He5ung @gmrdkd
S2W Threat Analysis Team, Malware Analyst & Threat Intelligence Researcher, Cybercrime & Ransomware Group Tracking Joined November 2021-
Tweets64
-
Followers26
-
Following167
-
Likes37
🤓 With TA Alias, you can visualize clusters of threat actors and filter the ones you want to get more details. You'll get: - Threat Actors details - Aliases - Related reports from ORKL ➡️jupyter.securitybreak.io/graph_TA/index…
Added a new tool to: powershellforhackers.com/tools/revshell/ ⚠️Please Use Responsibly⚠️ You can use this to instantly generate an obfuscated reverse shell in powershell that i have personally used to beat EVERY single EDR out there right now. I've added some pretty cool stuff to my website…
Malwoverview version 6.2 has been released: github.com/alexandreborge… Read the project page to learn how to adapt the configuration file to the changes. Note: Updating Malwoverview using pip is not enough. #threathunting #dfir #malware #incidentresponse
obfus.h is the very powerfull compile-time obfuscator for C (win32/64). Supports virtualization, anti-debugging, control flow obfuscation and other code mutation techniques to prevent disassembly or decompilation. #CodeSecurity #Obfuscation #infosec github.com/DosX-dev/obfus…
S2W has released a new report on the AiLock #ransomware. As of April 10, two victim organizations have been identified, with more likely to appear on its leak site. 👉 Read the full report: s2w.inc/en/resource/de…
🤓 I have built an MCP for YARA rule creation and it works pretty great! With DocYara MCP, you can: – Generate YARA rules – Validate and optimize them – Deploy your rule directly to VirusTotal Livehunt I did a full walkthrough on YouTube in the second tweet 👇
We have open-sourced a library for getting Swift information. It may be the most powerful swift dump you can find so far, as it uses a custom Demangler to parse symbolic references and restore the original logic of the Swift Runtime as much as possible. github.com/MxIris-Reverse…
VIBE MALWARE TRIAGE - Claude analysing a binary with a little triage MCP server I wrote today. Integrates detect it easy, FLOSS, yara-forge and others to analyze a PE statically and outputs a markdown report.
My new cybersecurity project ✅ HONEYPOT DEPLOYMENT ON AWS Before I get into how I did the project, here’s a quick explanation of what a honeypot is and why it’s useful. A honeypot is like a fake system that we set up to look like a real target for hackers. It tricks them into…
The initial version of HopperMCP has been released. github.com/MxIris-Reverse…
Awesome breakdown by @ vinopaljiri on invoking functions directly from assembly! Techniques like IDA Appcall, Dumpulator, and Unicorn Engine take reverse engineering to the next level. A must-read!
Had some time to kill before my next gig so I developed this Python tool to fully deobfuscate binaries that are obfuscated with ollvm's control flow flattening. github.com/cdong1012/ollv…
📢Want to make cool animations like us? Check out our new free 🎞️Attack Animator tool: aceresponder.com/attackanimator #DFIR #ThreatHunting #Pentesting #redteam #CyberSecurity #ACEResponder
Claude 3.7 + IDA MCP automatically reverse engineers Windows driver ctf I wrote without symbols(p1, p2). Proceeds to create structures and recreates source code(p3) with extreme accuracy compared to original source(p4). ~3mins fully automated
A small demo/tutorial on unpacking executables with #PEsieve and #TinyTracer: hshrzd.wordpress.com/2025/03/22/unp… - automatic OEP finding, reconstructing IAT, avoiding antidebugs and fixing imports broken by shims
Releasing our new IDA Pro plugin for analyzing Solana's eBPF programs developed by @dewardgnome. Check out the blog post: blog.decurity.io/reversing-sola…
#Malware_analysis 1. ClearFake - malicious JavaScript framework blog.sekoia.io/clearfakes-new… 2. ANEL/UPPERCUT backdoor welivesecurity.com/en/eset-resear… 3. Leveraging cascading style sheets for evasion and tracking blog.talosintelligence.com/css-abuse-for-…
freki: Malware analysis platform meterpreter.org/freki-malware-…
Have you checked out the new hunting tool yet? We may have mentioned it once or twice already! 😂 And, here it is again! 🔎 Just enter an IPv4, domain, URL, or file hash, and instantly see if it’s been identified on URLhaus, MalwareBazaar, ThreatFox, or YARAify - with just one…
Check out my Google blog on the garble obfuscator. The article dives deep into how garble obfuscates strings in Go binaries. I'm also introducing an open-source tool to dump strings and deobfuscate binaries protected by this obfuscating compiler! cloud.google.com/blog/topics/th…
Adrian Luca (infosec.... @adrian__luca
766 Followers 2K Following Security Test & Threat intelligence Engineer @virusbtn
hypen @hypen1117
429 Followers 263 Following Security Researcher at Kaspersky, GReAT | Formerly KrCERT/CC, S2W Inc.
Patience Parker @PParker55377
0 Followers 170 Following Recruiting webshell engineers to penetrate websites, with a monthly salary of up to $100,000. If interested, please contact https://t.co/uNXcxVNeMo
Yannick Boog @YannickBoog
65 Followers 5K Following
Andy @Andy41685481
5 Followers 617 Following
Marv @_Marv0
0 Followers 61 Following
Edna @rivers_edna77
195 Followers 3K Following
recovo @defmalcode
7 Followers 550 Following
iShowCybersecurity (G... @ishowcybersec
2K Followers 1K Following Cybersecurity Enthusiast | Ethical Hacker | Bug Hunter | Entrepreneur | IG @iShowCybersecurity (49k) | May the Encryption be with you
Yong-hyun Kim @copy_and_paster
48 Followers 141 Following Professional Engineer : Information Management(정보관리기술사), Computer System Application(컴퓨터시스템응용기술사) | Tweets are my own.
Seungwon @winterbite
111 Followers 382 Following Associate Professor at KAIST; research interests - Security, System, AI, and Cloud
gimjiho @gimchesh
88 Followers 247 Following Threat Intelligence Researcher at S2W Talon | Malware Analysis | APT Research
HuiSeong Yang @Y0utHS8
32 Followers 255 Following Threat Intelligence, Tracking Ransomware group, S2W Junior Researcher
𝓙𝓪𝓬𝓴2 @2RunJack2
1K Followers 3K Following #ThreatIntel Researcher @S2W_Official @TALON_INTEL Main Author of Threat Intel Report 'Campaign DOKKAEBI : Documents of Korean and Evil Binary' / Formerly FSI
Linsey @linsey21hazard
258 Followers 3K Following
CHA Minseok(Jacky) @mstoned7
3K Followers 5K Following CHA is my family name. Senior Principal Threat Intelligence Researcher at AhnLab / Keybase : mstoned7 , Signal : mstoned7.21 / Tweets are my own.
Angie @s_angie65
263 Followers 3K Following
Dorothy @dewittdorothy12
348 Followers 3K Following
Jacquline @mathisjacquline
269 Followers 3K Following
Nancy @nancy4garcia
343 Followers 3K Following
eversinc33 🤍🔪�... @eversinc33
6K Followers 1K Following computers be computin | https://t.co/Eiur8iOJQ4
Back Engineering Labs @BackEngineerLab
1K Followers 4 Following Developing https://t.co/FGFRjFl0ql Discord: https://t.co/EeXwaigjlI
Utku Çorbacı @rhotav
1K Followers 171 Following security r&d at @malwation @threatzone_, author of @0xreversecom / @__TTMO__
Red Canary, a Zscaler... @redcanary
30K Followers 1K Following 24/7/365 threat detection and response across your cloud, identity, endpoints and everything in-between. We got you: https://t.co/pFNwBJN3d5
Duncan Ogilvie 🍍 @mrexodia
9K Followers 334 Following Reverse engineer, creator of @x64dbg and 100+ other projects. Love binary analysis and Windows internals. Dreaming about doing open source full time...
Smukx.E @5mukx
16K Followers 227 Following Malware Researcher & Red Teamer | 0..=n Day 🔬 at 🌒 | 0x15 Y/o
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Unit 42 @Unit42_Intel
64K Followers 82 Following The latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.
Stephan Berger @malmoeb
28K Followers 1K Following Head of Investigations @InfoGuardAG https://t.co/A5lnFAu7eX
mRr3b00t @UK_Daniel_Card
114K Followers 8K Following Department of Cyber WAR CEO of everyone's email servers!
DarkFeed @ido_cohen2
44K Followers 0 Following DarkFeed: Cyber Threat Intelligence Platform, Putting things at order in the ransomware crazy world #OSINT | #Ransomware | #Cyberattacks | #Hacktivism
chompie @chompie1337
83K Followers 1K Following hacker, weird machine mechanic, X-Force Offensive Research (XOR)
Kostas @Kostastsale
18K Followers 367 Following @TheDFIRReport | No longer active here – find me on Bluesky: https://t.co/qHzDSxCRfG. 🇬🇷🇨🇦
Andrew Thompson @ImposeCost
39K Followers 1K Following Head of Research and Discovery (RAD) @Google Threat Intelligence Group via @Mandiant acquisition. Posts are attributable to me—not my employer. Former @USMC.
CyberKnow @Cyberknow20
36K Followers 3K Following Situational Awareness | Threat Intelligence | cybertracker | Hacktivism | Meme Farmer Digital Owl of the Cyber Realm Posts and Opinions are my own
Michael Koczwara @MichalKoczwara
23K Followers 2K Following Threat Researcher/Founder @Intel_Ops_io Threat Intelligence, Adversary Infrastructure Hunting, Curated TI Feed (Coming Soon) https://t.co/VQWaze6gaF
Curated Intelligence @CuratedIntel
14K Followers 106 Following Bringing together intelligence researchers and incident responders. #TrackThePlanet
Jiří Vinopal @vinopaljiri
10K Followers 470 Following Threat Researcher at Check Point @_CPResearch_ #DFIR #Reversing - All opinions expressed here are mine only. https://t.co/iWvwWF1AnN
Nicolas Krassas @Dinosn
147K Followers 735 Following Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKrW3
0xor0ne @0xor0ne
82K Followers 514 Following | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
Thomas Roccia 🤘 @fr0gger_
32K Followers 2K Following AI Security x Threat Intel · Sr. Threat Researcher @Microsoft · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @McAfee_Labs · Views mine 😈
GuidedHacking @GuidedHacking
53K Followers 393 Following Reverse Engineering & Game Hacking Courses @ https://t.co/Dl5ED4o7YS
Alexandre Borges @ale_sp_brazil
28K Followers 147 Following Vulnerability Researcher and Exploit Developer
Florian Roth ⚡️ @cyb3rops
207K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
ςεяβεяμs - м�... @c3rb3ru5d3d53c
25K Followers 243 Following 💕 Malware Hunter Killer 💕 #binlex & #mwcfg Developer 📽️ YouTuber 👩💻 She/Her 💍@DravenSwiftbow Support my work 👇 ☕️ https://t.co/NoM1TXq00P
hasherezade @hasherezade
89K Followers 910 Following Programmer, #malware analyst. Author of #PEbear, #PEsieve, #TinyTracer. Private account. All opinions expressed here are mine only (not of my employer etc)
Chuong Dong @cPeterr
5K Followers 705 Following MSTIC RE @Microsoft | Ex FLARE RE @Mandiant | @CuratedIntel
ReversingLabs @ReversingLabs
7K Followers 855 Following ReversingLabs is the trusted name in file and software security. RL - Trust Delivered.
_0x0v1 @0x0v1
311 Followers 858 Following _hacktivist _public_interest_technologist _neuromancer { disrupting APT, authoritarian governments, surveillance, privacy violations & corporate injustice }
Harshleen Chawla @harshleenchawl2
29K Followers 729 Following Security Tester | ⟠ Web3 | Content Creator | Tech writer Lead @web3sec_news| building @shefiindia💫
Justin Elze @HackingLZ
65K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
allthingsida @allthingsida
4K Followers 146 Following All things IDA, security, reverse engineering, programming, AI and more. Friend and fan of Hex-Rays but non-official.
Ransomware News @RansomwareNews
31K Followers 0 Following This Twitter Bot gets updates from ransomware groups For removal requests DM @vxunderground Feed maintained by @joshhighet
ransomfeednews @ransomfeednews
3K Followers 60 Following Ransomfeed empowers businesses and individuals with #datadriven insights on #ransomware threats | #ransomfeed
The DFIR Report @TheDFIRReport
62K Followers 0 Following Real Intrusions by Real Attackers, the Truth Behind the Intrusion. Services: https://t.co/XW613EKt2w
Yong-hyun Kim @copy_and_paster
48 Followers 141 Following Professional Engineer : Information Management(정보관리기술사), Computer System Application(컴퓨터시스템응용기술사) | Tweets are my own.
Hackmanac @H4ckmanac
93K Followers 367 Following We track verified, real-world cyber attacks to help you develop effective Cybersecurity strategies. Try https://t.co/eB7qgxKFAa, your Strategic Threat Intelligence platform
Byron Wan @Byron_Wan
42K Followers 2K Following
CyberWar - 싸워 @cyberwar_15
7K Followers 100 Following Since. 2001. 8. 8 We have been fighting against North Korean cyber operatives since August 8, 2001.
Dodge This Security @shotgunner101
7K Followers 5K Following Computer Security Professional. Tweets are my own. Rooster Teeth Archive Project: https://t.co/gawoj5ZZyGTrends for United States
You might like
