VirusTotal

Crowdsourced Security Intelligence

[VirusTotal @virustotal]

Livehunt rules could see which processes ran in the sandbox, but not what spawned them. Now they can.

Every process in vt.behaviour.processes_list now includes parent_name and ancestor_names.

How we use it for hunting, with real samples and YARA rules: https://t.co/s6ypbG57SL

[VirusTotal @virustotal]

Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), a leak before the patch and millions of PHP servers on the Internet. We used VirusTotal Internet Scanning to measure who is exposed, what they run and how to cut the window:
https://t.co/RgxlT3bCmr

[Bernardo Quintero @bquintero]

How Some Malicious AI Skills Hide Instructions from Human Reviewers

* Whitespace padding
* HTML comments
* Invisible Unicode

https://t.co/b22Isbg62p

[Victor M. Alvarez @plusvic]

YARA-X v1.22.0 is out! https://t.co/dgkO26IbwS

[Bernardo Quintero @bquintero]

VirusTotal is now available in ChatGPT

Scan files, URLs, and domains for potential threats, right from your chat

https://t.co/BlfJnZW4JF

[VirusTotal @virustotal]

Internet Scanning in VirusTotal: hunting infrastructure by what it exposes
https://t.co/IxVQbgZ8WV

[VirusTotal @virustotal]

From Automation to Infection (Part III): Naming, Measuring, and Detecting Malicious AI Agent Skills

https://t.co/yhrYYmBWtg

[VirusTotal @virustotal]

https://t.co/x2BmtB4E89

[VirusTotal @virustotal]

Crowdsourced AI += Knostic

Knostic joins VirusTotal Crowdsourced AI, bringing specialized analysis of VS Code extensions (.VSIX) to help identify supply chain risks and improve developer security

https://t.co/3cV8fvZIdq

[VirusTotal @virustotal]

VirusTotal Inside the Agent Loop

VT-community plugins for OpenClaw and Hermes agent

more info:
https://t.co/hMlrZduWXn

[VirusTotal @virustotal]

Reverse Shells, Semantic Worms, and Cognitive Rootkits in OpenClaw Skills

Five techniques, five skills, and five ways automation turns into access in AI agents.

https://t.co/xK9jw3kQvI

[VirusTotal @virustotal]

From Automation to Infection: How OpenClaw AI Agent Skills Are Being Weaponized

Over the last few days, VirusTotal has detected hundreds of OpenClaw skills that are actively malicious.

https://t.co/z4UCwYrqP0

[VirusTotal @virustotal]

Dive into the latest threat hunting techniques with our #VTPRACTITIONERS series! We've partnered with @Acronis TRU to share insights on tracking FileFix, SideWinder, and the Shadow Vector.

Check out the full post: https://t.co/kdBfHvhLAK

[VirusTotal @virustotal]

How VT Code Insight + Binary Ninja use AI to scan Apple binaries at scale, catch undetected Mac/iOS malware, and reduce false positives. No metadata, just code.
https://t.co/Rxi3mNvylu

[VirusTotal @virustotal]

How VT Code Insight + Binary Ninja use AI to scan Apple binaries at scale, catch undetected Mac/iOS malware, and reduce false positives. No metadata, just code.
https://t.co/Rxi3mNvylu

[VirusTotal @virustotal]

#MonthOfVTSearch reminder!
VT Enterprise web searches don’t consume quota in November.
Day 2: A VT search a day keeps phishing away 🎯
entity:domain fuzzy_domain:https://t.co/7MGs9l93u2 and not domain:https://t.co/7MGs9l93u2 creation_date:90d+

[VirusTotal @virustotal]

#MonthOfVTSearch is live!

GUI searches are quota-free all month for VirusTotal customers.

Day 1: Hunting Gamaredon-related document activity.

Follow along. One search per day. Try it, pivot, and share your results.

[VirusTotal @virustotal]

We’re thrilled to share our new collab with @huggingface , check out how we’re teaming up to boost AI safety and threat intel

https://t.co/ABtgmABxjN

[VirusTotal @virustotal]

Simpler Access for a Stronger VirusTotal

We’re simplifying access to VirusTotal with clearer tiers and flexible options, keeping the platform open, collaborative, and built around our contributors.

Read more:
https://t.co/wypXROpwOE

[VirusTotal @virustotal]

Crowdsourced AI += Exodia Labs

We’re adding a new specialist to VirusTotal’s Crowdsourced AI lineup: Exodia Labs, with an AI engine focused on analyzing Chrome extension (.CRX) files.

https://t.co/5XJe1o6b2v