malc0de

Owner of an updated database of domains hosting malicious executables.

[Fumik0_ @fumik0_]

Let’s play (again) with Predator the thief https://t.co/3VdtbzNpcf

[Darien Huss @darienhuss]

Just published my paper on largely undocumented #LazarusGroup/#DPRK campaigns targeting cryptocurrency individuals/orgs (both big and small). The research covers new implants/tactics not currently covered in the media regarding 'fake jobs' campaigns. https://t.co/mCEYV3mJyA

[Tillmann Werner (inactive) @nunohaien]

Dusted off honeytrap, my low-interaction honeypot, for the second dawn of remote exploits and migrated it to github https://t.co/bMzz8jTOhG

[Kafeine @kafeine]

CVE aging and Exploit Kits (those used in mass blind attack) in the past 5 years: freshest working RCE exploit is now patched since a year.

[Nicolas Krassas @Dinosn]

Generic Unpacking with r2pipe https://t.co/kfIZ4gMkDH

[Byte Atlas @ByteAtlas]

[blog post / tool] ApiScout: Painless Windows API information recovery. https://t.co/0rkvpHtrZG

[Florian Roth ⚡️ @cyb3rops]

IDA pro plugin to find crypto constants (and more) based on YARA
https://t.co/Hlp449MevT

[snowfl0w @snowfl0w]

contagio: Russian APT - APT28 collection of samples including OSX XAgent https://t.co/NHTBQy1vDb

[Kafeine @kafeine]

Sundown integrating CVE-2016-7200 & CVE-2016-7201 (Edge) https://t.co/ORTSB6NHkt

[Florian Roth ⚡️ @cyb3rops]

VolUtility Version 1.0 Release
- web front end for the #Volatility memory analysis framework https://t.co/x5FjWuz6vu

[Joe Security @joe4security]

Introducing Pafish Macro, the Office document to check your favorite sandbox against recent VBA / Macro evasions! https://t.co/PAuVTuCeu9

[Kafeine @kafeine]

The "AdGholas" malvertising : steganography & files whitelist to hide in plain sight https://t.co/OctrmsXBkR

[mak @maciekkotowicz]

No more angler, so ekdeco+=neutrino, https://t.co/5f3czHUdgM
seems to work on recent dumps from @malware_traffic ;]

[syntx @tehsyntx]

Loffice - Analyzing malicious documents using WinDbg
https://t.co/LOuqbE60Lf

[Kafeine @kafeine]

Is it the End of Angler EK ? https://t.co/5zYpXenuyV

[Kafeine @kafeine]

Bedep has raised its game vs Bot Zombies https://t.co/Wm1j8D6eO1

[Anton Ivanov @antonivanovm]

CVE-2016-1001 has been added to Angler EK. https://t.co/q7JYzsja7S

[Kafeine @kafeine]

RIG is exploiting CVE-2016-0034 (Silverlight). https://t.co/yPoYYku9Ny Spotted by @malc0de. ID by: @antonivanovm

[Kafeine @kafeine]

Angler EK is now exploiting Silverlight up to 5.1.41105.0 (CVE-2016-0034 ? ) https://t.co/yPoYYku9Ny

[Frank @jedisct1]

Angler EK landing page decoder https://t.co/DidL9l7SEr