Malware News
الذهاب إلى القناة على Telegram
The latest NEWS about malwares, DFIR, hacking, security issues, thoughts and ... Partner channel: @cveNotify For ads: https://telega.io/c/malwr
إظهار المزيد📈 نظرة تحليلية على قناة تيليجرام Malware News
تُعد قناة Malware News (@malwr) في القطاع اللغوي الإنكليزية لاعباً نشطاً. يضم المجتمع حالياً 16 124 مشتركاً، محتلاً المرتبة 7 979 في فئة التكنولوجيات والتطبيقات والمرتبة 2 301 في منطقة الولايات المتحدة.
📊 مؤشرات الجمهور والحراك
منذ تأسيسه في невідомо، حقق المشروع نمواً سريعاً وجمع 16 124 مشتركاً.
بحسب آخر البيانات بتاريخ 25 أكتوبر, 2026، تحافظ القناة على نشاط مستقر. خلال آخر 30 يوماً تغيّر عدد الأعضاء بمقدار -40، وفي آخر 24 ساعة بمقدار 1، مع بقاء الوصول العام مرتفعاً.
- حالة التحقق: غير موثّقة
- معدل التفاعل (ER): يبلغ متوسط تفاعل الجمهور 4.83%. وخلال أول 24 ساعة من النشر يحصد المحتوى عادةً 2.07% من ردود الفعل نسبةً إلى إجمالي المشتركين.
- وصول المنشورات: يحصل كل منشور على متوسط 778 مشاهدة. وخلال اليوم الأول يجمع عادةً 333 مشاهدة.
- التفاعلات والاستجابة: يتفاعل الجمهور بانتظام؛ متوسط التفاعلات لكل منشور يبلغ 2.
- الاهتمامات الموضوعية: يركز المحتوى على مواضيع رئيسية مثل threat, kernel, cve-2025, actor, attack.
📝 الوصف وسياسة المحتوى
يصف المؤلف القناة بأنها مساحة للتعبير عن الآراء الذاتية:
“The latest NEWS about malwares, DFIR, hacking, security issues, thoughts and ...
Partner channel: @cveNotify
For ads: https://telega.io/c/malwr”
بفضل وتيرة التحديث المرتفعة (أحدث البيانات بتاريخ 26 أكتوبر, 2026) تحافظ القناة على حداثتها ومستوى وصول مرتفع. وتُظهر التحليلات تفاعلاً نشطاً من الجمهور، ما يجعلها نقطة تأثير مهمة ضمن فئة التكنولوجيات والتطبيقات.
16 124
المشتركون
+124 ساعات
+147 أيام
-4030 أيام
أرشيف المشاركات
16 124
VAHPEM/rust-deobf: Recover what obfuscation hides in Rust binaries (strings, crates, library functions, flattened control flow) via static analysis + Unicorn emulation, without running them. For malware triage, protected-app audits. ELF/PE/Mach-O, x86-64/ARM64/32-bit.
https://github.com/VAHPEM/rust-deobf
🎖@malwr
16 124
x86rc/unthemidator: An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool
https://github.com/x86rc/unthemidator
🎖@malwr
16 124
Monitor the Situation | Live World News Map & OSINT Dashboard
Live world news map and OSINT conflict tracker: source-linked reports, aircraft, ships, GPS interference, internet outages and regional crisis views.
https://monitor-the-situation.com/
🎖@malwr
16 124
Vulnerability Attack Case: Installation of a Web Shell and Execution of a Scanner by Exploiting a Telerik UI Vulnerability
The AhnLab SEcurity intelligence Center (ASEC) has identified two vulnerability attack cases that exploited a remote code execution vulnerability (CVE-2019-18935) targeting unpatched Telerik UI for ASP.NET AJAX servers. In the first incident, after exploiting the vulnerability, the attacker executed a reverse shell, attempted to perform privilege escalation, and installed a web shell; in the second […]
https://asec.ahnlab.com/en/95561/
🎖@malwr
16 124
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved the way for a destructive attack against a Ukrainian grain firm
https://www.welivesecurity.com/en/eset-research/mythicratatoskr-yggdrasil-enabled-backdoor-deployed-uac0099-sandworm-collaboration/
🎖@malwr
16 124
Beware of Phishing Emails That Disguise Themselves as Project Material Purchase Requests
Recently, the AhnLab SEcurity intelligence Center (ASEC) identified a case of phishing emails that disguise themselves as project material purchase request forms. These emails impersonate employees of a specific company in Korea and trick recipients into opening a malicious XLS file attached to the email, which is disguised as a project material purchase request form. […]
https://asec.ahnlab.com/en/95598/
🎖@malwr
16 124
Dissecting Operation FlashHole, a complex attack by Lazarus
Kaspersky researchers analyze Operation FlashHole – a recent complex attack by Lazarus, involving a sophisticated malware set, watering-hole technique and abuse of CrossWeb EX financial security software.
https://securelist.com/lazarus-operation-flashhole/121541/
🎖@malwr
16 124
CyberLauncher: Static Analysis of a GTA VI-Themed Launcher Package
A hash-specific technical report on a deceptive launcher and installer chain. Static evidence, indicators, and limitations.
https://cyberlauncher-20261021-static-analysis.upbeatolm15.chatgpt.site/
🎖@malwr
16 124
figurophobia/gore: Godot RE toolkit: turn any Godot game (PCK/EXE) into an openable Godot project, with automatic encryption key recovery
https://github.com/figurophobia/gore
🎖@malwr
16 124
uCreator: virtualization-based Android spyware platform targeting WeChat, Telegram and other messaging apps
Introduction
uCreater (the vendor's own name for the product is YingGai) is a commercial Android surveillance platform built around 群控 (“mass control”). Branded through packages in the com.ucreator.* namespace, it is not a single malware family but a productized framework: a VirtualApp/LSPatch engine, a library of per-
https://www.0x0v1.com/ucreator-virtualization-based-android-spyware-platform-targeting-wechat-telegram-and-other-messaging-apps/
🎖@malwr
16 124
Does It Stop When Someone Is Watching? The Suspicious Behavior of a New Type of Infostealer
It is already well known that illegal software and cracked programs can be exploited for malware distribution. Recently, AhnLab identified a new type of information theft malware (Infostealer) disguised as an illegal program. This malware was first detected in mid-August and, after altering its execution method, began spreading widely in September. Notably, it not only […]
https://asec.ahnlab.com/en/95937/
🎖@malwr
16 124
How Some Malicious AI Skills Hide Instructions from Reviewers
https://blog.virustotal.com/2026/10/how-some-malicious-ai-skills-hide.html
🎖@malwr
16 124
microlift/rosemary: Compatibility layer and high level emulator hybrid for running macOS applications across operating systems and architectures
https://github.com/microlift/rosemary
🎖@malwr
16 124
ag3ntsc4rn/autorun-audit: Find code that runs without you asking: repo files that execute on folder open (VS Code tasks, agent hooks, MCP, devcontainers) and Python .pth/.start startup files.
https://github.com/ag3ntsc4rn/autorun-audit
🎖@malwr
16 124
giveen/decomp.anything: decomp.wtf fork: Windows PE matching, MinGW/clang-cl toolchains, and an optional REA MCP bridge
https://github.com/giveen/decomp.anything
🎖@malwr
16 124
Reverse Engineering Pokémon Sprites (LGPE)
Rebuilding Pokémon Switch sprite rendering pipeline (LGPE edition)
https://triyan.dev/blog/reverse-engineering-pokemon-sprites-lgpe
🎖@malwr
16 124
Ukraineâs State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
https://hunt.io/blog/ukraine-state-data-exchange-graylog-log4shell
🎖@malwr
16 124
Glassworm Hacks OVH Clouds CLI tool
On 2026-10-19, the official OVHcloud CLI tool was compromised by the Glassworm threat actors who published five malicious versions to GitHub and Brew
https://opensourcemalware.com/blog/glassworm-hacks-ovh-clouds-cli-tool
🎖@malwr
