Ukycircle

I'm a security researcher at Ukycircle. Our domain is “offensive” cyber security. Threat research, exploit/malware development, cryptography and pentest.

[Ukycircle @UkyKnight]

The word “CIRCLE” in Ukycircle represents six core principles:

C – Cybersecurity
I – Intelligence
R – Research
C – Cryptography
L – Laboratory
E – Exploitation

Together, they reflect a continuous pursuit of understanding technology’s core —
Here is our logo:

[Ukycircle @UkyKnight]

PETriage v0.5.1 is now available!
We’ll be presenting PETriage at Black Hat USA Arsenal 2026 next week. If you’re interested in malware analysis and PE triage, please stop by and check out the demo!
https://t.co/vwR1SMuZ1V
#BHUSA #MalwareAnalysis

[Ukycircle @UkyKnight]

#coolviz updated!
As summer heats up, get your cool from Okinawa's sea & Tokyo's rain.
Go: https://t.co/jckCtP28bS

[Ukycircle @UkyKnight]

A mission-control Earth in native Rust + wgpu 🌏
Up to 2M GPU particles advecting live GFS winds, 16k satellites via SGP4, live USGS quakes, Himawari-9 clouds reprojected from geostationary orbit.
All real data — you can see an actual typhoon's eye. https://t.co/jckCtP28bS

[Ukycircle @UkyKnight]

Released ida-func-call-rank, a lightweight IDAPython plugin for IDA Pro.

It ranks functions by static direct call xrefs to help spot reused helpers like API-hash resolvers, decryptors, and dispatchers during malware triage.

Repo: https://t.co/pkpIgd7qcg
#malware #ida #plugin

[GitHub @github]

1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.

Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.

[Ukycircle @UkyKnight]

We discovered a Critical OS command injection vulnerability (CVE-2026-6644, CVSS v4.0: 9.4) in the PPTP VPN Client of ASUSTOR ADM. A patched firmware (ADM 5.1.3.RGO1) is now available. Users are strongly advised to update immediately.
Details: https://t.co/dAN2zkuvXr
#InfoSec

[R. @0xrb]

#LapDogs APT #C2 Panel exposed ,
The Chinese-linked botnet targeting the US, Taiwan, South Korea, and Japan and many other country .

Into the '#Strike' login C2 panel—a Chinese-language interface used to manage a global network of 1,000+ compromised routers and VPS nodes.

[Ukycircle @UkyKnight]

Our first CVE-2026-34005!
We reported an OS command injection issue in the Sofia binary hostname configuration handler of #Xiongmai DVR/NVR devices running firmware V4.03.R11.
NVD:
https://t.co/nLzrHjn4R9
Technical note:
https://t.co/wVu3iqjRkH
#cve

[Ukycircle @UkyKnight]

CFF evolved since Mandiant's analysis: .data tables -> stack-based runtime routing.
Also identified what CFF protected: exfil paths & COM/WMI init.

Scripts + decrypted data (JSON) in our repo.
#LummaStealer #malwareanalysis

[Ukycircle @UkyKnight]

Deobfuscated #LummaStealer (Jan 2026). CFF made Hex-Rays refuse to decompile — after patching, same address → 288 lines of pseudocode.

610/610 strings decrypted, 274/312 CFF functions recovered (87%).
Details: https://t.co/CJApkMtKDw

[Ukycircle @UkyKnight]

#petriage v0.5.0 is now available!
Better detection of malformed/suspicious PE header values (demo: real malware with an invalid timestamp)
Semantic PE header editing: e.g., disable ASLR for debugging by turning off DYNAMIC_BASE and saving.
#malware
https://t.co/vwR1SMuZ1V

[Ukycircle @UkyKnight]

PETriage: is a Rust PE surface-analysis tool for malware triage.
CLI + GUI on Linux/macOS/Windows. Fully offline (no network required).
Analyze PE files without a Windows-only workflow:
https://t.co/vwR1SMuZ1V
https://t.co/Mh0mLcc3nS
#rust #pe #malware #triage #petriage

[Ukycircle @UkyKnight]

Detects suspicious entry points located in .rdata instead of the expected .text section and alerts analysts, helping with initial malware triage.
#petriage #malware

[Ukycircle @UkyKnight]

PETriage has surpassed 100 downloads on https://t.co/7qzWBJ2oxT!
Thank you for your support!
#petriage #rust #malware