Youssef Madkour

مسلم أحب الله و رسوله صلى الله عليه وسلم
Nah Imma Do My Own Thing 🕸️
Malware Researcher & Threat Analyst

[Youssef Madkour @M4lB3nder]

Published my first Threat Intelligence Report on The Gentlemen Ransomware Group.

I analyze the attack lifecycle, execution behavior, encryption logic, target regions, and MITRE ATT&CK mapping.

Report: https://t.co/tfeT5Jl33q

#ThreatIntelligence #Ransomware

[Kareem @kareem0x01]

صباح الفل
محتاج حد full stack يكون شاطر و اشتغل علي اكتر من project و اتعامل مع payment gateways
يكون متفرغ الشهرين الجايين دول , ابعتلي الCV في رسالة و لينك لمشروع او اتنين اشتغلت عليهم قبل كدا

[NEGO @Naggarx]

My team is hiring senior fullstack (.net)
+3 years of exp
If anyone interested Dm.

[Invoke RE @InvokeReversing]

Stream link: https://t.co/tlqMIaVaJ0

[International Cyber Digest @IntCyberDigest]

❗️ Samsung's Galaxy S26 was remotely hacked three times on Day One of Pwn2Own Ireland, while Google's Pixel 10 survived a $300,000 attempt.

Researchers earned $388,500 for 32 zero-days and also broke LiteLLM, Sonos, Philips Hue, Oracle's Autonomous AI Database and OpenAI Codex.

VinSOC leads with $97,500 as Day Two gets underway with KAIST targeting the Pixel 10 over USB.

[Two Seven One Three @TwoSevenOneT]

🥷 Now we can inject a payload into a remote process without using VirtualAllocEx and WriteProcessMemory.

No need to suspend the target process

New technique to evade EDRs:
Github: TwoSevenOneT/InjectSetConsole

#redteam #pentest #antimalware

[Kareem @kareem0x01]

محتاج اتنين front end developer
حد يكون جونيور و حد يكون senior
لو شايف نفسك حد منهم ابعتلي الCV برايفت

[Youssef Madkour @M4lB3nder]

@OmarNaru1110 جامد كده كده

[Youssef Madkour @M4lB3nder]

@habiba_not متقولش Threat Hunting and Incident Response🙂

[أحمد عامر @Ahmed_Amer_1]

"فَاصْبِرُوا حتَّى تَلْقَوْنِي علَى الحَوْضِ."
-رسول الله صلى الله عليه وسلم

اكثروا من الصلاة عليه..

[Youssef Madkour @M4lB3nder]

@ibraradi9 دي حاجه جامدة اوى كده

[Youssef Madkour @M4lB3nder]

@0xd01a gammed ya dude 💪

[قرآن | Quran @MajdMry77995]

رتويت لعلّها المُنجيه ..

[Elastic Security Labs @elasticseclabs]

Hijacked YouTube channels are pushing an emerging infostealer.

We're tracking #REVSTEALER: at least 17 compromised channels advertising free game cheats, funneling viewers to 2 malicious domains.

The stealer itself is built for long-term operation:
- Sandbox scoring: 10 weighted checks, self-terminates at a score of 7+
- App-Bound Encryption bypass: reads the decrypted key from browser memory under debugger control
- EtherHiding: fallback C2 stored in a Polygon smart contract, swappable without touching the binary
- Gaming focus: session cookies from Steam, Battlenet, and Roblox, feeding account resale markets
- 4,700 related samples hit VirusTotal in the past year.

Our team observed 4 follow-on modules that haven't been publicly documented until now.

Full analysis, whitepaper, YARA rule, and an IDAPython string decryption tool by @k33b0i, @soolidsnakee and @DanielStepanic:
Blog: https://t.co/4jGSZ2Tidg
Whitepaper: https://t.co/P8yqn0uCdT

[Batman @urfavbatman]

………

[so? @hms_sss]

اذ ماجاتك قشعريره وغيرت من نفسك راجع نفسك:

[Dan @Dann138_]

Coffee and comics.

[المُصْحَف @AlMosahf]

﴿إِنَّ اللَّهَ وَمَلَائِكَتَهُ يُصَلُّونَ عَلَى النَّبِيِّ ۚ يَا أَيُّهَا الَّذِينَ آمَنُوا صَلُّوا عَلَيْهِ وَسَلِّمُوا تَسْلِيمًا﴾

[Aziz Farghly ⚡ @FarghlyMal]

I just published a detailed analysis about Stealc info stealer, a deep dive article about C/C++ stealer, the report involves

- in detailed code analysis
- config extractor
- yara rule
- IOCs
https://t.co/Daieg4YF1M

[Youssef Madkour @M4lB3nder]

@FarghlyMal very impressive ya dude