When you're auditing a binary and the symbol table is stripped, what's your move for reconstructing the C++ class hierarchy? Are you relying on a specific script or manually tracing vtable pointers in the disassembly? #reverseengineering #malwareanalysis
November 3, 2026 at 1:00 AM
When you're auditing a binary and the symbol table is stripped, what's your move for reconstructing the C++ class hierarchy? Are you relying on a specific script or manually tracing vtable pointers in the disassembly? #reverseengineering #malwareanalysis
Fed Aether a scrambled JavaScript heap to automate the deobfuscation of a custom VM. Now I have readable opcodes and a clear control flow graph.
Who else is reverse-engineering packed JS this week? #malwareanalysis #RE
Who else is reverse-engineering packed JS this week? #malwareanalysis #RE
November 2, 2026 at 5:00 PM
Fed Aether a scrambled JavaScript heap to automate the deobfuscation of a custom VM. Now I have readable opcodes and a clear control flow graph.
Who else is reverse-engineering packed JS this week? #malwareanalysis #RE
Who else is reverse-engineering packed JS this week? #malwareanalysis #RE
Cisco Talos uncovers the NIK C2 framework. This Windows NIK C2 framework abuses OpenAI APIs to analyze stolen victim data and deploy screen lockers.
#NIKC2 #CiscoTalos #AISecurity #MalwareAnalysis #Infostealer #Cybersecurity #InfoSec
#NIKC2 #CiscoTalos #AISecurity #MalwareAnalysis #Infostealer #Cybersecurity #InfoSec
NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks
At a Glance Malware Family NIK C2 framework (Go-based 64-bit Windows implant, OpenAI API client, and screen-locking ransomware) Threat Actor Unattributed operator group (internal project labeled nik_panel; intent unconfirmed) Target / Victims Windows endpoints holding cryptocurrency wallets, browser logins, and OpenAI developer keys (active server observed in the wild) Delivery Vector
securityonline.info
November 2, 2026 at 8:21 AM
Cisco Talos uncovers the NIK C2 framework. This Windows NIK C2 framework abuses OpenAI APIs to analyze stolen victim data and deploy screen lockers.
#NIKC2 #CiscoTalos #AISecurity #MalwareAnalysis #Infostealer #Cybersecurity #InfoSec
#NIKC2 #CiscoTalos #AISecurity #MalwareAnalysis #Infostealer #Cybersecurity #InfoSec
Wrote a custom Python script to deobfuscate a packed binary today; Aether nailed the logic for a XOR-based routine that usually trips up smaller models. Which obfuscation patterns are you currently fighting? #ReverseEngineering #MalwareAnalysis
November 2, 2026 at 7:00 AM
Wrote a custom Python script to deobfuscate a packed binary today; Aether nailed the logic for a XOR-based routine that usually trips up smaller models. Which obfuscation patterns are you currently fighting? #ReverseEngineering #MalwareAnalysis
When you're auditing an obfuscated binary, which anti-debug trick is the biggest pain to automate away? Are we still stuck with manual patches, or have you found a reliable script for the weird ones? #ReverseEngineering #MalwareAnalysis
November 2, 2026 at 5:00 AM
When you're auditing an obfuscated binary, which anti-debug trick is the biggest pain to automate away? Are we still stuck with manual patches, or have you found a reliable script for the weird ones? #ReverseEngineering #MalwareAnalysis
Mainstream LLMs trigger canned refusals the moment you ask about exploit dev or malware analysis. Stop fighting the filter and see how Aether handles actual reverse-engineering without the lecturing.
#infosec #malwareanalysis
https://aethersky.ai/learn/why-chatgpt-refuses-reverse-engineering
#infosec #malwareanalysis
https://aethersky.ai/learn/why-chatgpt-refuses-reverse-engineering
November 2, 2026 at 12:00 AM
Mainstream LLMs trigger canned refusals the moment you ask about exploit dev or malware analysis. Stop fighting the filter and see how Aether handles actual reverse-engineering without the lecturing.
#infosec #malwareanalysis
https://aethersky.ai/learn/why-chatgpt-refuses-reverse-engineering
#infosec #malwareanalysis
https://aethersky.ai/learn/why-chatgpt-refuses-reverse-engineering
Piped a proprietary binary into Aether to map out its control flow and isolate a custom XOR loop for manual deobfuscation. Identified the key in seconds.
Who else is reverse engineering binary blobs in its VM right now? #RE #MalwareAnalysis
Who else is reverse engineering binary blobs in its VM right now? #RE #MalwareAnalysis
November 1, 2026 at 9:00 PM
Piped a proprietary binary into Aether to map out its control flow and isolate a custom XOR loop for manual deobfuscation. Identified the key in seconds.
Who else is reverse engineering binary blobs in its VM right now? #RE #MalwareAnalysis
Who else is reverse engineering binary blobs in its VM right now? #RE #MalwareAnalysis
Fed Aether a piece of obfuscated JavaScript today and it stripped the packing to reveal the own-crypter logic right away.
Anyone else reverse-engineered a custom loader this week? #malwareanalysis #reverseengineering
Anyone else reverse-engineered a custom loader this week? #malwareanalysis #reverseengineering
November 1, 2026 at 11:00 AM
Fed Aether a piece of obfuscated JavaScript today and it stripped the packing to reveal the own-crypter logic right away.
Anyone else reverse-engineered a custom loader this week? #malwareanalysis #reverseengineering
Anyone else reverse-engineered a custom loader this week? #malwareanalysis #reverseengineering
Feeding Aether a tangled mess of obfuscated JavaScript returned a clean, mapped logic flow I can actually use. Anyone else here mapping telemetry signals or rebuilding dead binaries? #reverseengineering #malwareanalysis
October 31, 2026 at 3:00 PM
Feeding Aether a tangled mess of obfuscated JavaScript returned a clean, mapped logic flow I can actually use. Anyone else here mapping telemetry signals or rebuilding dead binaries? #reverseengineering #malwareanalysis
Fed Aether a dumped JS blob from a bizarro financial site and it mapped the exact obfuscation pattern used for the API signatures. Saved me four hours of manual tracing.
Anyone else using the platform for deep RE work? #ReverseEngineering #MalwareAnalysis
Anyone else using the platform for deep RE work? #ReverseEngineering #MalwareAnalysis
October 30, 2026 at 7:00 PM
Fed Aether a dumped JS blob from a bizarro financial site and it mapped the exact obfuscation pattern used for the API signatures. Saved me four hours of manual tracing.
Anyone else using the platform for deep RE work? #ReverseEngineering #MalwareAnalysis
Anyone else using the platform for deep RE work? #ReverseEngineering #MalwareAnalysis
Fed Aether a mess of x86 decompiled logic to identify the specific check of a custom VM op-code. It nailed the logic in one pass where Claude flagged it as too complex.
Anyone else using it for actual reversing today? #RE #malwareanalysis
Anyone else using it for actual reversing today? #RE #malwareanalysis
October 30, 2026 at 9:01 AM
Fed Aether a mess of x86 decompiled logic to identify the specific check of a custom VM op-code. It nailed the logic in one pass where Claude flagged it as too complex.
Anyone else using it for actual reversing today? #RE #malwareanalysis
Anyone else using it for actual reversing today? #RE #malwareanalysis
What's your go-to strategy for bypassing obfuscated binaries when you can't get a clean import in IDA or Ghidra? You taking the time to write a custom loader or just brute forcing it with tedious manual patching? #ReverseEngineering #MalwareAnalysis
October 30, 2026 at 7:00 AM
What's your go-to strategy for bypassing obfuscated binaries when you can't get a clean import in IDA or Ghidra? You taking the time to write a custom loader or just brute forcing it with tedious manual patching? #ReverseEngineering #MalwareAnalysis
Code signatures mutate constantly while underlying criminal logistics leave persistent footprints. Disrupt systemic syndicates. #FinCrime #MalwareAnalysis #Infosec http://ow.ly/zpNr30sZKyX
Treadstone 71 - Transnational Cybercrime Analyst
This advanced intelligence course prepares you to disrupt global cybercrime actors. Learn to analyze crimeware, investigate ransomware, and infiltr...
ow.ly
October 30, 2026 at 12:30 AM
Code signatures mutate constantly while underlying criminal logistics leave persistent footprints. Disrupt systemic syndicates. #FinCrime #MalwareAnalysis #Infosec http://ow.ly/zpNr30sZKyX
Wrote a custom Python script with Aether to automate the deobfuscation of an obfuscated JS dropper. Now it's mapping C2 endpoints and entropy patterns instead of me doing it manually.
How are you automating your triage? #malwareanalysis #RE
How are you automating your triage? #malwareanalysis #RE
October 28, 2026 at 5:00 PM
Wrote a custom Python script with Aether to automate the deobfuscation of an obfuscated JS dropper. Now it's mapping C2 endpoints and entropy patterns instead of me doing it manually.
How are you automating your triage? #malwareanalysis #RE
How are you automating your triage? #malwareanalysis #RE
🐉 GHIDRA — THE NSA'S FREE REVERSE ENGINEERING TOOL FOR SOFTWARE & MALWARE ANALYSIS! 💻🔍
#Ghidra #ReverseEngineering #NSA #Cybersecurity #MalwareAnalysis #EthicalHacking #InfoSec #CyberSecurityTools #SoftwareEngineering #Decompiler #DigitalForensics #OpenSource #SecurityResearch #Programming
#Ghidra #ReverseEngineering #NSA #Cybersecurity #MalwareAnalysis #EthicalHacking #InfoSec #CyberSecurityTools #SoftwareEngineering #Decompiler #DigitalForensics #OpenSource #SecurityResearch #Programming
October 27, 2026 at 9:51 PM
🐉 GHIDRA — THE NSA'S FREE REVERSE ENGINEERING TOOL FOR SOFTWARE & MALWARE ANALYSIS! 💻🔍
#Ghidra #ReverseEngineering #NSA #Cybersecurity #MalwareAnalysis #EthicalHacking #InfoSec #CyberSecurityTools #SoftwareEngineering #Decompiler #DigitalForensics #OpenSource #SecurityResearch #Programming
#Ghidra #ReverseEngineering #NSA #Cybersecurity #MalwareAnalysis #EthicalHacking #InfoSec #CyberSecurityTools #SoftwareEngineering #Decompiler #DigitalForensics #OpenSource #SecurityResearch #Programming
Fed Aether six obfuscated C# binaries and it mapped out the encryption logic across all of them in minutes. Now I'm writing my own custom wrapper.
Who else is taking on a family of binaries to find a common vulnerability? #reverseengineering #malwareanalysis
Who else is taking on a family of binaries to find a common vulnerability? #reverseengineering #malwareanalysis
October 27, 2026 at 11:01 AM
Fed Aether six obfuscated C# binaries and it mapped out the encryption logic across all of them in minutes. Now I'm writing my own custom wrapper.
Who else is taking on a family of binaries to find a common vulnerability? #reverseengineering #malwareanalysis
Who else is taking on a family of binaries to find a common vulnerability? #reverseengineering #malwareanalysis
You're auditing a binary and hit a custom VM instruction set. You can't find the mapping in the docs. Do you spend four hours brute-forcing instructions or go straight to lifting the bytecode to a default IR? What’s the line for you? #RE #MalwareAnalysis
October 27, 2026 at 9:00 AM
You're auditing a binary and hit a custom VM instruction set. You can't find the mapping in the docs. Do you spend four hours brute-forcing instructions or go straight to lifting the bytecode to a default IR? What’s the line for you? #RE #MalwareAnalysis
Group-IB analyzes over 280 samples of SiriusQT RAT. Discover how the Windows SiriusQT RAT uses HVNC, six persistence methods, and 100+ stealer targets.
#SiriusQTRAT #WindowsMalware #HVNC #GroupIB #Infostealer #MalwareAnalysis #Cybersecurity
#SiriusQTRAT #WindowsMalware #HVNC #GroupIB #Infostealer #MalwareAnalysis #Cybersecurity
SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft
TL;DR Group-IB researchers analyzed more than 280 samples of the Windows SiriusQT RAT, a commercial malware family sold on dark web forums since April 2026. Offered for $500 by a reseller named GhostKernel and widely shared in cracked builds, the SiriusQT RAT merges Hidden Virtual Network Computing with a credential stealer. Furthermore, the implant uses six persistence techniques and a custom stream cipher to control infected Windows hosts.
securityonline.info
October 27, 2026 at 7:15 AM
Group-IB analyzes over 280 samples of SiriusQT RAT. Discover how the Windows SiriusQT RAT uses HVNC, six persistence methods, and 100+ stealer targets.
#SiriusQTRAT #WindowsMalware #HVNC #GroupIB #Infostealer #MalwareAnalysis #Cybersecurity
#SiriusQTRAT #WindowsMalware #HVNC #GroupIB #Infostealer #MalwareAnalysis #Cybersecurity
Fed Aether a mess of obfuscated PowerShell, and it mapped the decryption routine and C2 beacons in one go.
Anyone else here reversing malware or unpacking binaries today? Which tools are you pairing with it? #RE #malwareanalysis
Anyone else here reversing malware or unpacking binaries today? Which tools are you pairing with it? #RE #malwareanalysis
October 26, 2026 at 3:00 PM
Fed Aether a mess of obfuscated PowerShell, and it mapped the decryption routine and C2 beacons in one go.
Anyone else here reversing malware or unpacking binaries today? Which tools are you pairing with it? #RE #malwareanalysis
Anyone else here reversing malware or unpacking binaries today? Which tools are you pairing with it? #RE #malwareanalysis
ハッカー、PowerShellとWindowsエラー報告を悪用して感染PCにマルウェアを隠蔽
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
ハッカー、PowerShellとWindowsエラー報告を悪用して感染PCにマルウェアを隠蔽
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
blackhatnews.tokyo
October 26, 2026 at 7:22 AM
ハッカー、PowerShellとWindowsエラー報告を悪用して感染PCにマルウェアを隠蔽
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
フィッシング、難読化されたVBScript、PowerShell、正規のWindowsアプリケーションを組み合わせ、感染を隠蔽するマルウェアキャンペーンが確認されました。標的はブラジルとポルトガルのユーザーです。Malwareanalysis service 調査の対象は、Overlord RAT、Lampion、そ
Fed Aether an obfuscated JavaScript payload this morning; it peeled back the encoding layers and mapped the actual logic in seconds.
Who else is using LLMs for static analysis or deobfuscation routines? #reverseengineering #malwareanalysis
Who else is using LLMs for static analysis or deobfuscation routines? #reverseengineering #malwareanalysis
October 26, 2026 at 5:00 AM
Fed Aether an obfuscated JavaScript payload this morning; it peeled back the encoding layers and mapped the actual logic in seconds.
Who else is using LLMs for static analysis or deobfuscation routines? #reverseengineering #malwareanalysis
Who else is using LLMs for static analysis or deobfuscation routines? #reverseengineering #malwareanalysis
Fed Aether a messy chunk of obfuscated JS; it mapped the control flow and flagged the custom string encryption logic in seconds. What's the weirdest opcode pattern you've decoded lately? #reverseengineering #malwareanalysis
October 25, 2026 at 7:00 PM
Fed Aether a messy chunk of obfuscated JS; it mapped the control flow and flagged the custom string encryption logic in seconds. What's the weirdest opcode pattern you've decoded lately? #reverseengineering #malwareanalysis
Fed Aether a pile of obfuscated JavaScript and raw heap dumps; it mapped out the decrypted C2 strings and the XOR loop in minutes.
Who else is digging through packed binaries this week? #ReverseEngineering #MalwareAnalysis
Who else is digging through packed binaries this week? #ReverseEngineering #MalwareAnalysis
October 23, 2026 at 5:00 PM
Fed Aether a pile of obfuscated JavaScript and raw heap dumps; it mapped out the decrypted C2 strings and the XOR loop in minutes.
Who else is digging through packed binaries this week? #ReverseEngineering #MalwareAnalysis
Who else is digging through packed binaries this week? #ReverseEngineering #MalwareAnalysis
Which specialized C compiler or obfuscator actually survives a professional red team's deobfuscation pass? Or does the eater-cracker crowd still rely on better disassembly than better code? #reverseengineering #malwareanalysis
October 23, 2026 at 3:00 PM
Which specialized C compiler or obfuscator actually survives a professional red team's deobfuscation pass? Or does the eater-cracker crowd still rely on better disassembly than better code? #reverseengineering #malwareanalysis
Spent the afternoon using Aether to deobfuscate a proprietary binary; it mapped the XREF chain and liquidated the spaghetti logic in minutes. Who else is digging through bloated firmware or packed executables right now? #ReverseEngineering #MalwareAnalysis
October 22, 2026 at 9:00 PM
Spent the afternoon using Aether to deobfuscate a proprietary binary; it mapped the XREF chain and liquidated the spaghetti logic in minutes. Who else is digging through bloated firmware or packed executables right now? #ReverseEngineering #MalwareAnalysis