm > "i got malwared, me stuff no good" > ok send > sends link > look inside > python script > obfuscated with pyarmor > using trial version > lolwtf > bonk with stick > spits of goop > getthem-dot-py > ??? > look inside > drops stuff called "nig" > drops xmr miner > drops more python scripts > obfuscated with pyarmor (again) > bonk with stick > spits out more goop > over 10 files > all the files do p much the same stuff > ??? > use ai slop machine and tools to get original src > look inside > repetitive code > notes in code > debug print statements > sniff sniff > ai slop Chat, this is yet another Threat Actor using AI to slop up some malware. The only difference is this Threat Actor used professional level tools (although trial version) and put slightly more effort into the C2 and masquerading stuff. If you'd like to see the source code I've reconstructed (and slightly more verbose writing), see post below this one.
Source originale
t.me