cryptax.bsky.social

cryptax.bsky.social

@cryptax.bsky.social

Android malware analysis. Ph0wn CTF founder. IoT hacking. Frequent speaker at Virus Bulletin, Insomnihack etc. Based in France. Currently testing Bluesky. Otherwise on Mastodon.social.

271 followers177 following142 posts

Want to hear #Rust #metamorphic #malware, early bird APC, module stomping, #Android TV botnets, ransomware encrypting #LLM training files and more? All of this was at @virusbtn.bsky.social last week. An excellent edition! My notes of what I personally learned: cryptax.github.io/posts/vb2026/

cryptax.github.ioVirus Bulletin 2026Virus Bulletin 2026 I was (speaking) at Virus Bulletin this year, and it was an excellent edition with lots of very interesting, highly technical talks. Conferences are a cool place to learn about new...

This week, I am at @virusbtn.bsky.social and so happy to present again. It's a "simple case" - convincing bank fraud - which can potentially hit 15% of the population ! Defeats security measures by social engineering. What happens when you trust the wrong person? Come and hear live.

cryptax.bsky.social reposted

Join Axelle Apvrille from Fortinet at VB2026 in Seville for a walkthrough of a real cyber incident that targeted an 89-year-old man in February 2026, revealing the full process used by the cybercriminals. 📅 Oct 15 | 09:30-10:00 | Red Room 👉 tinyurl.com/mrxpt752

cryptax.bsky.social reposted

How 100 hospitals switched to pen and paper to defeat a national cyber-attack. Here is our in-depth 10 minute YouTube documentary which we produced about the incredible response of Romanian cyber security teams and the unseen heroics of doctors and nurses in 2024. www.youtube.com/watch?v=WxY6...

youtube.comHow 100 hospitals switched to pen and paper to defeat a cyber attack - BBC World ServiceYouTube video by BBC World Service

Ce vendredi, atelier "reverse avec IA" à Auvergn'hack : www.auvergnhack.fr - Configurer OpenCode - Installer Ghidra + son serveur MCP - Créer un agent et des skills pour le reverse - Résoudre divers challenges CTF et CrackMe avec IA - Visual Studio Code + Cline - Rétro-ingénierie de Saint Nectaire

Pré-requis : - Avoir déjà utilisé une fois un désassembleur peu importe lequel (Radare2, IDA Pro, Binary Ninja, Ghidra...) - Docker et Python3 installés sur votre machine - Etre à l'aise sur votre machine pour installer des outils (git, make, pip, unzip...)

We're speaking at THCon, with Damien, on Wednesday this week. AI has really changed CTFd. Can we do something about it? Yes. We'll present a couple of ideas we experimented with - and hope it gives you tons of other ideas. #CTF #AI

Oh? Rust based keylogger?!

Virus Bulletin@virusbtn.bsky.social

Arctic Wolf Labs tracks SloppyLemming, an India-nexus espionage actor targeting Pakistan and Bangladesh. The report details two attack chains: PDF-driven sideloading that deploys BurrowShell and an Excel macro chain that delivers a Rust-based keylogger. arcticwolf.com/resources/bl...

cryptax.bsky.social reposted

Can AI Agents detect some hidden Backdoors in Binaries? Experiments with Code injected in C/Rust Projects, then analyze of resulting Binary with AI Coding Agents + access to reverse engineering Tools (Ghidra, Radare2, and binutils) #ReverseEngineering #AI quesma.com/blog/introdu...

quesma.comWe hid backdoors in ~40MB binaries and asked AI + Ghidra to find them - Quesma BlogBinaryAudit benchmarks AI agents using Ghidra to find backdoors in compiled binaries of real open-source servers, proxies, and network infrastructure.

cryptax.bsky.social reposted

👁️🌌 La nébuleuse de l’Œil du Chat comme vous ne l’avez jamais vue ! Grâce à Hubble Space Telescope et Euclid, une nouvelle image spectaculaire révèle les derniers instants d’une étoile à 4 300 années-lumière. 👉 À lire ici : cnes.fr/actualites/i... #Cnes @esa.int @ec-euclid.bsky.social

cnes.frEn images : la nébuleuse de l’Œil du Chat vue par Hubble et Euclid | CNESUne nouvelle image a été dévoilée aujourd’hui par l’ESA : une observation conjointe des satellites Hubble et Euclid, qui se sont intéressés de très près à la nébuleuse de l’Œil du Chat, ou NGC 6543.

For ph0wn registration, we see that many of you are struggling to put several items in your cart and consequently create x different registrations. It's simple. In pretix, you need to click on "Add tickets for a different date". Then select an other "event" : CTF, social event, workshop. #ph0wn

📅 March 13-14, 2026 - Sophia Antipolis, France 🤠 Prepare your best outfit for Ph0wn CTF's side event: the "Creative Contest". Come dressed up as a pirate, and get a chance to win a Hydrabus 😃 👉️ Details: ph0wn.org/contest/ #CTF #ph0wn2026 #pirate #flagship #hydrabus #hacker Re-posts appreciated

cryptax.bsky.social reposted

All hands on keyboard, pen to paper - Elbsides 2026 Call for Paper is open!!! Make good on your New Year resolution to contribute to the infosec community and present on June 5th in Hamburg. www.elbsides.eu/2026/cfp/ #elbsides2026 #CFPisopen #startwriting #infosec

FrangiPh0wn, the Ultimate Galette for Hackers and ph0wn CTF teaser, is up until Feb 9. Head to ctf.ph0wn.org, and find the trinkets! Are you up to it? Only 15 participants flagged something up to now. Go for it! #CTF #teaser #RF #OSINT #ph0wn #frangiph0wn

Ca va parler de Radare2, de Ghidra, de MCP et d'assembleur en tout genre. L'objectif est d'utiliser l'IA pour faciliter la rétro-ingénierie. L'IA ne fait pas tout (par exemple, elle ne fait pas les crêpes que je compte déguster sur place), mais elle aide ... si on sait l'utiliser. Venez !

#UYBHYS [Vendredi 7/11 10h] WORKSHOP de Axelle Apvrille (Fortinet) : Reverse engineering with r2ai unlockyourbrain.bzh/ateliers/ #UYBHYS25

Merci de pré-installer sur vos laptops: Docker, Python 3 et Java. Cet atelier est accessible à ceux qui ne connaissent ni Radare2 ni Ghidra. Mais il est conseillé d'avoir des bases en assembleur ou d'avoir déjà décompilé des binaires (qq soit le logiciel utilisé). C'est un peu technique qd meme...

On Thursday afternoon, I am thrilled to give my first r2ai & ghidraMCP workshop at BruCON. Pre-requisites: you are good to go if you already have reversed a binary (with whatever #disassembler, it doesn't matter) OR if you have basic skills and understanding in #assembly. #mcp #LLM #AI

Slides of my prez at Barb'hack: www.fortiguard.com/events/6189/... Understand what a recent sample of Linux/Trigona #ransomware does. Learn how to spot #AI errors (hallucinations, omissions etc), learn how to tweak context length, output token limits to get the best out of your model. #barbhack25

fortiguard.comPublications | FortiGuard Labs<p>This talk presents 2 different Linux malware:</p><ul><li><p>a shellcode, named Linux/Shellcode_ConnectBack.H!tr. The binary is small and compact, but traditional disassemblers like Ghidra fail to p...

I had (several) interesting questions yesterday on r2ai. One of them was that, obviously the tool needed to be used by an experienced reverse engineer. I'd like to comment a bit further. I feel normal that such a tool cannot be used by total beginners. All jobs require some adequate training. 1/n

Nobody would expect me to play the violin in a concert hall tomorrow, even with the help of AI. And, to be honest, that wouldn't even be good, it would devalue the profession. The same applies to anti-virus research. 2/n

Nevertheless, I've done more reverse engineering on Android malware than for Linux malware. I'm not "a strong expert", and r2ai lowered the bar + it quickens the analysis. I think that's the goal of r2ai: give malware analysts a nice tip when they need one + speed up their work. n=3

Barb'hack is over and it was a pleasure to attend: very nice folks, friendly organizers, excellent food, best rumps lol and a CTF with a videogame interface+ challenges on Minitel. I loved it! Kudos to the staff. #barbhack25