Picture

YungBinary @YungBinary

Malware Research @eSentire Joined October 2016
  • Tweets
    157
  • Followers
    712
  • Following
    167
  • Likes
    1K
YungBinary retweeted
_whoisnt Profile Picture

Jerri P @_whoisnt

2 days ago

Check out the latest @RecordedFuture report from @JulianVoeg , Marius, and me on TAG-150, where we break down CastleLoader and CastleRAT (Python + C variants). Recent TTP: C2 deaddrops on Steam Community pages, marking a new infrastructure tactic 🔗recordedfuture.com/research/from-…

YungBinary Profile Picture

YungBinary @YungBinary

a week ago

New blog on #Sinobi ransomware! They used an MSP's compromised SonicWall SSL VPN creds for initial access. Decryption is impossible w/o the attacker's private key, unless of course you hooked CryptGenRandom😜 esentire.com/blog/threat-ac…

YungBinary Profile Picture

YungBinary @YungBinary

2 weeks ago

Seeing a (potential new?) python-based backdoor we're tracking as #PyNightshade for the second time delivered via #ClickFix that uses sockets for C2. Supports several commands from C2, including: remote shell, uploading files from the victim host, and self-deletion. It uses RC4…

YungBinary Profile Picture

YungBinary @YungBinary

3 weeks ago

Dropping a new malware config parser for #Amadey! Update your CAPEv2 parsers: > sudo -u cape bash -c 'cd /opt/CAPEv2 && poetry add CAPE-parsers@latest && systemctl restart cape cape-web cape-processor' Check it out here: github.com/CAPESandbox/CA…

YungBinary Profile Picture

YungBinary @YungBinary

4 weeks ago

Fun tip, if you find you're unable to retrieve a "fileless" stage in a malware chain, e.g. invoked .NET DLL stage, you can download memory dumps from VirusTotal, search through them for known strings or bytes that should be in the payload, open in hex editor, and find the…

YungBinary Profile Picture

YungBinary @YungBinary

a month ago

Literally me after stepping outside for 5 minutes in this Vegas heat 🥵

YungBinary Profile Picture

YungBinary @YungBinary

a month ago

Dropping a new tool to extract malware configurations from #MonsterV2 samples, enjoy! 🙂 github.com/YungBinary/Mon…

YungBinary Profile Picture

YungBinary @YungBinary

a month ago

New blog is out on #InterlockGroup and has a wealth of TTPs for detection engineers, tools for security researchers, deobfuscated scripts, and a C2 simulation script for #InterlockRAT ! Screenshots below show the deobfuscated PHP-based backdoor and annotated communications of…

Trends for United States

Iowa
30,1 B posts
Baylor
8.893 posts
#UFCParis
28,5 B posts
Karen
237 B posts
Duke
25,1 B posts
San Jose State
4.297 posts
Syracuse
5.539 posts
UConn
4.100 posts
Penn State
7.272 posts
CYCLONE STATE
1.071 posts
Gronowski
1.633 posts
Sawyer Robertson
Ahmad Hardy
#Illini
1.644 posts
Drew Allar
1.043 posts
#HookEm
2.726 posts
Cheryl Richardson
15,8 B posts
Kirk Ferentz
Gunner
4.109 posts
East Texas
2.873 posts

You might like

Cyber Threat Hunting, Malware Research & Analysis. My attempt at contributing to the Cyber Community. (Comments are my own) #Malware #OSINT #IOCs #ThreatHunting
Tino aka Paladin316
@Paladin3161
2K Followers
Senior Security Researcher @kaspersky GReAT, tweets and opinions are my own.
SKII
@SethKingHi
1K Followers
Witcher of InfoSec. InfoSec=paid to be terrified for people. /With all of my anger I scream and shout America, I love you but you're freaking me out/
Fate112
@tosscoinwitcher
1K Followers
Infostealer hunter by night, threat actors’ headache 24/7. I track C2s, ruin botnets, and make cybercriminals rethink their life choices
NexusFuzzy 💩
@NexusFuzzy
2K Followers
work time: defender fun time: malware hoarder/puzzle solver/capacity tester member of: @Cryptolaemus1 fan of: @hatching_io @sublime_sec
dao ming si
@dms1899
1K Followers
Security Researcher/Red/Purple Teaming/Adversary Simulation/Threat Hunter. Contributors of Atomic Red Team, PS Empire, ATT&CK Framework, LOLBas, and more.
Rahmat Nurfauzi
@infosecn1nja
3K Followers
MalHunters
@MalHunters
525 Followers
Sr. Security Analyst - @Webroot/ Crypto Analyst 2013+/ GPU+ASIC Miner 2016+/ Don't trust, verify/ Opinions are my own/ Get in loser, we're going to the moon
Tyler Moffitt
@Spaceship_BTC
395 Followers
Christian, husband, father, threat intel, Reverse the malware, click the things
Jammy
@jcarndt
861 Followers