Mal Anal @MalAnalysis1

Hello @github has unbanned us. The Malware Source Code collection is back online. I have no idea why we were banned.

❗️ Samsung's Galaxy S26 was remotely hacked three times on Day One of Pwn2Own Ireland, while Google's Pixel 10 survived a $300,000 attempt. Researchers earned $388,500 for 32 zero-days and also broke LiteLLM, Sonos, Philips Hue, Oracle's Autonomous AI Database and OpenAI Codex. VinSOC leads with $97,500 as Day Two gets underway with KAIST targeting the Pixel 10 over USB.

keyboard_arrow_left Previous keyboard_arrow_right Next

I'm wondering what VPN he was using

International Cyber Digest @IntCyberDigest

3 weeks ago

‼️ BREAKING: A key member of ShinyHunters has been detained in Jordan and is now helping the FBI identify the rest of the group that claims to have stolen data on every bureau employee, sources tell Reuters. The sources name him as Saif al-Din Khader, alleged alias "Rey", and

keyboard_arrow_left Previous keyboard_arrow_right Next

47 146 1K 166K 351

Claude Code was told to clear a temp folder. In 103 seconds it decided to delete about 48,000 live files instead. It stopped, saying it "broke something".

‼️ Researchers at depthfirst used AI to remotely take over the camera and photo roll of a phone that was browsing TikTok, chaining together bugs in open-source code the app depends on. TikTok has confirmed it fixed the flaw. depthfirst sent us an exclusive video of the PoC:

Dear Scammers Located Outside the United States, If you want to social engineer someone, do not use the word "kindly". We've told you this like, a bajillion schmschmillion times, but seriously, when we read, "Do the needful, kindly open the application", it fucking STINKS of scam especially when you sign it something like, "Sincerely, Robert McNeal, Houston Texas" Dawg, there is no stinky Texan, burning alive in the summer heat, drunk driving in a lifted truck with a "Jesus Saves" tattoo, named Robert McNeal saying "Do the needful, kindly do ____" Just use ChatGPT bro, I don't know man, but it stinks and it's not fooling anyone Pic possibly related

I don't give a fuck if AI can do something better than me, I do it because I enjoy it. Why is it so hard for these suits and business types to understand the concept of fun and passion?

Abhishek @aacle_

2 months ago

Security Researchers, if AI can find every bug you know how to find in the next 2 years, what will you do?

50 1 166 131K 57

Ohhh, looks like AI can read and write faster than you. You're cooked, 8 year old child enrolled in Elementary school, AI is going to replace you Might as well give up on reading and writing, the machine is better. Go work in the schlinkus fields

Looks like Christmas came early this year boys. We got ourselves a Threat Actor distributing malware masquerading as a reverse engineering tool, trying to compromise security researchers. Thanks for the goop, ya doofus

ALERT: Did you get a notification like this today? Seek expert security help asap! Apple just sent out a fresh round of threat notifications about mercenary spyware. That means tech like Pegasus used by governments to spy on you. Here are steps to take right now 1/

Apple devices now give you alerts if you're cool and badass

@mdisec I like to use these API Endpoints from Shodan for subdomain && cert enum. ctl.shodan.io/api/v1/domain/{domain} ctl.shodan.io/api/v1/domain/{domain}/hostnames ctl.shodan.io/api/v1/cert/{sha256}

keyboard_arrow_left Previous keyboard_arrow_right Next

what is the best alternative of crt.sh ? I dont wanna signed up or anything. just paste domain.

*sniff* *sniff* I have no way to prove it, but this smells like ransomware

Downdetector @downdetector

2 months ago

User reports indicate problems with ADT since 8:37 PM EDT. How is it affecting you? #AdtDown downdetector.com/status/adt/

32 7 78 113K 11

> be me > get email > "smelly, is this malware?" > look inside > 23,000 line VBS file

I am filled with disappointment. Last time on Dragon Ball Z, I announced my boredom with malware development, hence I decided to pivot to malware defense. I began by taking apart YARA to understand how it works, and making my own little silly YARA scanner. Whatever. I then began reviewing the malware people discovered in the wild. I have reviewed hundreds of malwares, and many also non-malwares. Unfortunately, I am at the point where I am no longer finding original goop. It is the same malware campaigns, different person sending it, different compromised webhosts, or slightly tweaked SHA256 hashes. I now feel the existential dread my blue team colleagues feel. It is the same gunk everyday. The gunk is persistent. The gunk is infinite and vast. The gunk is like an ocean of gunk.

Someone is DDoSing vx-underground. This is terrible news. I was going to work on the website, but now all I can do is spend time with my family and enjoy a beautiful summer day Terrible, this is just plain terrible Welp, do your thing big dawg, hit me up when you're done

Smart TVs won't cast arbitrary web video, and screen mirroring is laggy and drops resolution. Castor casts the real stream instead, at full quality, from your terminal. Source: github.com/stupside/castor

Long rant people probably won't care to read, but it's an opinion. Skip to look at a picture of a cat. After skimming the comments I've seen people say some relatively negative comments about SOG. I can't attest to his character on his personal level or professional level because I have not spoken with him in any capacity beyond "Hello", "Thanks", "No problem", etc. However, regarding his "skill set" and level of expertise, I don't believe he is lying. It may be possible he is being exaggerating his education level, but I don't believe he is a complete moron which others have suggested in the comments. For those unfamiliar, in the Cyber Security and Information Technology field, it is extremely common for individuals to be labeled an 'engineer' despite not being an 'engineer' in the traditional sense. Individuals do not need to possess a degree, or have a powerful understanding of mathematics, like a civil engineer or mechanical engineer would. The engineering term in the software or software architectural sense is more akin to developing, maintaining, or designing a system in which a system of "systems" may exist, interact, or interopt with each other. It is still engineering, however it is an abstraction ... it does not "feel" like engineering has historically. Other engineers strongly dislike people in the Information Technology field being labeled engineers, but it is what it is, dawg. ¯\_(ツ)_/¯ Previously, he purchased a copy of our malware collection from us. It is approx. 36,000,000 malware payloads, as well as papers and source code, and upon receiving the drive he dug into it immediately. I watched his analysis video where he played with the malware payloads. He certainly isn't a "malware person", in that he didn't seem to understand certain attributes about the malware payloads he was "playing" with. However, he still understood the high-level overview on how some of them work. Basically, it was like watching a slightly-less noob explain to noobs. It was cool. No hate. I think he had fun and had fun showing others. Ultimately this is what we strive for. Computers and malware are fun! I do not believe him to be a skilled reverse engineer, .. or malware developer, ... or Threat Intelligence analyst, ... or anything that we (our collective membership) would focus on, but I do believe he possesses an education beyond the average person and I do believe he has a career in Information Technology. The extent of his career is debatable, it would be purely speculative, but watching some of his videos whereas he describes the method in which malware and Threat Actors use to facilitate the exfiltration of sensitive data, or deploy payloads, is accurate and illustrates he is present in the field. Being painfully blunt: maybe he is exaggerating, I don't know, but I've met people in my field far less educated than him with far more "clout". Honestly, he could be a entry-level, or maybe mid-level, systems administrator (working under a Senior) primarily designated to password resets or installing keyboards for people. He could an entry-level, or mid-level Intelligence Analyst which (no disrespect to our Threat Intelligence homies) act as paper pushers, just collecting and moving the analysis of other more skilled Intelligence Analysts. I think it's difficult for YouTubers because they're putting themselves into such a visible spotlight. SOG is showing his face to potentially millions of people and, if he makes a mistake, or mistakes, it can be knit-picked, misconstrued, or abused to attack him. I don't believe SOG is a malicious person. I don't believe SOG is a pathological liar or con artist. I think he is a big goofy dork who does things on the computer that will inevitably attract negative attention because he is a big goofy dork and people don't like that sometimes. Maybe I'm missing something, I'm not a person who tunes into YouTube conflicts, so it's possible I'm missing a big chunk of information. But from my perspective it seems like an unnecessary jab from people at SOG because they don't like hes a big goofy dork. Cat picture as promised