Malvuln (aka hyp3rlinx)

Powered by malware
Malware vulnerability research

[Malvuln (aka hyp3rlinx) @malvuln]

Trojan-Spy.Win32.Small
Remote Command Execution
MD5: 8c15ec5f0137d097a345b693f0bffedb
MVID-2025-0705

https://t.co/YfrO3F7WuI

[Malvuln (aka hyp3rlinx) @malvuln]

Backdoor.Win32.Poison.jh
Insecure Permissions
MD5: 3d9821cbe836572410b3c5485a7f76ca
MVID-2025-0704
https://t.co/pZL0JMrwm4

[Malvuln (aka hyp3rlinx) @malvuln]

Backdoor.Win32.Netbus.170
Insecure Credential Storage
MD5: 086f0693f81f6d40460c215717349a1f
MVID-2025-0703
https://t.co/V2GSidZs5f

[Malvuln (aka hyp3rlinx) @malvuln]

Backdoor.Win32.ControlTotal.t
Insecure Credential Storage
MD5: 6c0eda1210da81b191bd970cb0f8660a
MVID-2025-0702
https://t.co/KbAR6iAlyy

[Malvuln (aka hyp3rlinx) @malvuln]

HEUR.Backdoor.Win32.Poison.gen
Arbitrary Code Execution
MD5: b2e50fa38510a5ea8e11f614b1c1d0d5
MVID-2025-0701
https://t.co/nlRcXp44Q2

[Malvuln (aka hyp3rlinx) @malvuln]

New: MISP-compatible feed for Malvuln malware vulnerability intel is live →
https://t.co/uJdA8NEl64

Track vulnerable malware, for researchers or anyone building CTI pipelines

Existing data live now — new entries soon

Feedback welcome

@MISPProject @CIRCL_lu #Malware #CTI

[Malvuln (aka hyp3rlinx) @malvuln]

@jamieantisocial Now combine with...

https://t.co/s9BrDUGVif

[Malvuln (aka hyp3rlinx) @malvuln]

@JimmyJLynch @BleepinComputer @LawrenceAbrams anti ransomware exploit tool leveraging code exec flaws in malware

[Malvuln (aka hyp3rlinx) @malvuln]

@AlvieriD Turning Lynx into a .bin file

https://t.co/vOviMoSNFI

#lynx

[Malvuln (aka hyp3rlinx) @malvuln]

RansomLord de-weaponize feature

[Malvuln (aka hyp3rlinx) @malvuln]

Queens University Belfast is leveraging the malvuln vulnerability database.

https://t.co/EaQiA64MKa

[Malvuln (aka hyp3rlinx) @malvuln]

RansomLord de-weaponize feature

[Malvuln (aka hyp3rlinx) @malvuln]

RansomLord NG v1.0 new release
Significant updates, fixes and new de-weaponize feature. Now exploits sixty-one ransomware family's
Adding Fog, Vanhelsing, Lynx, Makop, Pe32, Mamona

https://t.co/Gy6LXLO79m

[Malvuln (aka hyp3rlinx) @malvuln]

@I_Am_Jakoby Welcome to the club, my IE security feature bypass CVE-2019-0995 finding was "bounty eligible" got an email an all. Then crickets...

[Malvuln (aka hyp3rlinx) @malvuln]

@techspence https://t.co/yKrwjxOlod

Bug fix an new features soon.

[Malvuln (aka hyp3rlinx) @malvuln]

@_JohnHammond Preferably with a GG allin track

[Malvuln (aka hyp3rlinx) @malvuln]

@_JohnHammond Detonate a ransomware sample using RansomLord NG on your live system

[Hyp3rlinx @hyp3rlinx]

Microsoft Windows .XRM-MS File Type NTLM Hash Information Disclosure PoC

https://t.co/zjFogmK4gm

[Malvuln (aka hyp3rlinx) @malvuln]

@TheHackersNews Credits have now been corrected for (CVE-2025-24054)

[Hyp3rlinx @hyp3rlinx]

Credits for CVE-2025-24054 have now been corrected thank you @msftsecresponse

#CVE-2025-24054