Jonathan Peters @cod3nym
Threat Researcher | Detection Engineer @nextronsystems @nextronresearch #Yara enthusiast | C# Developer github.com/cod3nym Germany Joined August 2023-
Tweets350
-
Followers771
-
Following101
-
Likes4K
Our first ticket release is this Monday (1st Sept) at 1337hrs: bit.ly/BSidesLDN2025T…
We’ve partnered with Arctic Wolf 🐺 @AWNetworks - They extend their detection coverage with Nextron’s curated Sigma rule feed: 700+ high-quality rules - Most of our rules are generic, technique-focused, and designed to detect unknown threats - not just IOCs - We get structured…
There are plenty of malware‑analysis tools - but pe‑sieve (@hasherezade) + YARA Forge (@cyb3rops) is one of the sharpest offline combos to identify malware families. Dump → PE‑sieve Scan → YARA Forge ID → Malware family Step‑by‑step walkthrough in the video below 👇
Did anyone already notice this webshell dropped with the name spinstallp.aspx It's a different minified ASPX webshell #SharePoint virustotal.com/gui/file/2f270…
A trojanized Autoruns DLL loading shellcode from its .data section. Currently, only @thor_scanner detects it on VirusTotal. virustotal.com/gui/file/1c962… #shellcode #peb @nextronresearch
Introducing Havoc Professional: A Lethal Presence We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth! infinitycurve.org/blog/introduct…
'Villa - Home Decor - Architectural Design Drawing - Prinsiri Developement - 2605h01.bat' @abuse_ch bazaar.abuse.ch/sample/43a8084… @cod3nym @nextronresearch
a good & quick read: deceptiq.com/blog/rethinkin…
New blog post from @MalGamy12 and me: we analyze Katz Stealer. Focusing on bypassing App-Bound Chrome Encryption and compromising Electron apps; and how those behaviors can be leveraged for detection. We highlight key detection vectors uncovered during our analysis and provide…
New blog post from @MalGamy12 and me: we analyze Katz Stealer. Focusing on bypassing App-Bound Chrome Encryption and compromising Electron apps; and how those behaviors can be leveraged for detection. We highlight key detection vectors uncovered during our analysis and provide…
Related "x-ray-health-records-qdf.bat": 69ae32f8fa7bdda3f215db7f0bf57305e82ed38a28974884b75b7015dbfa43b4 AV vendors on VT not detected this too, but at least there is a @thor_scanner comment... 🤷♂️
We’re excited to announce the launch of malops.io , a platform built by analysts, for analysts and it’s completely free. You can join and enjoin with our frist challenge about RokRat Loader.
🚀 THOR Cloud & THOR Cloud Lite now support YARA Forge Upgrade from the 4,300-rule built-in rules to 11,310+ curated rules from 40+ sources 🧠 Broader detection ⚙️ Simple activation ✅ Free for all users 📖 nextron-systems.com/2025/04/30/yar… 📊 github.com/YARAHQ/yara-fo…
Stumbled over this new AMSI bypass. It works by manipulating the COM RPC communication used by AMSI to talk to AV engines. By hooking NdrClientCall3 which handles the RPC calls we can intercept AMSI scan requests before they reach the AV engine. I wrote a simplified version that…
Thanks to tremendous dev work by Fukusuke Takahashi and DustInDark, we have our first alpha version release of Suzaku - "Hayabusa for cloud logs". Still lots to implement but the basic sigma detection is working for AWS CloudTrail logs so try it out and give us feedback on how we…
After #flareon11 challenge 7, I got inspired to build tooling for #dotnet Native AOT reverse engineering. As such, I built a #Ghidra Analyzer that can automatically recover most .NET types, methods and frozen objects (e.g., strings). Blog:👉blog.washi.dev/posts/recoveri…
I wrote a simple website to check GitHub repositories for potentially infected MSBuild project files. cod3nym.github.io/github-backdoo… Checkout the details below.
I wrote a simple website to check GitHub repositories for potentially infected MSBuild project files. cod3nym.github.io/github-backdoo… Checkout the details below.
In the past few days we have observed an increasing amount of backdoored malware source code releases on GitHub. The repositories were spread by multiple threat intelligence accounts on X. The malware uses MSBuild project files with build events to execute malicious code. The…
A new threat, closely resembling #SUDDENICON’s supply chain attack has surfaced in our threat intelligence feeds. This campaign delivers a malicious MSI installer that deploys a Python executable with encrypted payload append at the end of the executable. The payload is…
Another "intelligence" account spreading backdoored and infected source code repositories... Setup is basically the same as this one I previously wrote about x.com/cod3nym/status…
Another "intelligence" account spreading backdoored and infected source code repositories... Setup is basically the same as this one I previously wrote about x.com/cod3nym/status…
Supaboii @D4nkSkiee
1 Followers 51 Following
Keaiehou @keaiehou66444
5 Followers 94 Following
Puifor @Puifor216363
8 Followers 603 Following
Suriya Prakash @suriya73
181 Followers 1K Following Security Researcher | Crypto Enthusiast $ADA $COTI | #OSCE #CRTO #malware #Infosec #RedTeamer 📩 [email protected]
il pollastre @ilpollastre
256 Followers 785 Following Ciutatdan un poco cabrón Poc honorable en el Basque Culinary Center de Donosti se come bien,casi tanto como en el de Malaga. Crypto-intern. Blockchain loser.
flux @0xfluxsec
1K Followers 945 Following Cyber professional (red team), security and systems programming | Rust | https://t.co/QIih2B7vya | https://t.co/VC3xsm0Wvq
helloworld/ @hellodebug8
254 Followers 6K Following
Kyle Cucci @d4rksystem
6K Followers 560 Following Threat Research @proofpoint | Author of "Evasive Malware" @nostarch | Talks about cybercrime, threat intel, and malware stuff.
Moeez Arshad @moeez_a_rshad
14 Followers 142 Following
Aldo Fathoni @realfathonix
88 Followers 3K Following Software developer, retrocomputing and Unix enthusiast, computer hobbyist in general.
Norbert @NB1r0
57 Followers 3K Following
Veki @vekivac
54 Followers 832 Following
VampireXRay @VampireXray
25 Followers 687 Following If You Vulnerable So I'm not Pentester will patch , I'm malware guy who will exploit .. INTJ 🇵🇸
Winx @Winx16529811
3 Followers 100 Following
Tiegew @Tiegew298773
15 Followers 985 Following
Bernardo Buckridge @BernardoBu34476
21 Followers 2K Following
arip petits @AripPetits
6 Followers 1K Following
Mazapan Ricaleta @mazapanricaleta
1 Followers 55 Following
phantinuss @phantinuss
147 Followers 61 Following
Brarnne @Brarnne491
35 Followers 2K Following
Gary Rafferty @garyhak2009
177 Followers 5K Following
Steven @keritzy
333 Followers 2K Following Independent Programmer / Security and Threat Researcher uid=0(root) gid=0(root) groups=0(root) reporting, exposing and crafting!
unknown @3pac2000
1 Followers 136 Following
W3ndige @w3ndige
4 Followers 125 Following Senior Malware Analyst @hatching_io | Reverse Engineering & Binary Research
R4P_T0R @r4p_t0r
5 Followers 364 Following
Rad @rad9800
9K Followers 450 Following irrational. founder. building solutions to secure organizations. @deceptiq_
Nikolo Exe @nikolo_exe
21 Followers 243 Following
jdub181 @jdub181
10 Followers 3K Following
raw-data @_raw_data_
223 Followers 379 Following
Burke Tanner @TheNameIsBurke
459 Followers 5K Following #cybersecurity #infosec #edu #DIY | community: @L0nelyH4ckers
Helen Perry @HelenPerry36342
0 Followers 11 Following
___________ @Crypt0n1t3
29 Followers 713 Following
Kyle Cucci @d4rksystem
6K Followers 560 Following Threat Research @proofpoint | Author of "Evasive Malware" @nostarch | Talks about cybercrime, threat intel, and malware stuff.
Kylm @0xKylm
355 Followers 1K Following reverse fuzzing and maldev / internals enjoyer at @FuzzingLabs 20yo https://t.co/koi6Phdmmf
ShadowOpCode @ShadowOpCode
599 Followers 115 Following Malware analyst & reverse engineer 🧠 Threat intel on stealers, RATs, live campaigns 🕵️ Technical analysis. No buzzwords. 📍DM open for research collabs
MatheuZ @MatheuzSecurity
1K Followers 361 Following Red Team Operator Cyber Threat Intelligence Malware Researcher
Thomas Patzke @blubbfiction
5K Followers 444 Following Incident Response, Threat Hunting. Opensource security tool developer (https://t.co/2twMtVpZtL). Moved to @[email protected]
Zero Day Engineering @zerodaytraining
8K Followers 1 Following State-of-the-Art Exploit R&D • @alisaesage
Elma @elma_ios
556 Followers 350 Following just an average student in singapore | @NUSGreyhats @r3kapig
phantinuss @phantinuss
147 Followers 61 Following
Marius Benthin @marius_benthin
254 Followers 380 Following Senior Detection Engineer @NextronResearch @NextronSystems
bakki @avx128
831 Followers 104 Following 19yo \\\ b2b saas cyberweapon engineer \\\ empirically non-existent \\\ https://t.co/2unUEv14ib
MalwareHunterTeam @malwrhunterteam
244K Followers 38 Following Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
John Hammond @_JohnHammond
299K Followers 3K Following Cybersecurity Researcher @HuntressLabs || Just Hacking Training @JustHackingHQ w/ @ethicalhacker || https://t.co/UtsNJiyQtS || https://t.co/narO3sz7y6
tob mic @_humpalum
258 Followers 148 Following
Mysk 🇨🇦🇩🇪 @mysk_co
17K Followers 503 Following We're two #iOS developers and occasional #security researchers on two continents. #CyberSecurity 🎬 https://t.co/JGKIHbafF2 📝https://t.co/69k7WAphKl 🇨🇦🇩🇪
Szabolcs Schmidt @smica83
2K Followers 417 Following Threat Intel Specialist and Incident Responder. Private account. All opinions expressed here are mine only. https://t.co/7dQQO1JwUd
Aziz Farghly ☠ ∞ @FarghlyMal
894 Followers 797 Following Threat Researcher @nextronsystems (The thoughts and content I share are personal and not representative of my employer.)
d1rkmtr @d1rkmtr
8K Followers 469 Following
mgeeky | Mariusz Bana... @mariuszbit
14K Followers 815 Following 🔴 Operator, Initial Access afficionado, Researcher, ex-AV engine developer, ex-Malware analyst 🦋 @mgeeky.bsky.social 🫖 green tea lover
x86matthew @x86matthew
21K Followers 189 Following C / asm / system emulation / reverse engineering. @the_secret_club
Jammy @jcarndt
862 Followers 214 Following Christian, husband, father, threat intel, Reverse the malware, click the things
Dinohacks @nhegde610
549 Followers 2K Following Researcher. Malware Analyst. Part time threat hunter. Part time blogger
Josh Reynolds (jmag) @JershMagersh
2K Followers 428 Following Malware analysis and reverse engineering. Sometimes I write code to do these things. Founder @InvokeReversing. Tweets are my own.
𝙁 𝙀 𝙇 𝙄 �... @felixm_pw
1K Followers 485 Following Senior Researcher @Sophos | https://t.co/rAj5k8LMif
Lena @LambdaMamba
4K Followers 414 Following CEO of World Cyber Health | Founder of @MalwareVillage | Creator of https://t.co/AKyp6xNeDy | Keynote Speaker | Malware Researcher | Artist | Banned from JSAC 🐍
Rad @rad9800
9K Followers 450 Following irrational. founder. building solutions to secure organizations. @deceptiq_
Nextron Research ⚡�... @nextronresearch
2K Followers 10 Following Nextron Systems Threat Research Team research (att) https://t.co/QTt2X62dXP
Cas van Cooten @chvancooten
10K Followers 674 Following Benevolently malicious offensive security enthusiast || OffSec Developer & Malware Linguist || NimPlant & NimPackt author || @ABNAMRO Red Team
CODE WHITE GmbH @codewhitesec
7K Followers 41 Following Red Teaming. Security Research. Continuous Penetration Testing. Threat Intelligence.
twosevenzero @twosevenzero
314 Followers 801 Following
Check Point Research @_CPResearch_
24K Followers 119 Following Fighting cyber threats one research at a time. News from Check Point’s (@checkpointSW) Research team.
Lsec @lsecqt
4K Followers 162 Following Doing ethical hacking / red teaming / penetration testing and offensive coding videos. I am OSCP / OSEP / Vulnerability Researcher / Youtuber
ElektroKill @elektrokilldev
340 Followers 18 Following 19-year-old self-taught developer (C#/Java) and reverse engineer. Developer of dnSpyEx.
X-C3LL @TheXC3LL
5K Followers 632 Following Just a biologist that loves to break cyber-stuff. Ka0labs / @AdeptsOf0xcc / ID-10-Ts member. 🦉
eversinc33 🤍🔪�... @eversinc33
6K Followers 1K Following computers be computin | https://t.co/Eiur8iOJQ4
TrustedSec @TrustedSec
77K Followers 765 Following End-to-end Cybersecurity consulting team leading the industry, supporting organizations, and giving back. #Hacktheplanet Blogs, news, webinars, and tools!
theo2612 @theo2612
409 Followers 1K Following https://t.co/PXgYbRE4EV ‘USB our guest’ for your cyber security tips and hacks avail on all podcast platforms
IDontCode @_xeroxz
4K Followers 562 Following Compilers, Math, Windows, Obfuscation, x86-64, Hardware Hacking, and everything in-between Cofounder @BackEngineerLab building https://t.co/tlnjvFj2Lg
Synacktiv @Synacktiv
20K Followers 271 Following Offensive security company. Dojo of many ninjas. Red teaming, reverse engineering, vuln research, dev of security tools and incident response.Trends for United States
You might like
