reib3n @reib3n1

Malware Researcher at ESET LATAM Joined July 2019

Tweets

154
Followers

74
Following

626
Likes

209

ESET Research @ESETresearch

2 days ago

#ESETresearch uncovers GhostRedirector, a threat actor compromising Windows servers with a C++ Backdoor named Rungan and Gamshen, a native IIS malware welivesecurity.com/en/eset-resear… 1/6

1 51 127 18K 54

The embargo (12:00 UTC 2025-06-10) is over, let's start a thread on Hydroph0bia (CVE-2025-4275), a trivial SecureBoot and FW updater signature bypass in almost any Insyde H2O-based UEFI firmware used since 2012 and still in use today. English writeup: coderush.me/hydroph0bia-pa…

2 93 200 19K 73

ESET Research @ESETresearch

3 months ago

#ESETresearch analyzed a campaign deployed by BladedFeline, an 🇮🇷-aligned threat actor with likely ties to #OilRig. We discovered the campaign, which targeted Kurdish and 🇮🇶 government officials, in 2024. welivesecurity.com/en/eset-resear… 1/6

1 26 81 9K 33

x86matthew @x86matthew

7 months ago

Another pointless weekend project - a playable version of the old 3DMaze screensaver from Windows 9x. I reverse-engineered the original screensaver binary and added user-input functionality for the controls (and fixed some other minor issues!) github.com/x86matthew/Pla…

52 230 2K 108K 399

Download Video

bohops @bohops

7 months ago

Spotted another "Living off the..." project in the wild - LOTTunnels lottunnels.github.io

4 87 269 29K 159

BINARLY🔬 @binarly_io

9 months ago

🚨NEW from Binarly: "LogoFAIL Exploited to Deploy Bootkitty, the first UEFI bootkit for Linux". We found a direct connection between the newly discovered #Bootkitty Linux bootkit and in-the-wild weaponized exploitation of the #LogoFAIL vulnerability. binarly.io/blog/logofail-…

0 29 92 374K 29

Download Image

ESET Research @ESETresearch

9 months ago

#ESETresearch reveals the first Linux UEFI bootkit, Bootkitty. It disables kernel signature verification and preloads two ELFs unknown during our analysis. Also discovered, a possibly related unsigned LKM – both were uploaded to VT early this month. welivesecurity.com/en/eset-resear… 1/5

2 166 310 35K 129

ESET Research @ESETresearch

9 months ago

#ESETresearch discovered an #exploit targeting Firefox and Windows zero days, used in the wild by Russia-aligned #RomCom. Browsing a specially crafted web page runs arbitrary code with the privileges of the user, compromising the PC. @dmnsch & R.Dumont welivesecurity.com/en/eset-resear… 1/7

5 80 168 24K 70

Download Image

ESET Research @ESETresearch

10 months ago

#ESET research has identified #Linux malware samples, one of which we named #WolfsBane and attribute with high confidence to #Gelsemium. This 🇨🇳 China-aligned APT group , active since 2014, has not previously been publicly reported to use Linux malware. welivesecurity.com/en/eset-resear……

1 56 120 14K 37

ESET Research @ESETresearch

11 months ago

#ESETresearch investigated two previously undocumented toolsets used by the #GoldenJackal APT group, both of which target air-gapped systems. welivesecurity.com/en/eset-resear… 1/6

1 48 120 14K 41

ESET Research @ESETresearch

a year ago

ESETresearch discovered a zero-day exploit of #Telegram for Android allowing attackers to share malicious payloads that appear as video files via chat. We named the vulnerability being exploited #EvilVideo. welivesecurity.com/en/eset-resear… @LukasStefanko 1/4

3 50 117 18K 35

Download Image

vx-underground @vxunderground

a year ago

CrowdStrike has performed the largest ransomware attack in history. Accidentally.

194 2K 22K 1.1M 838

Qualys @qualys

a year ago

The award-winning Qualys Threat Research Unit (TRU) has discovered a critical vulnerability in OpenSSH, designated CVE-2024-6387 and aptly named "regreSSHion." This Remote Code Execution bug grants full root access, posing a significant exploitation risk. blog.qualys.com/vulnerabilitie…