NEW BOT Телеграм, страница

Banda criminal venezolana "Tren de Aragua" ataca cajeros automáticos usando Malware 🇺🇸🇻🇪

Según un informe del Departamento de Justicia de EEUU la banda criminal transnacional venezolana se encuentra pirateando cajeros automaticos dentro de los EEUU.

El Departamento de Justicia anunció el jueves dos acusaciones del gran jurado federal que acusan a 54 personas por su presunto papel en una campaña para desarrollar e implementar una variante del malware Ploutus, lo que les permite robar cientos de miles de dólares de cajeros automáticos en todo Estados Unidos.

Ploutus es un Malware desarrollado en C# y altamente obfuscado que apareció por primera vez en el año 2013 en México y desde entonces se fueron encontrando varias variantes, su ultima actividad se registro en el estado de Nebraska, EEUU en donde los miembros de la banda sustrajeron $79,200 de un cajero automático.

FUENTE:
https://therecord.media/doj-charges-gang-malware-ploutus

#mexico #eeuu #malware

😁1

40 viewsGolden Byte, 15:34

Low Level CO 🇨🇴

Forwarded from 1N73LL1G3NC3

boflink

Boflink is a tool designed to act as a sort of fill-in for the missing linking stage that comes with the BOF development process. It is a linker that takes unmodified object files generated by a compiler and links them together into a Beacon Object File capable of being loaded by a BOF loader.

Its main goal is to act as a bridge between the BOF development and the BOF loading process to help simplify them.

Blog: Boflink: A Linker For Beacon Object Files

37 viewsGolden Byte, 09:48

Low Level CO 🇨🇴

Task Injection – Exploiting agency of autonomous AI agents

#exploitation
#llm_exploitation

@ZwLowLevel
https://bughunters.google.com/blog/4823857172971520/task-injection-exploiting-agency-of-autonomous-ai-agents

Google

Blog: Task Injection – Exploiting agency of autonomous AI agents

Check this post to find out what a Task Injection attack is, how this type of attack differs from Prompt Injection, and how it is particularly relevant to AI agents designed for a wide range of actions and tasks.

42 viewsGolden Byte, 14:05

Low Level CO 🇨🇴

97Kickstvr - Moonlight

97Kickstvr

42 viewsGolden Byte, 14:10

Low Level CO 🇨🇴

Windows_instrumentation_callback - Simple Tool for Observing System Calls

Implement the undocumented Process Instrumentation Callback in Windows x64 to intercept kernel-to-user mode transitions for enhanced execution integrity.

#windows_internals
#windows_kernel

@ZwLowLevel
https://github.com/dadde2006/windows_instrumentation_callback

GitHub

GitHub - dadde2006/windows_instrumentation_callback: 🛠️ Implement the undocumented Process Instrumentation Callback in Windows…

🛠️ Implement the undocumented Process Instrumentation Callback in Windows x64 to intercept kernel-to-user mode transitions for enhanced execution integrity. - dadde2006/windows_instrumentation_call...

52 viewsGolden Byte, 14:20

Low Level CO 🇨🇴

PEB Walking: Resolve DLLs export symbols.

#windows_internals
#malware_development
#maldev
#malwaredev

@ZwLowLevel

Golden Byte

PEB Walking: Resolve DLLs export symbols.

47 viewsGolden Byte, edited 18:28

Low Level CO 🇨🇴

Forwarded from Proxy Bar

From Veeam to Domain Admin
*
read

36 viewsGolden Byte, 19:10

Low Level CO 🇨🇴

CVE-2025-38352 - In-the-wild Android Kernel Vulnerability Analysis + PoC

#android_internals
#android_security
#ring_0
#ring0
@ZwLowLevel

faith2dxy.xyz

CVE-2025-38352 (Part 1) - In-the-wild Android Kernel Vulnerability Analysis + PoC

Part 1 (This blog post) - In-the-wild Android Kernel Vulnerability Analysis + PoC Part 2 - Extending The Race Window Without a Kernel Patch CVE-2025-38352 was a…

43 viewsGolden Byte, edited 18:00

Low Level CO 🇨🇴

DynamoRIO

Dynamic Instrumentation Tool Platform

#binary_analysis

@ZwLowLevel
https://github.com/DynamoRIO/dynamorio

GitHub

GitHub - DynamoRIO/dynamorio: Dynamic Instrumentation Tool Platform

Dynamic Instrumentation Tool Platform. Contribute to DynamoRIO/dynamorio development by creating an account on GitHub.

42 viewsGolden Byte, 22:35

Low Level CO 🇨🇴

Callback hell: abusing callbacks, tail-calls, and proxy frames to obfuscate the stack

#malwaredev
#maldev
#malware_development

@ZwLowLevel
https://klezvirus.github.io/posts/Callback-Hell/

klezVirus

Callback hell: abusing callbacks, tail-calls, and proxy frames to obfuscate the stack

Foreword

37 viewsGolden Byte, 06:59

Low Level CO 🇨🇴

Is Unsafe the Original Sin? A Deep Dive into the First CVE After Rust Entered the Linux Kernel

#rust
#linux_kernel
@ZwLowLevel

DEV Community

Is Unsafe the Original Sin? A Deep Dive into the First CVE After Rust Entered the Linux Kernel

Prelude: A Predictable Controversy On December 16, 2025, a peculiar entry appeared in the...

37 viewsGolden Byte, 07:05

Low Level CO 🇨🇴

Stealthy Windows audio-capture tool with UDP exfiltration and randomized transmission intervals, designed for evasion-focused Red Team operations.