PandaRE 🐼 🇺🇦

Threat Researcher | Malware Addict | Volunteer @TheDFIRReport | YouTube:

[PandaRE 🐼 🇺🇦 @PandaRE__]

NEW BLOG: The Great VM Escape 💕

We caught threat actors deploying a VMware ESXi exploit toolkit in the wild - potentially was a zero-day developed over a year before VMware's disclosure 👀

If anyone has thoughts on it let me know, but I needed almost a full case of beer to wrap my head around this one 🍺

Full technical breakdown 👇
https://t.co/wXT9c7ytVh

[PandaRE 🐼 🇺🇦 @PandaRE__]

Not AI-generated YARA rules 😩💀

[Costin Raiu @craiu]

This is an interesting trend worth mentioning. People are processing threat intelligence blogs using AI and republishing summaries and often improved analysis with additional IOCs and YARA rules. These are not always good. 🧵

[PandaRE 🐼 🇺🇦 @PandaRE__]

@MalwareVillage @uwu_underground @MVscsideath Ughhhh, hate to miss out this year 😭

[PandaRE 🐼 🇺🇦 @PandaRE__]

@IceSolst Ok, now I need to know what camera you are using 😂

[PandaRE 🐼 🇺🇦 @PandaRE__]

@_winter_wonders Buy me a beer 🥰

[PandaRE 🐼 🇺🇦 @PandaRE__]

@yates82 You are such a nerd 🤣

[PandaRE 🐼 🇺🇦 @PandaRE__]

It's time for a new name. When I picked "russianpanda" it was a joke about APT naming conventions - pandas are China 🐼, bears are Russia 🐻, so the handle was a nonsense combo making fun of the whole animal taxonomy, never meant anything beyond that. Given the war situation, and the fact that I am a Ukrainian national, that "Russian" has stopped reading as a joke and started causing confusion I'd rather avoid, so I'm moving over to @PandaRE__ - same research, same me, same panda, same analyzing your favorite malware, please update your follows and come with me ❤️

[PandaRE 🐼 🇺🇦 @PandaRE__]

@r3nzsec Nawwww, thank you Ren! 🥰💙

[PandaRE 🐼 🇺🇦 @PandaRE__]

@SpyHive @blackroomsec Thank you ☺️

[PandaRE 🐼 🇺🇦 @PandaRE__]

I've been receiving a lot of messages asking for cybersecurity guidance and mentorship. Unfortunately, I can't answer them all, but here's what I CAN do:

🐻 MalbearLabs is looking for 3 mentees for a 3-month mentorship program. What is MalbearLabs? We're a threat research group with one mission: research, fight cybercrime, and educate.

🔍 Interested in threat research, threat hunting, SOC, malware reverse engineering, or anything DFIR-related?

Here's what you'll get:

- Hands-on career guidance. A real research project you'll own from start to finish. Your research published as a blog post on the MalbearLabs website - a portfolio piece you can link on your resume and LinkedIn

- We only take serious candidates with real passion for security.

Beginners welcome, but passion and commitment are required 💪

📝 Apply here: https://t.co/dkz7HvekWx
⏳ Applications close: August 31

Share if you know somebody or apply directly!

[PandaRE 🐼 🇺🇦 @PandaRE__]

@sec_hub93028 @EvilRabbitSec Thank you 💙

[PandaRE 🐼 🇺🇦 @PandaRE__]

@Kostastsale The panda 🐼 was the only accurate part 🤣

[PandaRE 🐼 🇺🇦 @PandaRE__]

@TG01_Actual Thank you :3 I have spent a lot of brain cells coming up with it 🤣

[PandaRE 🐼 🇺🇦 @PandaRE__]

@TG01_Actual DEFCON is super fun, you get to meet a bunch of smelly nerds

[PandaRE 🐼 🇺🇦 @PandaRE__]

@Andrew42634355 come on, Panda RE , wink wink

[PandaRE 🐼 🇺🇦 @PandaRE__]

@Timon_j_s I am also sad :c

[PandaRE 🐼 🇺🇦 @PandaRE__]

@vxunderground I thought of vxpanda ngl 😂

[PandaRE 🐼 🇺🇦 @PandaRE__]

@CrackmesOne How dare they.

[PandaRE 🐼 🇺🇦 @PandaRE__]

@uwu_underground @gamesophist @BSidesPyongyang Nails are cute but if my makeup isn't done I can't even take the trash out 😂

[PandaRE 🐼 🇺🇦 @PandaRE__]

@onlyfansrush @dodo_sec @banthisguy9349 wtf 😂😂😂