Myrtus

Over the last 3 years ive supposedly reverse engineered almost 200 different malware families. And each of those have at least one sample, where some have 100+ days of me reversing new versions and payloads… a lot more productive than I thought :)

How all the Bluesky peeps doin 👀

I want my 2 hours back from watching the new conjuring

🦀 8 Practical Tips to get started with #rustlang dev.to/iolivia/rust...

Making `DecodeRuneInString` is inlinable #golang github.com/golang/go/is...

Reversing these latest rhadamanthys samples is genuinely the worst experience ive ever had with a sample. Hate this fucking malware 🫠🫠🫠

'Meredith,' some guys ask, 'why won't you shove AI into Signal?' Because we love privacy, and we love you, and this shit is predictable and unacceptable. Use Signal ❤️

If you’ve been laid off from a cyber intel position, please reach out if you’d like to come to @sleuthcon.bsky.social.

seeing all the botconf posts this week, gives me major FOMO. Glad it went so well! Really hoping talks are uploaded at some point :)

XAMPPRocky / tokei: Count your code, quickly. ★12485 https://github.com/XAMPPRocky/tokei

/1 I don’t know how many folks will show up Sunday, but we’re gonna have a blast. We’ll kick things off with a short presentation covering the basics of intrusion analysis and the investigative mindset. Then it’s straight into DFIR Labs where you’ll walk through a real intrusion step by step.

Join me on an adventure about a Russian DRM, deception and anti-piracy measures disguised as bugs! It's a technical writeup about how I reverse engineered and preserved a rare variant of Lego's gaming history - Lego Rock Raiders (Russian Edition) layle.me/posts/lego-r...

This article that starts getting traction claims that the official RVTools website was distributing a malicious installer leading to Bumblebee. I see zero evidence of this actually being the case. 1/2

We are very excited to announce that Volatility 3 has reached parity with Volatility 2! With this achievement, Volatility 2 is now deprecated. See the full details in our blog post: volatilityfoundation.org/announcing-t...

//file open

www.zscaler.com/br/blogs/sec...

Life Update ▶️I'm back on the job market ◀️ Looking for: - backend engineering role - nyc hybrid preferred, but willing to do full in office or strong remote culture

Why would a disassembler struggle to handle this function (this is the entire thing)

Zydis can dump detailed info about each byte in an assembly instruction :) fantastic for patching

My only mode of operation

We report stories that keep you and your community informed, every day, without fear or favor. Millions depend on the NPR Network. Now, we’re counting on you. Donate here: n.pr/3EYClNR

Was one of many let go by the Dot. Got to break a ton of great stories there: the exposure of the US No Fly list, gaining early access to Truth Social & registering an account as Trump, & countless others on hacks, leaks, & misinfo. Looking for a new gig, so don't hesitate to reach out.

France just called out GRU Unit 20728 (166th Research Information Centre), posted up in Rostov-on-Don, for cyberattacks. Kremlin got new ops on the board. www.diplomatie.gouv.fr/en/country-f... @wylienewmark.bsky.social

make sure to set your bitness correctly when analyzing shellcode in IDA friends

A lot of my infra workflows live in Slack threads, docs, or buried in shell history. That sucked. I've been building Atuin Desktop. Local-first, CRDT-powered, executable runbooks - with integrated terminals, sql queries + monitoring blog.atuin.sh/atuin-deskto... Lmk if you have any questions <3

HELL YEAH if let chains are stabilized!!! github.com/rust-lang/ru...

Psssst if your CTI vendor assessed "Lazarus group" as a priority threat actor for you, it's time to get a new CTI vendor.

Hey artists! Would you like to have your art featured in the print edition of Phrack 72? You can email us at arts@phrack.org

My first blog with Proofpoint is live! And we love a good crossover. State-sponsored actors try their hand at ClickFix - the hottest thing in cybercrime. Meet the North Koreans, Iranians, and Russians who are upping their social engineering game www.proofpoint.com/us/blog/thre...

I want to wake up tomorrow and not wonder "what fresh hell threatening to end democracy will we face today?"

Got humbled by malware today, thought a function was strlen, turns out i was a function that returns the lowest ascii value character in a string 😅

My deep dive into an obscure infostealer with a focus on its unique infection chain and levels of obfuscation. My first post as part of Sublime Security's Threat Research team. sublime.security/blog/trox-st...

New timer ;) www.operation-endgame.com

Kyle's talk at Insomni'Hack is live! youtu.be/I0PoE0IdtmE?... Check it out if you're interested in a slice of modern program analysis and try the latest version of Tanto as well, in the plugin manager or at github.com/Vector35/tanto

🦀 Hello World! The Rust project now has an official presence on Bluesky! ✨ We'll be posting the same on our Mastodon and Bluesky accounts, so you won't miss anything on either platform.

Hey all 👋 This year I'll try to stick to Thread Thursdays, which is every Thursday I'll post a thread about #rustlang fundamentals 🦀 My goal is to help you learn 1% more Rust each Thursday, so follow me if you'd like to read them 🦋 Here are some of the best threads so far 🧵👇

Finance Guy Doing Cocaine In Sad Way This Time

MY FAV RESEARCHER HAS ARRIVED @themalwareman.bsky.social

this font is literally cursed what are you doing @jacoblatonis.me

Coffeeloade feels like a flareon problem

RainSec is happening Tuesday March 25th, 6:30-10:00 PM @ the Lucky Lab Brew Pub (915 SE Hawthorne). Details are available here: smokesignal.events/did:plc:nzjd... www.meetup.com/rainsec/even... groups.google.com/g/rainsec/c/...

We had a Operation LadyBird, when we getting a Operation Badger