cmex

As of this morning I am unemployed. I am looking for work! I have a range of experience that can be valuable to the right team. A short list of relevant skills that I'd call out: reverse engineering & vuln research, DFIR, project management, infrastructure architecting, system administration.

PRELUDE Crypto Heist Causes HAVOC | Cyber and Data Resilience | Kroll During the investigation of a large-scale crypto currency theft, Kroll researchers discovered two new pieces of malware. These pieces of malware ultimately lead to the deployment of Havoc C2’s agent “...

Fun engagement we worked on, very interesting mix of samples. Been looking forward to this one getting published:

I started this project without an idea, etc. I'm just learning what I can make the #Dreamcast do. So far, I have a controllable, stationary camera in 3D space that loads an asteroid field, bkgrnd music, fonts, menu, and networking (BBA) that loads a msg from a server (XML).

#Homebrew #GameDev #Sega

noice

Brute Forcing DARKGATE Encodings | Cyber Risk | Kroll Kroll recently analyzed newer versions of DARKGATE, a Windows-based malware sold on the dark web, which randomly shuffles the non-standard alphabet in use. Kroll identified a weakness in this shufflin...

Crazy leet analysis.

TL;DR the darkgate encoding method uses a randomized base64 alphabet based on victim system characteristics. While this encoding attempts to obscure the config and keylogging output, a weakness in the seed generation makes the randomization predictable.