Tag feed

#malware-analysis

120 posts49 followers

Explore Hashnode

Alternatives

Trending tags this week

RPRudra Ponksheblog.realrudrap.dev3d ago · 7 min read

The Attacker's Discipline

There is a specific kind of cognitive dissonance that comes from reverse engineering a malware sample in one terminal while your own app's backend runs in another. I spent the better part of the last

0

RPRudra Ponksheblog.realrudrap.devJul 8 · 11 min read

I Found the Live C2 Server Controlling Thousands of Infected Devices

If you've been following along, here's where we are: a spam SMS dropped an APK, the APK was a dropper that XOR-decrypted a multi-DEX container, HMAC-validated it, AES-decrypted it, and loaded the resu

0

DPDiego Petitthedevbox.hashnode.devJul 4 · 12 min read

XuperTV (formerly MagisTV): The Largest Residential Proxy Botnet Ever Built - Disguised as an IPTV App

TL;DR: XuperTV, a popular Latin American IPTV app with millions of downloads, contains a hidden P2P proxy network that turns every user's device into a residential relay node. Our analysis confirms th

0

RPRudra Ponksheblog.realrudrap.devJun 24 · 15 min read

The Spam SMS that turned into a rabbit hole

⚠ WARNING: If you received a SMS claiming your vehicle has an outstanding RTO challan with a link which downloads an .apk file, do not open it. This is an active malware campaign as of June 2026 imper

0

KRKishore Rkishorecybersec.hashnode.devJun 19 · 4 min read

Can AI Replace Cybersecurity ?

Introduction: Cybersecurity is not immune from the ever-evolving power of Artificial Intelligence (AI). Today, AI-driven solutions can identify threats with speed, analyze vast amounts at once and aut

0

JTJeff Tongwind010.hashnode.devJun 15 · 8 min read

Malware Detection

What is YARA? How do we detect if a system is infected? Typically, cybersecurity defenders use YARA rules for malware detection. YARA is the engine that runs these rules. The modern engine is YARA-X w

0

JTJeff Tongwind010.hashnode.devJun 12 · 15 min read

Malicious Binary Reverse Engineering

I'm no Low Level (Ed) or John Hammond. I'm at the point where it's a skills issue. I need some guidance. Initially, I tried to get have Claude Codede to analyze the malicious repository with instructi

0

JTJeff Tongwind010.hashnode.devJun 12 · 13 min read

Deeper Malware Binary Analysis

We've setup the docker container with disassemblers like radare2 in the previous post. Separation of Concerns I'm going to use radare2 to slice out by offset/size from the header. We used file and obj

0

JTJeff Tongwind010.hashnode.devJun 11 · 10 min read

Malicious Binary Analysis

In Malicious IPs and Domain Reconnaissance we trace the endpoints where the suspicious code is coming from. We're going to dive deeper, but I need some protections. The DNS, registry, and endpoint rec

0

JTJeff Tongwind010.hashnode.devJun 10 · 6 min read

Malicious Github Repository Analysis

Discovery I was doing some research on CVE-2026-41940 after catching up on the Security Now podcast and looked for a PoC to better understand the the vulnerability. That's when a simple Google search

0

#malware-analysis

Search Hashnode

#malware-analysis

Explore Hashnode

Trending tags this week

The Attacker's Discipline

I Found the Live C2 Server Controlling Thousands of Infected Devices

XuperTV (formerly MagisTV): The Largest Residential Proxy Botnet Ever Built - Disguised as an IPTV App

The Spam SMS that turned into a rabbit hole

Can AI Replace Cybersecurity ?

Malware Detection

Malicious Binary Reverse Engineering

Deeper Malware Binary Analysis

Malicious Binary Analysis

Malicious Github Repository Analysis