I am now getting back into INFOSEC!
I will be uploading my Qubes Rootkit Collection to github.
github.com/loneicewolf/...
#github #rootkit #qubes #qubes-os #qubesos #infosec #cybersec #information-security #security
Take care everyone!
(its empty now, but ill upload!)
I will be uploading my Qubes Rootkit Collection to github.
github.com/loneicewolf/...
#github #rootkit #qubes #qubes-os #qubesos #infosec #cybersec #information-security #security
Take care everyone!
(its empty now, but ill upload!)
GitHub - loneicewolf/QUBES-ROOTKIT: My Rootkit Collection for Qubes [4.3.2]
My Rootkit Collection for Qubes [4.3.2]. Contribute to loneicewolf/QUBES-ROOTKIT development by creating an account on GitHub.
github.com
November 8, 2026 at 8:22 AM
I am now getting back into INFOSEC!
I will be uploading my Qubes Rootkit Collection to github.
github.com/loneicewolf/...
#github #rootkit #qubes #qubes-os #qubesos #infosec #cybersec #information-security #security
Take care everyone!
(its empty now, but ill upload!)
I will be uploading my Qubes Rootkit Collection to github.
github.com/loneicewolf/...
#github #rootkit #qubes #qubes-os #qubesos #infosec #cybersec #information-security #security
Take care everyone!
(its empty now, but ill upload!)
I had a lot of fun giving a talk at
and now I can finally release ARM64 support for my Linux bootkit framework - Silverseal, making it the first public ARM64 UEFI bootkit targeting Linux distros, to the best of my knowledge. github.com/Idov31/Silve... 1/3
and now I can finally release ARM64 support for my Linux bootkit framework - Silverseal, making it the first public ARM64 UEFI bootkit targeting Linux distros, to the best of my knowledge. github.com/Idov31/Silve... 1/3
GitHub - Idov31/Silverseal: Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealthy kernel rootkit.
Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealthy kernel rootkit. - Idov31/Silverseal
github.com
November 9, 2026 at 10:23 PM
I had a lot of fun giving a talk at
and now I can finally release ARM64 support for my Linux bootkit framework - Silverseal, making it the first public ARM64 UEFI bootkit targeting Linux distros, to the best of my knowledge. github.com/Idov31/Silve... 1/3
and now I can finally release ARM64 support for my Linux bootkit framework - Silverseal, making it the first public ARM64 UEFI bootkit targeting Linux distros, to the best of my knowledge. github.com/Idov31/Silve... 1/3
ROOTKIT://死 (ROOTKIT PROTOCOL DEATH)
https://store.steampowered.com/app/3716110/
https://store.steampowered.com/app/3716110/
November 6, 2026 at 7:58 AM
ROOTKIT://死 (ROOTKIT PROTOCOL DEATH)
https://store.steampowered.com/app/3716110/
https://store.steampowered.com/app/3716110/
Kevin Mitnick broke past a lot more technology with a fast talk roll and a blowtorch than he did with a rootkit and a remote terminal.
November 5, 2026 at 11:38 PM
Kevin Mitnick broke past a lot more technology with a fast talk roll and a blowtorch than he did with a rootkit and a remote terminal.
They would either demand you use a ridiculously resource intensive launcher that also installs a rootkit on your PC and requires a constant internet connection, or do some funny shit like make their games exclusive to GeForce Now
November 9, 2026 at 7:42 AM
They would either demand you use a ridiculously resource intensive launcher that also installs a rootkit on your PC and requires a constant internet connection, or do some funny shit like make their games exclusive to GeForce Now
How to Install and Run Rootkit Hunter on #AlmaLinux #VPS
This article provides a guide for how to install and run Rootkit Hunter on AlmaLinux VPS.
What is Rootkit Hunter?
Rootkit Hunter (often abbreviated rkhunter) is a free, open-source #security tool for ...
Continued 👉 #rootkithunter
This article provides a guide for how to install and run Rootkit Hunter on AlmaLinux VPS.
What is Rootkit Hunter?
Rootkit Hunter (often abbreviated rkhunter) is a free, open-source #security tool for ...
Continued 👉 #rootkithunter
How to Install and Run Rootkit Hunter on AlmaLinux VPS
blog.radwebhosting.com
November 5, 2026 at 4:30 AM
How to Install and Run Rootkit Hunter on #AlmaLinux #VPS
This article provides a guide for how to install and run Rootkit Hunter on AlmaLinux VPS.
What is Rootkit Hunter?
Rootkit Hunter (often abbreviated rkhunter) is a free, open-source #security tool for ...
Continued 👉 #rootkithunter
This article provides a guide for how to install and run Rootkit Hunter on AlmaLinux VPS.
What is Rootkit Hunter?
Rootkit Hunter (often abbreviated rkhunter) is a free, open-source #security tool for ...
Continued 👉 #rootkithunter
The Sony BMG Rootkit Scandal 2005 was enough for me. No Sony anything since.
Sony BMG included DRM software called Extended Copy Protection (XCP) on about 50 music CDs.
When inserted into a Windows PC, the disc secretly installed a rootkit to prevent users from ripping or copying the music.
Sony BMG included DRM software called Extended Copy Protection (XCP) on about 50 music CDs.
When inserted into a Windows PC, the disc secretly installed a rootkit to prevent users from ripping or copying the music.
November 8, 2026 at 3:37 AM
The Sony BMG Rootkit Scandal 2005 was enough for me. No Sony anything since.
Sony BMG included DRM software called Extended Copy Protection (XCP) on about 50 music CDs.
When inserted into a Windows PC, the disc secretly installed a rootkit to prevent users from ripping or copying the music.
Sony BMG included DRM software called Extended Copy Protection (XCP) on about 50 music CDs.
When inserted into a Windows PC, the disc secretly installed a rootkit to prevent users from ripping or copying the music.
Switch2 hack turns console into crypto miner! Rootkit AI hidden in firmware! Saves upload to Minsk server! #Switch2 #CryptoMiner #Rootkit #SupplyChainAttack #GamingSecurity #Nintendo
Video
The Switch 2 was hacked after a kernel exploit turned the console into a cryptocurrency miner. Security researchers discovered an Advanced Diplomatic AI module that is actually a rootkit disguised as a leader system. Speedrunners found consoles silently uploading saves to a server in Minsk. The exploit uses a buffer overflow in the Great Work of Writing slot to run code in kernel space, then escalates privileges via Nintendo Account Linkage. This is described as the most sophisticated supply-chain attack since a Bitcoin miner was hidden in FIFA 14. Nintendo has 2.3 million affected cartridges and is offering refunds. Nintendo CEO Strauss Zelnick apologized, saying they didn't expect immersion to reach your home network. The 47 GB patch feels like downloading the Library of Alexandria over a 56k modem. Stay safe and keep your civilization running smoothly! Tools used for generation Text Gemini Narator Azure TTS Clips Pexel Rendering Remotion
www.youtube.com
November 8, 2026 at 8:39 AM
Switch2 hack turns console into crypto miner! Rootkit AI hidden in firmware! Saves upload to Minsk server! #Switch2 #CryptoMiner #Rootkit #SupplyChainAttack #GamingSecurity #Nintendo
Tbh just having to install a rootkit (kernel level anti cheat) to play the game at all should have done it before even launching the game
November 7, 2026 at 8:51 AM
Tbh just having to install a rootkit (kernel level anti cheat) to play the game at all should have done it before even launching the game
In honor of Abbott conceding to Hinajosa and not being a rat in this particular case, I will mention one good thing he did in the past: As TX AG in 2005, Abbott sued Sony for secretly installing malware on people's computers.
More details here: en.wikipedia.org/wiki/Sony_BM...
More details here: en.wikipedia.org/wiki/Sony_BM...
Sony BMG copy protection rootkit scandal - Wikipedia
en.wikipedia.org
November 4, 2026 at 4:15 AM
In honor of Abbott conceding to Hinajosa and not being a rat in this particular case, I will mention one good thing he did in the past: As TX AG in 2005, Abbott sued Sony for secretly installing malware on people's computers.
More details here: en.wikipedia.org/wiki/Sony_BM...
More details here: en.wikipedia.org/wiki/Sony_BM...
Persistent backdoor in grokbot
profero.io/blog/the-roo...
profero.io/blog/the-roo...
The Rootkit Built Into Grok Bot
One command in a Grok Bot agent gives an attacker remote root, your cookies and persistent access. xAI and Cursor have not replied after 75 days.
profero.io
November 9, 2026 at 4:05 PM
Persistent backdoor in grokbot
profero.io/blog/the-roo...
profero.io/blog/the-roo...
Cero rastreadores, cero anuncios, cero recolección de datos. Corre 100% local en tu dispositivo.
Porque la verdad y la libre expresión no se negocian ni se arrodillan ante аlgoritmos corporativos.
Código auditable en GitHub: github.com/anzaca0330-pixel/AndreTaker-BabaYaga-Core-CyberDefense
Porque la verdad y la libre expresión no se negocian ni se arrodillan ante аlgoritmos corporativos.
Código auditable en GitHub: github.com/anzaca0330-pixel/AndreTaker-BabaYaga-Core-CyberDefense
GitHub - anzaca0330-pixel/AndreTaker-BabaYaga-Core-CyberDefense: Open-Source Cyberdefense Engine, Anti-Palantir Counter-Intelligence, BIOS Rootkit Mitigation & Tactical Game.
Open-Source Cyberdefense Engine, Anti-Palantir Counter-Intelligence, BIOS Rootkit Mitigation & Tactical Game. - anzaca0330-pixel/AndreTaker-BabaYaga-Core-CyberDefense
github.com
November 7, 2026 at 9:23 PM
Cero rastreadores, cero anuncios, cero recolección de datos. Corre 100% local en tu dispositivo.
Porque la verdad y la libre expresión no se negocian ni se arrodillan ante аlgoritmos corporativos.
Código auditable en GitHub: github.com/anzaca0330-pixel/AndreTaker-BabaYaga-Core-CyberDefense
Porque la verdad y la libre expresión no se negocian ni se arrodillan ante аlgoritmos corporativos.
Código auditable en GitHub: github.com/anzaca0330-pixel/AndreTaker-BabaYaga-Core-CyberDefense
🚨 Grok Bot has a "rootkit" built in, and it's still unpatched since it was reported on Aug 24 by Profero.
One command in an agent can tell Docker to open a new container with no limits, and that gives full control of the mach…
— from @MiaAI_lab (https://x.com/MiaAI_lab/status/2119840056965730389)
One command in an agent can tell Docker to open a new container with no limits, and that gives full control of the mach…
— from @MiaAI_lab (https://x.com/MiaAI_lab/status/2119840056965730389)
November 9, 2026 at 6:17 PM
🚨 Grok Bot has a "rootkit" built in, and it's still unpatched since it was reported on Aug 24 by Profero.
One command in an agent can tell Docker to open a new container with no limits, and that gives full control of the mach…
— from @MiaAI_lab (https://x.com/MiaAI_lab/status/2119840056965730389)
One command in an agent can tell Docker to open a new container with no limits, and that gives full control of the mach…
— from @MiaAI_lab (https://x.com/MiaAI_lab/status/2119840056965730389)
Wow, 4 years into owning this Ioniq 5, it finally has wireless CarPlay, thanks to some kind of jailbreak/rootkit for the infotainment. Gonna come in real handy for multiple-short-errand days.
November 2, 2026 at 11:07 PM
Wow, 4 years into owning this Ioniq 5, it finally has wireless CarPlay, thanks to some kind of jailbreak/rootkit for the infotainment. Gonna come in real handy for multiple-short-errand days.
Tracee kprobes on init_module/finit_module log module name, loader UID, and SHA-256 of the module image to a forensic log. Catch unsigned rootkits at load time on kernel 5.10+. https://www.valtersit.com/vault/kernel-module-load-forensics-and-rootkit-detection-with-init-882703/
Kernel Module Load Forensics and Rootkit Detection with init_module Tracing
www.valtersit.com
November 3, 2026 at 5:30 AM
Tracee kprobes on init_module/finit_module log module name, loader UID, and SHA-256 of the module image to a forensic log. Catch unsigned rootkits at load time on kernel 5.10+. https://www.valtersit.com/vault/kernel-module-load-forensics-and-rootkit-detection-with-init-882703/
from there lazarus deploys fudmodule, its kernel-mode rootkit, to tear down security visibility.
November 2, 2026 at 2:40 AM
from there lazarus deploys fudmodule, its kernel-mode rootkit, to tear down security visibility.
Daxin is back: a 2013 kernel rootkit plus Stupig, a backdoor that waits at the Windows logon screen. https://intel.threadlinqs.com/threat/TL-2026-5143?utm_source=bluesky #ThreatIntel #CVE_2026_40639 #BackdoorDaxin #BackdoorStupig
November 3, 2026 at 11:07 AM
Daxin is back: a 2013 kernel rootkit plus Stupig, a backdoor that waits at the Windows logon screen. https://intel.threadlinqs.com/threat/TL-2026-5143?utm_source=bluesky #ThreatIntel #CVE_2026_40639 #BackdoorDaxin #BackdoorStupig
How to Install and Run Rootkit Hunter on #AlmaLinux #VPS
This article provides a guide for how to install and run Rootkit Hunter on AlmaLinux VPS.
What is Rootkit Hunter?
Rootkit Hunter (often abbreviated rkhunter) is a free, open-source #security tool for ...
Continued 👉 #rootkithunter
This article provides a guide for how to install and run Rootkit Hunter on AlmaLinux VPS.
What is Rootkit Hunter?
Rootkit Hunter (often abbreviated rkhunter) is a free, open-source #security tool for ...
Continued 👉 #rootkithunter
How to Install and Run Rootkit Hunter on AlmaLinux VPS
blog.radwebhosting.com
October 31, 2026 at 8:30 PM
How to Install and Run Rootkit Hunter on #AlmaLinux #VPS
This article provides a guide for how to install and run Rootkit Hunter on AlmaLinux VPS.
What is Rootkit Hunter?
Rootkit Hunter (often abbreviated rkhunter) is a free, open-source #security tool for ...
Continued 👉 #rootkithunter
This article provides a guide for how to install and run Rootkit Hunter on AlmaLinux VPS.
What is Rootkit Hunter?
Rootkit Hunter (often abbreviated rkhunter) is a free, open-source #security tool for ...
Continued 👉 #rootkithunter
my evil scary #songoftheday is doing another album instead of a song because i cant pick a fav from recursion
November 1, 2026 at 12:09 AM
my evil scary #songoftheday is doing another album instead of a song because i cant pick a fav from recursion
LOLDrivers now has the TrueSight.sys 2.0.2 sample, the old RogueKiller anti-rootkit driver Check Point caught being abused at scale as an EDR killer.
Load it, send IOCTL 0x22E044 with a PID, and the kernel kills it for you.
www.loldrivers.io/drivers/e0e...
Load it, send IOCTL 0x22E044 with a PID, and the kernel kills it for you.
www.loldrivers.io/drivers/e0e...
truesight.sys – Vulnerable Driver & Hashes | LOLDrivers
truesight.sys is a known vulnerable driver abused for BYOVD. Get hashes, detection rules and blocklist guidance.
www.loldrivers.io
November 4, 2026 at 12:02 AM
LOLDrivers now has the TrueSight.sys 2.0.2 sample, the old RogueKiller anti-rootkit driver Check Point caught being abused at scale as an EDR killer.
Load it, send IOCTL 0x22E044 with a PID, and the kernel kills it for you.
www.loldrivers.io/drivers/e0e...
Load it, send IOCTL 0x22E044 with a PID, and the kernel kills it for you.
www.loldrivers.io/drivers/e0e...
Oct 31, 2005: Mark Russinovich posted that a Sony BMG music CD had put a rootkit on his PC, copy protection built to hide from the computer's owner. Sony BMG ultimately stopped putting DRM on its U.S. CDs. (Sources: Wikipedia, EFF) #techhistory #DRM #sony
October 31, 2026 at 11:05 PM
Oct 31, 2005: Mark Russinovich posted that a Sony BMG music CD had put a rootkit on his PC, copy protection built to hide from the computer's owner. Sony BMG ultimately stopped putting DRM on its U.S. CDs. (Sources: Wikipedia, EFF) #techhistory #DRM #sony
Oct 31, 2005: Mark Russinovich posted that a Sony BMG music CD had put a rootkit on his PC, copy protection built to hide from the computer's owner. Sony BMG ultimately stopped putting DRM on its U.S. CDs. (Sources: Wikipedia, EFF) #TechHistory #DRM
October 31, 2026 at 10:34 PM
Oct 31, 2005: Mark Russinovich posted that a Sony BMG music CD had put a rootkit on his PC, copy protection built to hide from the computer's owner. Sony BMG ultimately stopped putting DRM on its U.S. CDs. (Sources: Wikipedia, EFF) #TechHistory #DRM