MalwareSecrets

On the hunt for secrets of various malware families. Novice Malware Researcher. Fan of double-click and suspend!

[MalwareSecrets @MalwareSecrets]

Need the chain of commands used for encryption for a Ransomware? Comment the name, I might be able to help.

[MalwareSecrets @MalwareSecrets]

@ICC 1999 World Cup Semi Final - South Africa vs Australia

[MalwareSecrets @MalwareSecrets]

Please check @ICC #ashes last few overs of Day5 where @marnus3cricket is stepping on the danger area intentionally and in a smart way. It may seem that he is after the ball, but most of them could have been avoided. Umpires should have intervened. #AUSvENG

[MalwareSecrets @MalwareSecrets]

@cyber_anubis Amazing! It is the most Sophisticated piece of malware.. great job

[MalwareSecrets @MalwareSecrets]

Still confused - Why is everyone treating Revil, DarkSide, and BlackMatter ransomware variants as different, when they are same and created by the same ransomware builder application. #ransomware #revil #darkside #blackmatter

[MalwareSecrets @MalwareSecrets]

@MalwareJake Was able to get some work done..

[MalwareSecrets @MalwareSecrets]

@vikrantgupta73 Washington Sundar playing - Real reason is Steve Smith, because off spinner has got better of him #sportstak

[MalwareSecrets @MalwareSecrets]

#SUNBURST IOC Timeline
#SolarWinds #SolarWindsHack #FireEye #Security #SecurityBreach #solarigate #CyberSecurity

[GarWarner @GarWarner]

Help me Congratulate @MalwareSecrets on successfully defending his PhD today! Dr. Arsh Arora! #ransomware #malware

[GarWarner @GarWarner]

Who has been hit by #Ransomware? Check the Ransomware War Map that shows attacks against government, medical, and educational institutions - https://t.co/iGRj2uVuCY - @pcmatic - are you the creator of this map?

[Dr. Arsh Arora Ph.D. @ararora4]

#TrickBot #bankingtrojan with new injects dropped by #IcedID targeting multiple #banks
https://t.co/mtNan6sRbx
#malware #webinject #cybercrime

[MalwareSecrets @MalwareSecrets]

@yassine_lemmou Thank you 😊

[MalwareSecrets @MalwareSecrets]

Addition of #LockFile and #UnlockFile function calls from #GandCrab v1 to #GandCrab v5 to encrypt individual files. The process is repeated for all the files present on the machine.

[MalwareSecrets @MalwareSecrets]

@yassine_lemmou I am not able to find working binaries for version 2,3,4.. I thought of the same but road block. Let me know if you are able to find a working hash of it.

[MalwareSecrets @MalwareSecrets]

@yassine_lemmou These are only the calls for the kernel level, focusing on them. CryptEncrypt was there and it’s mostly standard for most of the ransomware.

[MalwareSecrets @MalwareSecrets]

#Kelihos

[Mary O'Connell @MaryOConnellTV]

UAB computer forensics students help nab Russian cyber criminal @WVTM13 https://t.co/MuFrGQHdrE

[U.S. Department of Justice @TheJusticeDept]

Russian National Who Operated Kelihos Botnet Pleads Guilty to Fraud, Conspiracy, Computer Crime and Identity Theft Offenses https://t.co/mkSIiXVMcH

[GarWarner @GarWarner]

Russian spammer Peter Levashov has plead guilty for his #Kelihos #spam #botnet activities - https://t.co/d0cRmfDhrR

[GarWarner @GarWarner]

Android malware in the Google Play store can intercept SMS 2FA with ease. We reviewed logs from an Anubis II sample that imitates 190 banks from 17 countries. https://t.co/Bve7cTb7gS Thanks to @nullcookies and @LukasStefanko for the pointers!