Malware News
前往频道在 Telegram
The latest NEWS about malwares, DFIR, hacking, security issues, thoughts and ... Partner channel: @cveNotify For ads: https://telega.io/c/malwr
显示更多📈 Telegram 频道 Malware News 的分析概览
频道 Malware News (@malwr) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 16 196 名订阅者，在 技术与应用 类别中位列第 7 752，并在 美国 地区排名第 2 304 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 16 196 名订阅者。
根据 15 九月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 122，过去 24 小时变化为 -9，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 3.82%。内容发布后 24 小时内通常能获得 1.93% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 618 次浏览，首日通常累积 312 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 1。
- 主题关注点： 内容集中在 threat, kernel, cve-2025, actor, attack 等核心主题上。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“The latest NEWS about malwares, DFIR, hacking, security issues, thoughts and ...
Partner channel: @cveNotify
For ads: https://telega.io/c/malwr”
凭借高频更新（最新数据采集于 16 九月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
16 196
订阅者
-924 小时
-357 天
+12230 天
帖子存档
16 199
SilkParasite Infrastructure: SpiceRAT Servers Tied to Energy and Government Targets Across Central Asia
Hunt.io SpiceRAT detections identified shared infrastructure artifacts across malware families in Bitdefenderâs SilkParasite report, connecting servers to Central Asian energy, government, and telecom targets.
https://hunt.io/blog/silkparasite-spicerat-central-asia-infrastructure
🎖@malwr
16 199
cloudflare/security-audit-skill: A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
https://github.com/cloudflare/security-audit-skill
🎖@malwr
16 199
Tajin Group: Guarantee Marketplace Vendor Involved in Phishing and Chinese Money Laundering Group
Analyze Tajin Group's role in phishing and Chinese money laundering. Discover how this Telegram-based vendor exploits payment gateways and adapts its financial fraud operations.
https://www.recordedfuture.com/research/tajin-group-gurantee-marketplace
https://assets.recordedfuture.com/insikt-report-pdfs/2026/cta-2026-0915.pdf
🎖@malwr
16 199
bombinisecurity/bombini: eBPF Security Monitoring and Sandboxing Agent Based on Aya
https://github.com/bombinisecurity/bombini
🎖@malwr
16 199
Idov31/Silverseal: Silverseal is a Linux framework containing a bootkit, rootkit loader and a rootkit
https://github.com/Idov31/Silverseal
🎖@malwr
16 199
LumosLab-Innovation/OpenHunterAI: Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding agents.
https://github.com/LumosLab-Innovation/OpenHunterAI
🎖@malwr
16 199
The Harness Matters: Cutting AI Reverse-Engineering Tokens by 33%
A controlled AgentRE-Bench comparison shows how Reverser Space used 33% fewer tokens and 35% fewer analysis calls without a meaningful score loss.
https://reverser.space/blog/the-harness-matters-ai-reverse-engineering/
🎖@malwr
16 199
Black God Linux — Offensive Security, Re-Engineered
Purpose-built for speed and automation. 300+ tools, 5.4x faster recon velocity, and native Apple Silicon hardware acceleration.
https://sabarishyuvasri8-del.github.io/black-god-linux/
🎖@malwr
16 199
Ilias1988/LOLBins-Reference: A unified, interactive reference for Living Off The Land Binaries (LOLBAS & GTFOBins). Features a dynamic payload builder (LHOST/LPORT), real-time search, MITRE ATT&CK mapping, and auto-updates from official sources.
https://livingofftheland.dev/
https://github.com/Ilias1988/LOLBins-Reference
🎖@malwr
16 199
Decompilation Book
Build a decompiler to understand one. A chapter-by-chapter walk from RV32I machine code back to readable C, with the working Python implementation open beside you.
https://decompilation.education/
🎖@malwr
16 199
Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days | Proofpoint US
Analyst note: Proofpoint uses the UNK_ designator to define clusters of activity that are still developing and have not been observed for long enough to receive a numerical TA designation.
https://www.proofpoint.com/us/blog/threat-insight/once-bluemoon-multiple-state-aligned-threat-actors-rapidly-adopt-novel-exploit
🎖@malwr
16 199
Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers | FortiGuard Labs
FortiGuard Labs examines how a new Casbaneiro campaign targeting Latin America uses geofencing and distributed servers to evade analysis and detection…
https://www.fortinet.com/blog/threat-research/casbaneiro-a-banking-trojan-with-distributed-data-receiving-servers
🎖@malwr
16 199
AsyncRAT Delivered via AutoIT: Full Chain Analysis | Point Wild
Point Wild
https://www.pointwild.com/threat-intelligence/asyncrat-delivered-via-autoit-full-chain-analysis/
🎖@malwr
16 199
Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure
An investigation into how cybercriminals used YouTube gaming lures and SEO poisoning to deliver multi-payload malware to enterprise networks.
https://unit42.paloaltonetworks.com/ppi-network-malware-campaign-analysis/
🎖@malwr
16 199
matheus-git/binkit: A modular toolbox for analyzing, disassembling, and patching binary formats.
https://github.com/matheus-git/binkit/
🎖@malwr
16 199
SnailSploit/Claude-Red: claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
https://github.com/SnailSploit/Claude-Red
🎖@malwr
16 199
2026-09-11: Traffic analysis exercise - Kongtuke Rebuke!
https://www.malware-traffic-analysis.net/2026/09/11/index.html
🎖@malwr
16 199
https://www-cdn.anthropic.com/e50be2e51e7695dc4b1366a37a245a597377d3b5/Anthropic-Detecting-and-countering-091026.pdf
Detecting and countering misuse of AI
September 2026
🎖@malwr
16 199
PirusPoker/ghidra-ai-copilot: AI reverse-engineering assistant for Ghidra - analyze functions with Claude, right inside the tool.
https://github.com/PirusPoker/ghidra-ai-copilot
🎖@malwr
16 199
Windows Kernel Pool Internals
Good morning! In today’s blog post we’re going to dive into a topic that has interested me for quite some time, the Windows kernel pool. It’s a topic that tends to have “scarce” documentation online and can be somewhat intricate. That’s precisely why it has captured my attention from the beginning.
https://r0keb.github.io/posts/Windows-Kernel-Pool-Internals/
🎖@malwr
