Tag
A hobbyist reverses a malicious .exe disguised as a South Park episode that Sonarr auto-downloaded from public torrent trackers, uncovering a ChaCha20-encrypted in-memory PE loader, anti-debug/anti-sandbox tricks, and a second-stage infostealer that harvests browser passwords and cookies.
SentinelOne is using OpenAI's Daybreak cyber capabilities to cut malware reverse engineering from four-to-six weeks down to about eight hours, enabling broader threat landscape mapping and more proactive defense. The company says AI now delivers human-level reverse engineering output while humans retain accountability for key decisions.
推文推荐了一篇关于逆向工程（REA）的文章，介绍拆解代码的11个步骤，内容详尽但费时。
RPISEC released the full materials from its university-level Malware Analysis course for free on GitHub, covering 12 lectures, 10 labs, and 4 projects on reverse engineering, malware analysis, and anti-analysis techniques. The materials are based on the Practical Malware Analysis book and designed for beginners with zero reverse engineering experience.
Cisco Talos has released an open-source framework called CAIRN to classify and analyze AI-integrated malware, which has identified an autonomous command system named CLOSEDQUORUM that uses LLMs to direct attacks without human involvement.
Kesakode tool supports fuzzy-matching for function lookups to aid in obfuscation analysis, specifically in the context of #vidar malware.
The article highlights the exceptional performance of the Qwen 3.8 27B model in cybersecurity tasks, particularly malware analysis, surpassing previous models like Opus. It discusses benchmarks and implications for AI capabilities in exploiting vulnerabilities.
Cutter is an open-source reverse engineering platform that provides a professional, free analysis environment with support for multi-platform binary analysis and plugin extensibility.
Reversecore MCP is an enterprise-grade AI-powered reverse engineering and security analysis tool that integrates with AI assistants via the Model Context Protocol, offering 50+ tools for static/dynamic analysis, malware analysis, vulnerability research, and more.
Microsoft's Project Ire, an autonomous malware-classification agent, successfully identified a LOTUSLITE variant that evaded major EDR tools through behavioral reverse engineering without relying on IOC signatures.
The article details how the author reverse engineered malware pre-installed on a cheap Android projector using Claude Code, identifying and disabling suspicious packages.
Google's Threat Intelligence Group reports its first discovery of an AI-generated zero-day exploit intended for mass exploitation, highlighting a growing trend of adversaries using AI for malware development, defense evasion, and autonomous cyberattacks.
SentinelOne researchers noted that AI has reached human-level performance in fields such as reverse engineering, compressing malware analysis that previously took 4 to 6 weeks into about 8 hours. For the first time, this makes threat intelligence that correlates threats across samples and organizations affordable for defenders. OpenAI’s technology is shifting the asymmetric advantage in cybersecurity toward defenders.