Yugandar A

Malware Analyst,
Developer & scripter by day.
Learning Windows malware

[Yugandar A @Aales07]

https://t.co/ax6xKwhNua

#n8n #cve #CVE-2026-21858 #RCE

[Ryan Dewhurst @ethicalhack3r]

The first CVE published in 2026 🥳

CVE-2026-0544

https://t.co/8tNfpm4ukF

[Nicolas Krassas @Dinosn]

A GPT-empowered penetration testing tool

https://t.co/0CNFepIuTD

[Alexandre Borges @ale_sp_brazil]

I have been slowly writing the next articles:

1. MAS 08: Introduction to MacOS malware analysis.
2. ER 03: macOS/iOS (part 01)
3. MAS 09: Shellcode Analysis
4. ER 04: Browsers or Hypervisors (part 01)
5. RE 05: Hypervisors or Browsers (part 01)

MAS 09 will be the last article in this series (MAS).

My official series will be ER (Exploiting Reversing), where I can write in-depth texts, all of them aimed at vulnerability research. By the way, I am already writing all of them (ER 03, ER 04 and ER 05) because all these topics make part of my research.

While I don't release the next article (my time has been very limited, unfortunately), you can check out the previous ones on:

https://t.co/UpYLkSS6GB

#vulnerability #exploitation #reversing #malwareanalysis

[Dinesh_Devadoss @dineshdina04]

I just published blog on Atomic MacOS Stealer (AMOS) https://t.co/Wejo7gU0cE
#malware #macos

[Gen Threat Labs @GenThreatLabs]

#BREAKING 🚨 A major malware campaign spreading via emails is targeting Czechia 🇨🇿! Beware of deceptive emails posing as "Doprovodná objednávka". Malicious email 📧 attachment is a multistage dropper deploying #AgentTesla stealer. Watch out for suspicious emails!

[Today In Infosec @todayininfosec]

2013: Burger King's Twitter account was compromised, had its name changed to McDonalds, and shared offensive tweets. The incident was a...well...Whopper! (I'll see myself out.)

[安坂星海 Azaka || VTuber @AzakaSekai_]

#threatintel
someone just leaked a bunch of internal Chinese government documents on GitHub
https://t.co/BO8N64A7kF

[Gen Threat Labs @GenThreatLabs]

🚨 South Africa 🇿🇦 faces a new wave of malware attacks! Cybercriminals are using deceptive invoice emails containing PDF files with fake Adobe Reader updates to propagate #Remcos #RAT. Stay alert and avoid opening suspicious attachments or clicking on unfamiliar links #StaySafe

[ExecuteMalware @executemalware]

Here are some #darkgate IOCs from yesterday and today:
https://t.co/SedkTUTqJu

[SEKTOR7 Institute @SEKTOR7net]

Playing with process hollowing, by Frank Block of @Insinuator

#redteam

https://t.co/jsaJY8Od4o

[Mobile Hacker @androidmalware2]

Rusty Droid 1.0 presents itself as new Android banking trojan on the underground market, even though, its C&C server is the same as ERMAC's banker (176.111.174[.]191)

Based on @apkdetect analysis, it is ERMAC.

Rusty Droid price is $1.000 for 1 month license or $20.000 for source code.
Sample: https://t.co/ujXtu6dKoP
Besides Telegram, it is also promoted on GitHub: https://t.co/hm7HQUBjF8

[moto_sato @58_158_177_102]

https://t.co/sS0ISIeYjb

[The Deep View @theDeepView]

We spend all week researching the top AI tools so you don't have to...

Get insights, tools, and news for free when you join our community of 80,000+ readers.

[Microsoft Security @msftsecurity]

Criminals used cracked versions of Cobalt Strike in 68 ransomware attacks costing MILLIONS to healthcare organizations and more than 19 countries around the world. Learn how Microsoft disrupts cracked and compromised software at: https://t.co/6JFiYBzKXj #SecurityInsider

[K.Annamalai @annamalai_k]

Shattering records & clocking a new best!

Our Indian Athletes Muhammed Anas Yahiya, Amoj Jacob, Muhammed Ajmal Variyathodi & Rajesh Ramesh broke the Asian record in the 4x400m relay to enter the finals in the World Athletic Championship in Budapest.

Congratulations Team India 🇮🇳

[Jane @Jane_0sint]

#AgentTesla binary file inside Jpeg image -> retrieved by PS.Loader script⏬
https://t.co/RBQFp5jSV5

[Mobile Hacker @androidmalware2]

Stealing authentication token from Basecamp Android app using deep link

Vulnerability analysis: https://t.co/hU0RTxdYq5 via @danllewellyn123
h1 report: https://t.co/71avpx4Ete

[Joe Security @joe4security]

Joe Sandbox #macOS ARM64 Apple Silicon support is out! You can now analyze malware natively on Ventura.

Wondering how this looks like? Take part in a report tour showing a #LockBit #ransomware: https://t.co/UlXmq5lzyD

#malware #dfir #infosec #mac

[DOCGuard - Detect Maldocs in Seconds! @doc_guard]

🚨 Sophos RedTeam Activity 🚨
⚠ Malicious Word Document Evaded All Antivirus Solutions ⚠

Virustotal: 1/63

MD5: 1fd4ec6272ed98a6be0ce5ae8eab28c9
IOCs: https[:]//www.global-hr-staff.com

DOCGuard Report: https://t.co/CXwVfOkTtm