Drew

malware detection and analysis, hunting and gathering, threat research.
Views are my own.

[Drew @bugfireIO]

@gabsmashh We need a break… unfortunately this appears to be the new normal in the foreseeable future.

[Drew @bugfireIO]

@0x6D6172636F On the road again…

[Drew @bugfireIO]

@bbaskin You clearly accepted your new position too quick and should have held out for this goldmine

[Drew @bugfireIO]

@McGrewSecurity Talk about a lack of guardrails…

[Drew @bugfireIO]

@bbaskin @SocketSecurity Congrats and best wishes!

[Drew @bugfireIO]

@dyn___ @OffensiveAIcon @ryanaraine @juanandres_gs Outstanding! Learned a lot…

[Drew @bugfireIO]

@PandaRE__ Ideally to me it includes both. I try not to exclude RE specific info but rather partition it to specific parts of the writeup, because that still provides value to some and serves as a good reference in the future.

[Drew @bugfireIO]

@PandaRE__ Yes, they are doing a ridiculous disservice to the security community by focusing all of their efforts on the offensive side of things.

[Drew @bugfireIO]

@embee_research I agree, it's a totally new way of thinking...old habits die hard!

[Matthew @embee_research]

Spent the last few days wishing that DnSpy had an MCP with debugger support, and turns out LLM's can just build that in ~20 minutes if you give it the github repo and a decent spec on what you want.

Opus was largely able to one shot the entire mod, and GLM5.3 was able to drive it almost instantly without needing to add any skills.

The whole concept of vibe modding an existing tool never really crossed my mind before, but now i'm all here for it.

[Drew @bugfireIO]

@patialavii @skocherhan @Malwarehunterr @getbstr Thanks. Just go ahead and block those domains in my environment as you find them, thanks in advance!

[Drew @bugfireIO]

@TENEXai @PandaRE__ Why is it down now?

[Drew @bugfireIO]

@PandaRE__ @TENEXai I’m hoping you’ve found your true home, congrats!

[Drew @bugfireIO]

@McGrewSecurity It’s an 8088!

[Drew @bugfireIO]

@nickharbour @herrcore Embarrassing

[Drew @bugfireIO]

@sec_hub93028 Because I stay at a Holiday Inn Express every night,

[Josh Stroschein | The Cyber Yeti @jstrosch]

The latest episode of Behind the Binary is live!

We’re diving into everyone's favorite topic—binary similarity—joined by Jonas Wagner and Endre Bangerter from @threatray.

🎧 https://t.co/kaSRYFHTga

[Drew @bugfireIO]

@KooKiz @zodiacon Yeah it’s ridiculous that all the emphasis has been on the offensive side to this point.

[Drew @bugfireIO]

@PandaRE__ Happy for you, Panda!

[Drew @bugfireIO]

@MiaAI_lab Thanks for all your work and contributions!! I do have one important question that I need to know so that it's clear in my head. Is your name pronounced like me-a or my-a. It's important! Thanks!