_D4Z3N_ @_D4z3n_

Malware Researcher 🙈 reversingminds-blog.logdown.com OASIS (Ontologically Anthropoc Joined May 2016

Tweets

1K
Followers

819
Following

585
Likes

1K

Tim Blazytko @mr_phrazer

18 hours ago

We at @emproofsecurity open-sourced a free firmware reverse engineering workshop for self-study. Topics: ELF analysis, cracking, malware triage, embedded-Linux, bare-metal, crypto-key extraction, anti-analysis. Docker setup and solutions included. github.com/emproof-com/wo…

0 44 175 10K 119

Threatray @threatray

3 weeks ago

🚀 We are proud to announce the availability of Threatray Release v2.1, bringing an exciting set of additions and improvements to the platform. 🤝 We’ve partnered with @nextronsystems, a pioneer in YARA and Sigma rule detection, to bring their industry-leading detection…

0 3 3 78 0

Download Image

Panos Gkatziroulis 🦄 @netbiosX

3 weeks ago

Relocatable - Write C-code that will be directly compiled into raw shellcode, which can be loaded into any process without the need for tools such as Donut or sRDI github.com/tijme/relocata…

0 43 155 10K 95

Pavel Yosifovich @zodiacon

4 weeks ago

Ever wondered how Process Explorer builds the process tree? I wrote a guide on how to code your own in C++. We cover PID reuse, parent vs. creator, recursion, and more. Read it here: trainsec.net/library/window…

3 89 364 18K 194

Threatray @threatray

a month ago

@tccontre18 Nice in-depth research! We took a look at the same loader a while back and shared a YARA rule to track it: threatray.com/blog/a-net-mul…

0 1 4 36 0

hasherezade @hasherezade

2 months ago

I updated the #Rhadamanthys custom format converter (for XS modules), to support the latest version (0.9.x): github.com/hasherezade/hi…

2 45 164 11K 30

ESET Research @ESETresearch

3 months ago

#ESETresearch has mapped the labyrinth of #AsyncRAT forks, identifying the most prevalent versions of this open-source malware. While some variants are mere curiosities, others pose a more tenacious threat. welivesecurity.com/en/eset-resear… 1/7

2 33 82 9K 22

ESET Research @ESETresearch

3 months ago

In May 2025, #ESET participated in operations that largely disrupted the infrastructure of two notorious infostealers: #LummaStealer and #Danabot. 1/6

2 14 39 8K 6

Threatray @threatray

3 months ago

⚡ Exciting Update ⚡ We're thrilled to announce our new partnership with @nextronsystems to take YARA rule development and malware classification to a whole new level. 🚀 This collaboration brings Nextron's high-quality YARA rules from THOR Thunderstorm directly into…

1 6 21 2K 1

Marcello @byt3bl33d3r

4 months ago

My hot take on AI 🌶️. It's less about efficincy and more about scale. byt3bl33d3r.substack.com/p/ai-doesnt-ma…

2 15 45 7K 24

Threatray @threatray

4 months ago

Threatray's @_n1ghtw0lf and @_jwagner in collaboration with @proofpoint Threat Research Team have undertaken a deep dive into the India-aligned #Bitter (TA397) cyber espionage group. Read part one over at Proofpoint, where they cover campaigns, infection chains, hand-on-keyboard…

0 15 36 4K 7

Download Image

Duncan Ogilvie 🍍 @mrexodia

4 months ago

Also made a quick video on how to install TitanHide in Windows Sandbox using the SandboxBootkit project. It takes about 3 minutes end-to-end.

Duncan Ogilvie 🍍 @mrexodia

4 months ago

Also made a quick video on how to install TitanHide in Windows Sandbox using the SandboxBootkit project. It takes about 3 minutes end-to-end. https://t.co/Pq2wsHYxEp

5 62 292 31K 86

Download Image

2 45 192 16K 83

Download Video

Roy Carrilho @RuiCarrilho5

5 months ago

Here's a cool new way to learn Assembly - write a GUI from scratch in it! This cool little article shows you how to do that, and teaches you all about some other GUI fundamentals. A very good exercise, have fun!

11 145 1K 103K 1K

Download Image

Threatray @threatray

5 months ago

We analyzed a .NET multi-stage malware delivery system active since early 2022 that deploys commodity stealers and RATs through a three-stage loading process. Through our code reuse technology, we discovered more than 20,000 samples spanning three years, delivering 10 distinct…

2 14 46 4K 12

Threatray @threatray

5 months ago

🚀 We are proud to announce the availability of Threatray Release v2.0, bringing a huge set of additions and improvements to the platform. ✅ The introduction of Goodware Identification enhances analysis by identifying benign code from runtime, third-party libraries and…

0 2 7 807 0

Download Image

Threatray @threatray

5 months ago

⚡ Exciting Update ⚡ @TeamT5_Official and Threatray are teaming up in a joint research collaboration to level up threat actor tracking and malware analysis. 🔍 TeamT5’s threat intelligence analysis experts + Threatray’s cutting-edge malware detection and binary intelligence…

1 4 9 478 1

Download Image

hasherezade @hasherezade

5 months ago

Cool beginner-level introduction to the PE format: youtube.com/watch?v=f1J07O… - featuring #PEbear 🐻: youtube.com/watch?v=f1J07O…

0 86 412 22K 261

Download Image

Check Point Research @_CPResearch_

6 months ago

Thread Execution Hijacking is one of the well-known methods that can be used to run implanted code. In this blog we introduce a new injection method, that is based on this classic technique, but much stealthier - Waiting Thread Hijacking. Read More : research.checkpoint.com/2025/waiting-t…

2 109 262 79K 131

Bernardo Quintero @bquintero

6 months ago

En el reciente Google Cloud Next celebrado en Las Vegas, se presentó como novedad un agente IA de reversing y análisis de malware. Ha sido un desarrollo 100% malaguita, en colaboración con la cátedra de ciberseguridad que mantenemos con la Universidad de Málaga. ¡Más por venir!