Jan

- Security Researcher - Incident Responder - Lethal Forensicator - Reverse Engineering Enthusiast [Tweets are my own and not the views of my employer]

[Jan @_zero_q]

Targets and statistics for the threat actor tracking:
#MalwareAnalysis #CTI

[Jan @_zero_q]

@TheHackersNews I bet there will be an A I in the loop soon to auto-approve 🫣

[Jan @_zero_q]

Linking indicators from samples to campaigns and actors.
#MalwareAnalysis #CTI

[Jan @_zero_q]

I am including some malware config extraction too:
#MalwareAnalysis #CTI

[Jan @_zero_q]

Moving forward with my static analysis platform:
#MalwareAnalysis #CTI

[Antonio 's4tan' Parata @s4tan]

new blog post: shrun, apiwatcher, and argus: three malware analysis tools built with Claude
https://t.co/n4Gd9Icslr
#MalwareAnalysis #ReverseEngineering

[Cyber_OSINT @Cyber_O51NT]

Foresiet identified and analyzed Lucid Stealer, a Node.js SEA wrapper delivering a credential stealer and remote-access Trojan with persistence, wallet theft, keylogging, HVNC, and DDoS capabilities. https://t.co/wgL79rwECS

[Laurent Cheylus @lcheylus]

Benchmarking LLMs for Malware Triage and static Unpacking with Malcat (binary analysis software) #Infosec #Malware #LLM https://t.co/JsL8DA9iyj

[Alex Matrosov @matrosov]

Follow every Mythos discovery through our coordinated vulnerability disclosure dashboard.

https://t.co/xri3fTpf77

[Jan @_zero_q]

@lennyzeltser I would love to see some AI tarpit which keeps AI based reconnaissance or vulnerability discovery in an exhausting loop burning time and tokens hindering the attacker to come to the real targets. Combined with honeytokens would give enough time to react.

[Jan @_zero_q]

@Cyb3rMonk If AI finds vulns faster than new code is developed we will be fine soon. Your approach is faster, you have my vote.

[Jan @_zero_q]

hmm what to do when machine thinks it knows better than me:

[Jan @_zero_q]

Just waiting for AI to include hidden advertisement in their responses, e.g. when asking for summary of incident response actions depending on LLM it will point out that it is best to use tool or service of a certain company 🤣

[Jan @_zero_q]

Can someone run Mythos against Forti and Ivanti, so that we get that chapter closed once and for all

[Jan @_zero_q]

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator https://t.co/9Nib0xt3tc

[Jan @_zero_q]

@TheEnergyStory @craiu No surprise. Attackers always take the easiest path and writing sophisticated malware is not as important as it was back in the days. It will shift again when exploiting becomes cheaper then stealing valid identities.

[Jan @_zero_q]

Running @opencode together with Selenium and Safari remote control to have the AI fix my JavaScript errors, so I can enjoy the sun 🤣

[Jan @_zero_q]

AI does not mean attackers generate better exploits. It means they generate better reasons to panic.

Speed of patching replaces verification as the dominant safety signal.

[Jan @_zero_q]

@cyber_razz Interesting approach to train AI

[Jan @_zero_q]

I just wanted to update one library ... now I am running OCLP on my late 2013 mac with a clean install of Sonoma 🤣