0nid

[ENKI WhiteHat @ENKI_official_X]

[1/2]
CVE-2026-32223: heap overflow in usbprint.sys (IOCTL 0x220064).

Malformed USB descriptor, Named Pipe spray + Ghost Chunk for kernel leak, forged IRP, SYSTEM.

Writeup: https://t.co/EMSyWCPsVL

#CVE_2026_32223 #WindowsKernel #LPE #vulnresearch

[c0m0r1 @c0m0r1]

We Odin got 3rd place on BlakcHat MEA! 🎉🎉🎉 Kudos for great teammates @__g0ri__ @1nteger_c @nga_990 @0nidking

[ENKI WhiteHat @ENKI_official_X]

ENKI WhiteHat has produced a follow-up report on "APT Down - The North Korea Files". Unlike previous reporting, we assess a much stronger link to UNC5221 than Kimsuky.

Additionally, the malware used by the attackers is linked to a 2022 incident targeting a South Korean financial institution.

See our findings and in-depth analysis:
https://t.co/26vDa37yF6

[0nid @0nidking]

😀

[Asian Cyber Security Challenge (ACSC) @acsc_asia]

🎉 After ACSC 2025 (https://t.co/wmYM9Luwwb) and all reviews, the Team Asia Finalists are confirmed!

🌏 Meet the players:
Satoooon, jinu, wlswotmd, zolbooo, G0RiyA, 0nid, Yu_212, nella17, soon_haari, keymoon, mojashi, iwancof, physicube, lovely_epsilon, sin3point14, hiikunZ, daldaguri

Big thanks to everyone who joined, organized, and supported the journey 💙

👉 Next stop: ICC Tokyo 2025 – see you in Japan! 🇯🇵
Official site: https://t.co/2gDYyt1S3e
Official X: https://t.co/ZOkzq67u1P

#acsc_asia
#icctokyo2025
#ctf

[0nid @0nidking]

@byrne_emmy12099 why do you think it's DPRK?

[P1nkjelly @p1nkjelly]

See you at DEF CON 33 Final!
SuperDiceCode😚
#defcon33

[ENKI WhiteHat @ENKI_official_X]

🔎Konni의 최신 AsyncRAT 공격: LNK 파일을 활용한 감염 기법

📖자세히 알아보기 : https://t.co/aYdX2K08rF

- 난독화 기법을 이용한 탐지 우회
- Dropbox와 Google Drive를 악용한 악성코드 배포
- LNK 파일 메타데이터를 이용한 추가 악성코드 헌팅

#CyberSecurity #ThreatIntelligence #Konni #APT #Malware #LNK #AsyncRAT #악성코드 #윈도우악성코드 #바이러스 #엔키화이트햇

[0nid @0nidking]

@byrne_emmy12099 hi why is dprk mentioned? i believe this sample has been uploaded for testing and i did not find any association with dprk

[0nid @0nidking]

@byrne_emmy12099 why do you think kimsuky?

[ENKI WhiteHat @ENKI_official_X]

☠️LNK 파일을 활용한 RokRAT 악성코드 분석
https://t.co/f93rlSQmAK👈
1⃣ 악성코드 분석 및 LNK 파일 분석
2⃣ Powershell 스크립트 분석
3⃣ 악성코드 감염 및 데이터 처리
4⃣ 감염 시스템 정보 수집 및 클라우드 통신 과정
#WhiteHat #cybersecurity #MalwareAnalysis #ethicalhacking

[0nid @0nidking]

https://t.co/OvBc7MQ7Qp

[S2W @S2W_Official]

We just published "Unveil the evolution of Kimsuky targeting Android devices with newly discovered mobile malware".

Three new malware family that targets Android have been discovered, #FastFire, #FastViewer, and #FastSpy respectively.

#Kimsuky

https://t.co/xAPzhoEizW

[0nid @0nidking]

I recently started studying linux lpe and will find within this year🙏

[0nid @0nidking]

Interesting and informative article
#OSINT
https://t.co/jDQmS9kAHg

[0nid @0nidking]

but this sample has not argument data...^^;

[0nid @0nidking]

i want to get gwisin ransomeware sample T.T

[0nid @0nidking]

omg!!! i found this sample in vt
https://t.co/872k1SO1X0

[0nid @0nidking]

@ur_b3st_fren @cyberwar_15 1c9458b64ff31fed8f7c1f403d5e797a

[0nid @0nidking]

탈세제보-417J-041.docx
d7f6b09775b8d90d79404eda715461b7

IEUpdate.exe
c65a1c8351a6e6c921a47aa60cadde2b

C2: dxsgixb75e[.]copycatfrag[.]store
PDB: D:\Works\PC_2022\ACKS_2012\fengine\Release\fengine.pdb