Mohamed Ezat

Auto-color - Linux backdoor A deep dive into the stealthy Linux ‘Auto-color’ Backdoor

I posted a detailed analysis of the #Auto_Color Linux #Backdoor, covering in-depth code analysis, a config extractor, and a YARA rule.

zw01f.github.io/malware%20an...

Looking forward to your feedback!

#Linux #Malware #MalwareAnalysis #ThreatResearch #ReverseEngineering #YARA

Thank you , sir

APT37 - RokRat An in-depth analysis of APT37’s latest campaign leveraging fileless RokRat malware

Hello, I wrote a new blog analyzing a sample from a recent APT37 phishing attack.

zw01f.github.io/malware%20an...

Would love to hear your feedback!
#RokRat #APT37 #ScarCruft #malware #APT #MalwareAnalysis #Infosec

GitHub - MalBeacon/what-is-this-stealer: A repository of credential stealer formats A repository of credential stealer formats . Contribute to MalBeacon/what-is-this-stealer development by creating an account on GitHub.

github.com/MalBeacon/wh...

Analysis of Counter-Ransomware Activities in 2024 CTI, threat intelligence, OSINT, malware, APT, threat hunting, threat analysis, CTF, cybersecurity, security

New Blog! Analysis of Counter-Ransomware Activities in 2024

blog.bushidotoken.net/2025/01/anal...

Malwoverview version 6.1.0 has just been released:

github.com/alexandrebor...

To install it:

$ python -m pip install -U malwoverview

This release includes several new features:

[+] Virus Exchange support.
[+] IPInfo and BGPView support.
[+] Global directory support.

#malware #threathunting