NEW BOT Телеграм, страница

Low Level CO 🇨🇴

The Mac Malware of 2025 👾

#malware_analysis
#cyber_threat_intelligence
#cti
@ZwLowLevel

objective-see.org

The Mac Malware of 2025 👾

A comprehensive analysis of the year's new macOS malware

35 viewsGolden Byte, 20:39

Low Level CO 🇨🇴

PatchGuard Peekaboo: Hiding Processes on Systems with PatchGuard in 2026

#windows_internals
#windows_kernel
#reverse_engineering
#reversing
@ZwLowLevel

100 viewsGolden Byte, 07:03

Low Level CO 🇨🇴

Low Level CO 🇨🇴 pinned «PatchGuard Peekaboo: Hiding Processes on Systems with PatchGuard in 2026 #windows_internals #windows_kernel #reverse_engineering #reversing @ZwLowLevel »

07:04

Low Level CO 🇨🇴

Tutorial: DLL Sideloading and function proxying with ShellcodePack

#malware_development
#maldev
#malwatedev
@ZwLowLevel

Medium

Tutorial: DLL Sideloading and function proxying with ShellcodePack

DLL sideloading is a technique that allows an attacker to have a legitimate signed application run some malicious code on Windows. It work…

27 viewsGolden Byte, 14:05

Low Level CO 🇨🇴

Debugging WinDbg with WinDbg: Fixing a Ctrl-C UI Freeze

https://www.island.io/blog/debugging-windbg-with-windbg-fixing-a-ctrl-c-ui-freeze

#reversing
#reverse_engineering
@ZwLowLevel

Island.io

Fixing the Windows Debugger freeze when copying text

Follow an Island engineer’s deep dive into fixing a years-old Windows Debugger issue - the few-second freeze when copying text from WinDbg.

24 viewsGolden Byte, 18:50

Low Level CO 🇨🇴

Clang Hardening Cheat Sheet - Ten Years Later

https://blog.quarkslab.com/clang-hardening-cheat-sheet-ten-years-later.html

#programming
#overrun
#rop
#memory_protection
@ZwLowLevel

Quarkslab

Clang Hardening Cheat Sheet - Ten Years Later - Quarkslab's blog

Ten years ago, we published a Clang Hardening Cheat Sheet. Since then, both the threat landscape and the Clang toolchain have evolved significantly. This blog post presents the new mitigations available in Clang to improve the security of your applications.

25 viewsGolden Byte, 20:10

Low Level CO 🇨🇴

Ghost Tapped: Tracking the Rise of Chinese Tap-to-pay Android Malware

#malware_analysis
#cyber_threat_intelligence
#cti
🆔 @ZwLowLevel

24 viewsGolden Byte, 20:16

Low Level CO 🇨🇴

🇮🇷 Internet blackout in Iran

23 viewsGolden Byte, 20:43

Low Level CO 🇨🇴

Golden Byte

🇮🇷 Internet blackout in Iran

El pueblo de Irán necesita de Starlink u otro medio de comunicación alternativo en momentos de tensión interna.

😁1

22 viewsGolden Byte, 20:47

Low Level CO 🇨🇴

IDontLikeFileLocks

This technique could be (and probably is/will be) used by stealer malware to silently extract browser credentials and session tokens without killing processes or triggering obvious file access patterns.

#malware_development
#malwaredev
#maldev
🆔 @ZwLowLevel

GitHub

GitHub - EvilBytecode/IDontLikeFileLocks: Title is self explaining, well theres few methods we can do to read locked file and play…

Title is self explaining, well theres few methods we can do to read locked file and play with it... - EvilBytecode/IDontLikeFileLocks

18 viewsGolden Byte, 06:29

Low Level CO 🇨🇴

Obfusk8: C++17-Based Obfuscation Library

#obfuscation
#obfuscate

🆔 @ZwLowLevel

22 viewsGolden Byte, edited 06:31

Low Level CO 🇨🇴

Evasive Remote Memory Write

#malware_development
#maldev
#malwaredev
🆔 @ZwLowLevel

Medium

Evasive Remote Memory Write

Welcome to this new Medium post, in this article, I’ve developed a custom technique for remotely writing arbitrary data (such as a payload…

19 viewsGolden Byte, 07:02

Low Level CO 🇨🇴

Use-After-Free, ASLR Bypass and a Binary exploitation CTF

#binary_exploitation
🆔@ZwLowLevel

Medium

Use-After-Free, ASLR Bypass, and a Practical Binary Exploitation CTF

Binary exploitation is often seen as one of the hardest areas in offensive
security. Unlike web vulnerabilities, where issues usually…

20 viewsGolden Byte, 18:47

Low Level CO 🇨🇴

Malicious Process Environment Block Manipulation

#windows_internals
#malware_development
#malwaredev
#maldev
🆔 @ZwLowLevel

SANS Internet Storm Center

Malicious Process Environment Block Manipulation - SANS ISC

Malicious Process Environment Block Manipulation, Author: Xavier Mertens

19 viewsGolden Byte, 18:49

Low Level CO 🇨🇴

Reborn in Rust: Muddy Water Evolves Tooling with RustyWater Implant

#malware_analysis
#cyber_threat_intelligence
#cti
🆔 @ZwLowLevel

Cloudsek

Reborn in Rust: Muddy Water Evolves Tooling with RustyWater Implant | CloudSEK

CloudSEK's TRIAD recently identified a spear-phishing campaign attributed to the Muddy Water APT group targeting multiple sectors across the Middle East, including diplomatic, maritime, financial, and telecom entities. The campaign uses icon spoofing and…

21 viewsGolden Byte, 18:57

Low Level CO 🇨🇴

Don't forget guys, you can seek in this channel posts related to exploit and malware development, reversing, Windows internals, firmware analysis, low level concepts and cutting edge techniques. Stay well!

21 viewsGolden Byte, 18:57

Low Level CO 🇨🇴

Weaponizing AppLocker to Blind Windows Defender

#edr_bypass
#edr_evasion
🆔 @ZwLowLevel

YouTube

🚨 Weaponizing AppLocker

In this episode of Weekly Purple Team, we explore how attackers can abuse Windows AppLocker policies to effectively blind Windows Defender and other EDR solutions. This technique leverages legitimate Windows functionality to block security tools from executing…

22 viewsGolden Byte, 20:34

Low Level CO 🇨🇴

Microsoft-specific exception handling mechanisms

Microsoft-specific exception handling mechanisms primarily refer to Structured Exception Handling (SEH), a set of extensions to the C and C++ languages provided by Microsoft Visual Studio compilers for managing exceptional conditions, such as hardware faults and software errors, in Windows environments.